ISO 45001: Workplace-Safety Evidence Before an Audit

ISO 45001 addresses occupational health and safety management systems. At this source check, ISO lists the published 2018 edition, a 2024 climate-action amendment and a successor still at draft stage. A draft is not a newly published replacement. Confirm the edition and amendments in your audit agreement. [S24]

Start with the work people actually do

Ask operators, maintenance staff, supervisors and contractors where the written procedure differs from everyday work. List routine tasks, occasional work and changes such as new machinery or a different shift arrangement. This preparation does not replace a competent hazard assessment or the action needed for an immediate unsafe condition.

A practical evidence worksheet

• Tasks: identify who performs each activity, where it happens and what has changed.
• Controls: record the controls in use and who checks that they remain effective.
• People: organise training records, authorisations and the way workers raise concerns.
• Incidents: keep the original report, investigation, corrective action and follow-up check together.
• Contractors: agree who coordinates access, induction, work permissions and emergency communication.

Make findings actionable

Instead of writing “training completed,” record the training subject, attendees, date, trainer and how competence will be checked. Instead of closing a finding with “staff informed,” record what changed and whether the same problem recurred. These are evidence-management suggestions, not a declaration that a particular legal or ISO requirement has been met.

Keep an audit separate from legal compliance

The worksite's applicable safety obligations need their own assessment. A management-system certificate is not an assurance that accidents cannot happen or that every workplace condition is lawful. Do not delay urgent safety action until a consultant visit or certification audit.

Check the certification proposal

Ask for the locations, activities, people and shifts included in scope; the planned audit days; any follow-up charges; and the certificate verification route. ISO does not issue these certificates. The external certification body must be identified in the proposal. [S23]

What should remain after the project?

A usable responsibility list, genuine operating records, a way to report and investigate concerns, and a plan to maintain the system. A template pack with no connection to the workplace is not evidence of effective implementation. Any claim about reduced injuries must be supported by genuine, appropriately interpreted records; none is asserted here.