A good audit follows the work, not the checklist.
An ISO 45001 internal audit evaluates whether an occupational health and safety management system meets selected audit criteria and is implemented effectively. It should help an organisation understand weaknesses before they contribute to harm. That calls for an audit plan informed by workplace activities, relevant risks and the way controls are intended to function.
The ISO 45001 Internal Auditor Course examines audit programme planning, the selection of relevant audit criteria, evidence gathering, interview techniques, observations, evaluation, reporting and corrective-action follow-up. The approach draws on the auditing principles and good practices described in ISO 19011, while keeping ISO 45001 as the applicable OHSMS audit reference.
For example, a site may have a procedure requiring checks before work at height. An auditor should not stop after seeing the form. A useful sample might include training records, planning information, equipment inspections, workers’ understanding and site observations. Any finding must be supported by evidence and linked to the criterion being assessed.
Internal audits require respect for people and the workplace. The aim is not to blame individuals or invent requirements, but to identify where controls are absent, unclear or ineffective and to explain the evidence in a way that management can act upon.