PECB ISO-45001-Lead-Auditor - PECB Certified OHSMS ISO 45001 Lead Auditor Exam

Analysis of Each Option:

ISO 45001 emphasizes worker participation and engagement at all levels of the organization to support continuous improvement (Clause 5.4 and Clause 10.3). Continuous improvement requires input from everyone, including workers who identify hazards, report incidents, and contribute to safety enhancements.

Analysis of Options:

A. Everyone, at all levels of the company: Correct. Clause 5.4 explicitly includes all levels of the organization in consultation and participation, fostering continuous improvement.

B. Top management and senior officers only: Incorrect. While top management plays a crucial role in leadership, ISO 45001 extends the responsibility for participation to all levels.

C. Top management, senior officers, and designated safety representatives only: Incorrect. Limiting participation to designated representatives excludes a significant portion of the workforce from the improvement process.

D. Top management only: Incorrect. While top management must lead and commit to continuous improvement, their involvement alone is insufficient under ISO 45001.

ISO References:

Clause 5.4: Worker consultation and participation.

Clause 10.3: Continual improvement.

The auditor should assess whether the organization ' s planned action (using masks in case of dust extraction failure) is both implemented and effective. This aligns with ISO 45001 requirements to ensure that control measures are functional and meet the intended objectives.

Clause 8.1.2 (Hierarchy of Controls): The use of PPE, such as masks, is considered a last resort in the hierarchy of controls. The organization must demonstrate that the measure is:

Implemented (e.g., PPE is available and workers are trained to use it).

Effective (e.g., masks provide adequate protection against dust).

Analysis of Options:

A. Advise that the factory should cease operations if the dust extraction equipment malfunctioned. While ceasing operations may be a necessary control in extreme situations, it is not a practical or realistic recommendation unless a high-risk scenario cannot be otherwise managed.

B. Ask the OHSMS Manager to confirm regulatory compliance. Regulatory compliance is important but does not fully address the requirement to ensure the action is effective.

C. Seek evidence that the response action is both implemented and effective. This is the most appropriate response. The auditor must verify implementation and effectiveness to determine conformity.

D. Suggest increasing maintenance checks. Maintenance is important for preventing equipment breakdowns, but this option does not address the immediate audit finding about the adequacy of response actions.

ISO References:

Clause 8.1.2: Emphasizes applying the hierarchy of controls effectively.

Clause 9.1.1: Requires monitoring and measuring controls to ensure effectiveness.

According to ISO 45001:2018, the PDCA cycle is explained in Clause 0.4. The Act phase is defined as: taking actions to improve continually the OH and S performance in order to achieve the intended outcomes . This clearly supports C. Making improvements as a correct answer.

Option D. Resetting objectives is also appropriate because ISO 45001 requires OH and S objectives to be reviewed and updated as appropriate . After checking performance results, the organization may revise or reset objectives as part of continual improvement and corrective action. This aligns with the Act stage, where changes are made to improve system effectiveness and performance.

The remaining options belong to other PDCA phases:

A. Verifying training relates more to evaluation of competence and effectiveness, which fits checking activities.

B. Measuring objectives belongs to the Check phase because ISO 45001 says Check includes monitoring and measurement against OH and S policy and objectives.

E. Providing infrastructure belongs to the Do phase because it is part of providing resources and operational support.

F. Auditing processes belongs to the Check phase because internal audits are part of performance evaluation under Clause 9.2.

Therefore, the correct answer is:

C, D

Clause 5.4 of ISO 45001:2018 emphasizes the importance of worker consultation and participation in the OHS management system. It requires organizations to establish processes that ensure workers are actively involved in decision-making and implementation of OHS practices.

Analysis of Options:

A. Promoting collaborating workers to higher positions: While promotions may boost morale, they do not directly contribute to worker consultation and participation in the OHSMS.

B. Appointing worker representatives: This action fosters direct communication and representation of workers ' interests in health and safety matters.

C. Conducting toolbox talks on health and safety: Toolbox talks are an effective way to engage workers in discussing and addressing health and safety issues.

D. Giving ownership of health and safety matters: Involving workers in decision-making and giving them responsibility for specific health and safety tasks encourages participation.

E. Ignoring workers ' suggestions: This undermines consultation and is contrary to ISO 45001 principles.

F. Implementing a payment scheme to reward workers ' OHS performance: While incentives can motivate safe behavior, they are not a consultation or participation mechanism as required by Clause 5.4.

G. Implementing methods for engaging workers: This aligns directly with Clause 5.4, as effective engagement methods (e.g., surveys, focus groups) enhance participation.

H. Threatening reprisals to whistleblowers: This violates ISO 45001 principles and discourages worker participation.

ISO References:

Clause 5.4: Worker consultation and participation.

Clause 5.1: Leadership’s responsibility to foster participation.

ISO 45001 requires organizations to identify and maintain documentation to demonstrate compliance with legal and other requirements (Clause 7.5 and Clause 9.1.2). It also requires the evaluation and control of outsourced processes (Clause 8.1.4.3).

Analysis of Options:

A. The park did not have the required documentation to demonstrate compliance with legal requirements: Correct. The outdated and incomplete inspection report (8 years old, lacking detailed identification) fails to demonstrate compliance with health and safety legislation.

