Curriculum
- 2 Sections
- 36 Lessons
- 26 Weeks
- ISO 4500111
- 1.1Introduction to ISO 45001 and Occupational Health & Safety Management Systems (OH&S)
- 1.2Key Terms and Definitions in ISO 45001
- 1.3Context of the Organization (Clause 4 of ISO 45001)
- 1.4Leadership and Worker Participation (Clause 5 of ISO 45001)
- 1.5Planning (Clause 6 of ISO 45001)
- 1.6Support (Clause 7 of ISO 45001)
- 1.7Operation (Clause 8 of ISO 45001)
- 1.8Performance Evaluation (Clause 9 of ISO 45001)
- 1.9Improvement (Clause 10 of ISO 45001)
- 1.10Integrating ISO 45001 with Other Management Systems
- 1.11Risk-Based Thinking and Continuous Improvement in ISO 45001
- ISO 19011: Guidelines for auditing management systems26
- 2.1Introduction to ISO19011
- 2.2Principles of Auditing
- 2.3Managing an Audit Program
- 2.4Establishing Audit Program Objectives
- 2.5Determining Audit Program Risks and Opportunities
- 2.6Establishing the Audit Program
- 2.7Implementing the Audit Program
- 2.8Monitoring the Audit Program
- 2.9Reviewing and Improving the Audit Program
- 2.10Initiating the Audit
- 2.11Determining Audit Feasibility
- 2.12Preparing Audit Activities
- 2.13Reviewing Documented Information
- 2.14Preparing the Audit Plan
- 2.15Assigning Work to the Audit Team
- 2.16Preparing Working Documents
- 2.17Opening Meeting
- 2.18Communication During the Audit
- 2.19Collecting and Verifying Information
- 2.20Generating Audit Findings
- 2.21Preparing Audit Conclusions
- 2.22Closing Meeting
- 2.23Preparing the Audit Report
- 2.24Completing the Audit
- 2.25Follow-Up Activities
- 2.26ISO45001 Exam120 Minutes40 Questions
Performance Evaluation (Clause 9 of ISO 45001)
Overview of Performance Evaluation
Clause 9 of ISO 45001 focuses on performance evaluation, which ensures that an organization’s Occupational Health and Safety Management System (OH&SMS) is effectively monitored, measured, analyzed, and reviewed. Performance evaluation provides the evidence needed to determine whether the OH&SMS achieves its intended outcomes, complies with legal requirements, and continuously improves. For Lead Auditors, this clause is essential because it connects planning, operation, and support with measurable results, revealing strengths and weaknesses in the system.
Performance evaluation involves collecting data, analyzing trends, assessing compliance, conducting internal audits, and performing management reviews. Auditors must assess not only the existence of these processes but also their effectiveness in driving continual improvement.
ISO 45001 requires organizations to establish processes to monitor and measure OH&S performance. Monitoring may include workplace inspections, safety observations, environmental measurements, health surveillance, and tracking incidents or near misses. Measurement involves quantifying outcomes such as incident rates, lost time injuries, or compliance with legal requirements.
Analysis and evaluation involve interpreting monitoring and measurement results to determine trends, identify areas for improvement, and assess the effectiveness of controls. For example, a spike in near-miss reports may indicate emerging risks that require immediate attention.
Auditors must examine whether data collection is systematic, accurate, and representative of actual operations. Evidence can include inspection reports, performance dashboards, health records, and trend analyses. Auditors should also verify that results are reviewed by responsible personnel and that decisions are based on reliable data rather than assumptions.
Incident investigation is a key aspect of performance evaluation. Organizations must investigate work-related incidents and near misses to identify root causes, determine corrective actions, and prevent recurrence. Effective investigations go beyond superficial causes, addressing systemic issues such as procedural gaps, training deficiencies, or leadership failures.
Auditors should review investigation reports, corrective action records, and follow-up verification to ensure that nonconformities are resolved. Common deficiencies include incomplete root cause analysis, delayed corrective actions, and failure to implement preventive measures across similar processes.
Internal Audit
ISO 45001 requires organizations to conduct internal audits at planned intervals to evaluate the OH&SMS’s conformity with the standard, legal requirements, and organizational policies. Internal audits assess the effectiveness of processes, verify implementation of objectives, and identify opportunities for improvement.
Auditors must examine audit plans, criteria, scopes, schedules, and reports to ensure that internal audits are systematic, objective, and comprehensive. They should also verify that internal auditors are competent, independent, and supported by adequate resources. Follow-up actions from previous audits must be reviewed to confirm that nonconformities are effectively addressed.
Management Review
Management review is a critical mechanism for top management to evaluate OH&S performance, assess system effectiveness, and allocate resources for improvement. The review considers inputs such as monitoring and measurement results, incident data, audit findings, compliance status, changes in context, and worker feedback.
Auditors should verify that management reviews are conducted regularly, documented, and result in decisions that enhance OH&S performance. Evidence may include meeting minutes, action plans, updated objectives, and resource allocation records. Reviews that are superficial or fail to lead to action may indicate weak leadership commitment and reduce the OH&SMS’s effectiveness.
Performance evaluation relies on relevant and measurable indicators to assess OH&S outcomes. Key Performance Indicators (KPIs) may include incident frequency rates, lost time injury rates, near-miss reporting trends, training completion rates, and compliance with procedures. KPIs must align with organizational objectives, risk assessments, and legal requirements.
Auditors should verify that KPIs are meaningful, monitored consistently, and used to inform decision-making. Organizations that select irrelevant or inconsistent indicators may fail to identify critical risks or track improvement effectively.
ISO 45001 requires organizations to monitor and evaluate compliance with applicable legal and other requirements. Compliance evaluation may involve inspections, audits, regulatory reporting, and legal reviews. Auditors should assess whether the organization has a structured process for tracking compliance, addressing gaps, and implementing corrective actions.
Evidence may include compliance checklists, inspection records, regulatory correspondence, and corrective action logs. Failure to evaluate compliance effectively can lead to penalties, increased risk, and reduced confidence in the OH&SMS.
When auditing Clause 9, Lead Auditors should examine whether performance evaluation processes are systematic, integrated, and effective. This includes reviewing monitoring and measurement data, incident investigations, internal audits, and management review records. Auditors must verify that results are analyzed, used to inform decisions, and lead to continual improvement.
Common audit findings include incomplete data collection, delayed investigations, ineffective corrective actions, poorly conducted internal audits, and superficial management reviews. Identifying these gaps allows organizations to strengthen their OH&SMS, enhance safety culture, and reduce risks to workers.
Performance evaluation is a critical feedback mechanism in ISO 45001, connecting all other clauses with measurable outcomes and evidence-based improvement. For auditors, it provides rich insight into the actual effectiveness of the system and its alignment with organizational objectives.