How to implement internal audits for the ISO 45001 standard

An internal audit is a systematic, independent, and documented process to objectively verify whether the desired objectives of a management system established according to ISO 45001:2018, "Occupational Health and Safety Management Systems - Requirements with Guidance for Use", have been achieved.

Any organization holding ISO 45001 certification or aspiring to obtain it must demonstrate commitment to continuous improvement regarding occupational health and safety matters. Internal audits serve both to identify deviations from intended operations and drive improvements, while also fulfilling a key ISO 45001 requirement that deems them essential for the success of an organization's occupational health and safety management system.

During the audit process, evidence is documented to confirm or disprove compliance with the standard's requirements. Organizations may face internal and external issues impacting effective safety management implementation, including workforce matters, organizational expectations, or compliance with legal requirements. Internal audits specifically verify:

1. Roles, responsibilities, and authorities in maintaining safety standards
2. Proper functioning of safety-related processes
3. Effective communication of issues across organizational levels
4. Maintenance of safety focus through formalized findings and records

To properly conduct an ISO 45001-focused internal audit:

1. Ensure comprehensive understanding of processes to be analyzed
2. Prepare all relevant documentation in advance (internal audit plan, stakeholder communications regarding scope/objectives/criteria)
3. Demonstrate effective questioning and active listening skills
4. Conduct opening/closing meetings to explain methodology and present findings
5. Align audit activities with process metrics, quality objectives, and continuous improvement
6. Collect sufficient supporting data for findings
7. Prepare and distribute post-audit documentation (nonconformities, observations, conclusions)

Essential auditor competencies for OH&S management system audits:

1. Expert knowledge of ISO 45001 requirements
2. Thorough understanding of organizational structure and procedures
3. Advanced risk management proficiency
4. Methodical, logic-based approach
5. Strong analytical evaluation skills
6. Clear conceptual communication abilities
7. Precise technical writing capability
8. Mastery of root cause analysis and corrective action processes

The internal audit report provides documented verification results and critical recommendations based on detailed analysis of policies, processes, risk controls, and overall safety management implementation.