B. The organization did not monitor the safety checks by staff of equipment: Incorrect. While there is a potential gap in monitoring, the evidence provided does not directly indicate a lack of monitoring of staff checks.

C. The inspection organization employed by the insurance organization was not evaluated: Correct. ISO 45001 requires the organization to evaluate outsourced services, including those provided by the inspection body, to ensure their adequacy.

D. The park relied on the insurance organization to evaluate its OHS risks: Incorrect. Reliance on external evaluations may not constitute a nonconformity if risks are properly managed, but there is no evidence provided for noncompliance here.

E. Testing to determine the safe loading of equipment was not carried out: Incorrect. While load testing is crucial, there is no evidence presented to confirm this specific issue as a nonconformity.

ISO References:

Clause 7.5: Control of documented information.

Clause 8.1.4.3: Control of outsourced processes.

Clause 9.1.2: Evaluation of compliance.

ISO 45001:2018 requires a holistic approach to occupational health and safety. This means considering all aspects that could impact worker well-being, not just obvious physical hazards. The correct answer encompasses work activities (the tasks themselves), workplace design (the physical environment), and human factors (psychological and social aspects like working hours and harassment). It ' s the most comprehensive and aligned with the standard ' s philosophy

ISO 45001:2018, Clause 6.1.2, outlines requirements for hazard identification . Hazards to consider include work activities, workplace design, human factors, and social factors that may impact OH and S. These go beyond traditional physical risks and include psychosocial and organizational hazards.

Analysis of Options:

A. Work activities, workplace design, and human factors such as hours of work and bullying and harassment: Correct. This comprehensively addresses hazard categories outlined in ISO 45001, Clause 6.1.2.

B. Work activities where there is the possibility of danger: Too general. ISO 45001 includes broader categories of hazards, including those related to organizational and social factors.

C. Hot-work, working at height, enclosed space entry, and work on electrical equipment: Too narrow. These are specific hazards but do not encompass the full range outlined in ISO 45001.

D. Work hazards and environmental factors such as bad weather: Incomplete. While environmental factors are relevant, ISO 45001 also includes workplace design, human factors, and psychosocial hazards.

ISO References:

Clause 6.1.2.1: Hazard identification.

Annex A.6.1.2: Examples of hazard categories, including workplace design and human factors.

The correct answer is D .

ABC states that it has implemented one single OH and S management system for both plants . Once a single management system covers both sites, the certification body has to determine and audit the scope of the management system being operated , not an artificially narrowed commercial scope. IAF MD 1 says a multi-site organization has a single management system , and the certification body must confirm that a single management system is deployed and determine the scope of the management system being operated . It also says the certification document must reflect the scope of certification and the sites/legal entities covered by that multi-site certification. ( IAF )

The argument that XYZ is “just a supplier” does not solve the problem. IAF MD 5 makes an important distinction: where an external provider is only a supplier, the certification body audits the organization’s control of the supplied activity, not the performance of the activity itself . But here, XYZ is not outside the management system; ABC has already said both plants are inside one single OHSMS . So XYZ cannot simply be treated as an external supplier for certification-scoping purposes. ( IAF )

This is also consistent with the multi-site certification rules that do not allow an organization to exclude covered sites just to avoid certification consequences. IAF MD 1 explicitly says it is not admissible to exclude a problematic site from scope during certification, and the certification documents must show the sites covered by the certified system. While this example is about a “problematic” site, the principle is the same: once the site is part of the single management system, it cannot be carved out simply for convenience or marketing. ( IAF )

Therefore, as a third-party auditor, you should not agree to audit only the food plant while ignoring the packaging plant if both are included in the same ISO 45001 management system.

The three correct responses are A, B, and G .

A is correct because ISO 45001 Clause 5.3 requires top management to ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood at all levels within the organization , and that they are maintained as documented information . So if top management asks whether responsibilities and authorities for relevant roles have to be documented, the correct answer is yes .

B is correct because Clause 5.1 Leadership and commitment requires top management to ensure that the resources needed to establish, implement, maintain and improve the OH and S management system are available . Therefore, the auditor’s “Yes, you do” is correct.

G is correct because Clause 5.1 also requires top management to promote continual improvement . This is stated directly as part of top management leadership and commitment responsibilities under ISO 45001.

Why the others are not correct:

C is incorrect because top management does have to ensure that processes are established for consultation and participation of workers . Clause 5.4 makes this a requirement, so “No, you do not” is wrong.

D is incorrect as written. Top management must establish, implement and maintain the OH and S policy, but ISO 45001 does not state that top management personally has to “write” it. The wording in the option is too specific and not how the standard states the requirement.

E is incorrect because top management does have to ensure that the OH and S management system achieves its intended results. Clause 5.1 says this directly.

F is incorrect because top management must ensure OH and S objectives are established and compatible with the strategic direction, but ISO 45001 does not require top management personally to “write” the objectives.

H is incorrect because the organization must determine the scope under Clause 4.3 , and top management remains accountable for the OH and S management system. Saying “No, you do not” is not correct in this context.