The evidence set every ISO 45001 auditor samples
- Internal audit and management review completed, with findings closed or actively managed.
- Compliance evaluation records (9.1.2): proof you checked yourself against your legal register recently, not just that the register exists.
- Hazard identification and risk assessments that are current, cover routine and non-routine activities, and visibly involved the workers exposed.
- Emergency drill records with identified weaknesses and the follow-up actions.
- Incident and near-miss records flowing through investigation to corrective action with effectiveness checks.
- Consultation evidence: committee minutes, worker-raised issues, and what happened to them.
Prepare the floor, not the front office
Auditors interview the people doing hazardous work, and they weight those interviews heavily. Workers need to answer, in their own words: what are the hazards in your task, what controls do you use, what would make you stop work, how do you report a concern, and what happened last time you did. If night shifts, remote crews, or subcontractors are in scope, prepare them too; sampling deliberately reaches the corners managers visit least.
The contractor question
Expect deep interest in how you select, induct, control, and monitor contractors (clause 8.1.4). Have ready: your contractor evaluation criteria, a current induction record, a permit or control example from recent work, and evidence of monitoring their performance. Contractor management is among the most frequent sources of major findings in first ISO 45001 audits because it crosses organizational boundaries where systems fray.
Audit-day discipline
Confirm the plan and attendees in advance, appoint guides who know where records and locations are, and brief everyone on one rule: answer honestly and do not improvise paperwork. If the auditor finds a gap, the strongest possible response is your own corrective action process visibly engaging with it before the closing meeting. Systems that respond to findings in real time demonstrate exactly the capability the standard exists to verify.