Course Title

1. Introduction to Occupational Health and Safety Auditing

1.1 Purpose and Principles of Internal Auditing

• Defining internal auditing and its role in verifying safety management effectiveness

• Overview of the ISO 19011 framework and its application to OH&S audits

• Differences between first-party, second-party, and third-party audits

• Common shortcomings in OH&S internal audits including (superficial document review and inconsistent evidence gathering)

1.2 ISO 45001 Structure and Key Requirements

• Overview of the ISO 45001:2018 clause structure including (context, leadership, and planning)

• Understanding hazard identification and risk assessment requirements

• Worker consultation and participation requirements

• Operational planning and control requirements

2. Audit Program Planning

2.1 Establishing the Audit Program

• Defining audit program objectives, scope, and resource allocation

• Determining audit frequency based on risk and process criticality

• Auditor competence and independence requirements

• Coordinating audit logistics including (scheduling and auditee notification)

2.2 Preparing for the Audit

• Defining audit scope, criteria, and objectives for a specific audit

• Reviewing relevant documentation including (risk register and prior audit reports)

• Developing audit checklists aligned to high-risk process areas

• Preparing an audit plan and coordinating with auditees

3. Audit Techniques and Evidence Gathering

3.1 Gathering Objective Evidence

• Interviewing techniques for workers and process owners

• Observation techniques including (verifying practice against procedure on-site)

• Sampling methodology for evidence collection

3.2 Document and Record Review

• Reviewing safety records including (incident logs, training records, and inspection reports)

• Verifying traceability and consistency of safety documentation

• Identifying documentation gaps requiring further investigation

4. Auditing Hazard Identification and Risk Management

4.1 Auditing Hazard and Risk Processes

• Verifying hazard identification and risk assessment processes

• Auditing the hierarchy of control application to identified risks

• Reviewing risk assessment currency and review triggers

4.2 Auditing Worker Participation

• Verifying worker consultation and participation mechanisms

• Auditing hazard reporting and near-miss reporting processes

• Reviewing evidence of worker involvement in risk assessments

5. Auditing Operational Controls and Emergency Preparedness

5.1 Operational Controls

• Auditing permit-to-work and high-risk task control processes

• Verifying operational controls for identified significant risks

• Reviewing contractor and supplier safety control requirements

5.2 Emergency Preparedness and Incident Management

• Auditing emergency preparedness planning and drill records

• Verifying incident investigation and corrective action processes

• Reviewing injury and illness recordkeeping compliance

6. Identifying and Classifying Audit Findings

6.1 Distinguishing Conformance from Non-Conformance

• Applying objective evidence standards to audit conclusions

• Classifying findings including (minor non-conformance, major non-conformance, and observation)

6.2 Writing Clear Non-Conformance Statements

• Structuring findings including (requirement, evidence, and conclusion)

• Avoiding common findings-writing errors including (vague language and unsupported conclusions)

7. Audit Reporting and Communication

7.1 Structuring the Audit Report

• Organizing findings for clarity including (summary, findings, and conclusions)

• Conducting the closing meeting and presenting findings to auditees

7.2 Communicating Findings Effectively

• Communicating findings objectively and constructively

• Managing auditee disagreement or pushback during reporting

8. Corrective Action and Audit Follow-Up

8.1 Reviewing Corrective Actions

• Evaluating corrective action plans submitted by auditees

• Verifying root cause adequacy in proposed corrective actions

8.2 Closing Out and Reporting Trends

• Verifying corrective action implementation and effectiveness

• Closing out audit findings and updating audit records

• Reporting audit program trends to management

9. Group Discussion and Case Studies

• Case studies on ISO 45001 internal audit findings including (unassessed hazards, incomplete worker participation, and ineffective corrective actions) and lessons learned

• Group discussion on common auditor challenges including (auditee resistance and maintaining objectivity)

• Sharing regional best practices including (multi-site OH&S audit coordination)

• Discussion on embedding a value-adding internal audit culture within safety management systems