This guide teaches the ISO 45001:2018 concepts the Lead Auditor syllabus covers — hazards, OH&S risk, incidents, nonconformities, worker consultation, the hierarchy of controls, and audit planning — as auditor decisions rather than definitions. It includes two worked scenarios, a finding-writing exercise with a self-check rubric, a comparison table, and a realistic preparation sequence.
Hazard, OH&S Risk, and OH&S Opportunity Are Three Different Objects
A hazard is a source of potential harm; OH&S risk combines the likelihood and severity of harm from a hazardous event or exposure; an OH&S opportunity is a potential for performance improvement. Each term points at a different thing, and precise use changes your whole answer.
In ISO 45001:2018, a hazard is a source with the potential to cause injury or ill health: a substance, a machine, a heavy load, or even a pattern of work organization. OH&S risk is the combination of the likelihood of a hazardous event or exposure occurring and the severity of the resulting harm. Saying 'the forklift is a high risk' is imprecise; the forklift is a hazard, and the risk is the chance and severity of, for example, a struck-by event during reversing in a shared aisle.
An OH&S opportunity is not simply a risk with a positive sign. It is a situation that could improve OH&S performance, such as redesigning a task to remove manual handling entirely, or adapting new equipment to reduce exposure. In scenario answers, label the hazard first, then define the specific event whose likelihood and severity you are assessing, and only then discuss opportunities. This ordering forces you to name the harm before you evaluate it, which is exactly the discipline the term structure exists to enforce.
Drill: pick five items in any workplace you know — a cable on the floor, a cleaning chemical, a lone-working arrangement, a hot surface, a delivery schedule. For each, write one sentence naming the hazard, one naming a defined risk (event plus severity plus likelihood), and one naming a genuine opportunity. If your risk sentence cannot name a specific harm, it is really a hazard description in disguise.
- Hazard: the source (chemical, machine, load, work pattern).
- OH&S risk: likelihood x severity of a defined hazardous event or exposure.
- OH&S opportunity: a route to better performance, not just 'a risk done right'.
From Observation to Nonconformity: Building the Three-Part Finding
An audit finding compares objective evidence against audit criteria. A nonconformity exists only when you can cite the specific requirement that is not met. An unlinked observation — 'the guard was missing' — is not yet an audit finding.
Worked scenario: during a walkthrough you observe that the interlocked guard on a press has been bypassed with tape. A plausible mistake in a scenario answer is to write 'safety culture is poor' or 'the machine is dangerous'. The stronger answer has three parts: evidence (the bypassed guard on press P3, observed during the shift), criteria (the organization's own documented requirement that safeguards are verified before each shift starts, and its obligations under clause 8.1 to implement controls), and the finding statement (a nonconformity against the implementation of operational controls). Why it matters: a finding that cannot name its requirement cannot be answered, closed, or graded consistently.
Severity of a nonconformity follows the same logic. A total breakdown of a requirement, or the complete absence of a required process, points toward a major nonconformity; an isolated lapse inside an otherwise functioning process points toward a minor one. Do not grade on how dramatic the hazard looks; grade on how far the requirement failed. Also separate an incident — an occurrence arising out of work that could or does result in injury or ill health — from the nonconformity in the management system that the incident may reveal. The incident is the event; the nonconformity is the failure against criteria that your evidence demonstrates.
Decision aid — keep these terms distinct when writing scenario answers:
| Term | What it is | Where it anchors in the standard | The auditor question to ask |
|---|---|---|---|
| Hazard | Source of potential injury or ill health | Clause 3 terms; clause 6.1.2 hazard identification | What is the source, specifically? |
| OH&S risk | Likelihood and severity of a defined hazardous event or exposure | Clause 6.1.2 risk assessment | Which event, how likely, how severe? |
| Incident | Occurrence arising out of work that could or does cause harm | Clause 3; incident investigation in clause 10.2 | What happened, and what did the system allow? |
| Nonconformity | Non-fulfilment of a requirement | Clause 10.2 | Which requirement did the evidence violate? |
| Correction | Action to fix the immediate nonconformity | Clause 10.2 context | What was done to contain it now? |
| Corrective action | Action to eliminate the cause and prevent recurrence | Clause 10.2 | What caused it, and what evidence shows the cause is addressed? |
| Audit finding | Result of evaluating evidence against criteria | Audit methodology | Can I cite evidence and criteria in one sentence? |
Correction, Corrective Action, and Continual Improvement: Do Not Collapse Them
Correction fixes the nonconformity in front of you; corrective action eliminates its cause so it cannot recur; continual improvement, in clause 10.3, enhances performance beyond mere conformity. Scenario answers lose precision the moment these three are treated as one.
Take a scenario where a worker in a pressing shop is found not wearing hearing protection in a posted zone. Correction: the worker is issued and wears suitable protection immediately, and the supervisor verifies the zone. Corrective action, under clause 10.2: investigate why — perhaps stock of the correct protectors ran out two weeks earlier and the reorder process failed — then change the replenishment process and verify it works. Continual improvement, under clause 10.3: go beyond compliance and reduce noise at source so the zone itself shrinks.
The auditor's decision test: when a scenario shows management 'fixing the problem', ask which of the three layers the evidence actually covers. A replaced part, a refilled dispenser, or a verbal reminder is correction, and an auditor should not treat correction alone as closing a nonconformity, because the cause is still in place. In written answers, name the layer you are describing: 'the organization corrected the hazard but showed no evidence of cause analysis required by clause 10.2' is a precise, checkable statement. Vague phrasing such as 'they dealt with it' hides exactly the distinction the scenario was built to test.
Self-drill: write one paragraph each for the same scenario — one describing correction, one describing corrective action, one describing improvement. If your corrective-action paragraph contains no reference to a cause and no change to a process or system, it is still correction.
Auditing Worker Consultation and Participation With Evidence, Not Feelings
Clause 5.4 requires mechanisms for consultation and participation of workers at all applicable levels. The auditor tests whether those mechanisms function: trace arrangements, meeting records, worker-raised issues, and what happened to them.
Worked scenario: you are auditing consultation. The plausible mistake is to interview a worker with a leading question — 'management always listens to your safety concerns, right?' — and record the yes as conformity. The better decision: request the documented consultation and participation arrangements, sample several months of safety committee or worker representative meeting minutes, pick one worker-raised issue such as a failing extraction fan, and follow its trail — was it recorded, escalated, budgeted, resolved, and communicated back? Then corroborate with the worker who raised it, using open questions. Why it matters: opinions gathered through leading questions are not objective evidence; a documented trace shows whether the mechanism works, which is what the clause requires.
Note the scope of the obligation as well: consultation extends to hazard identification and risk assessments, and participation extends to incident investigations, among other defined matters. A committee that meets regularly but never reviews risk assessments or investigation outcomes only partially demonstrates the requirement. In scenario answers, resist concluding conformity from the existence of a committee alone; existence of a mechanism and functioning of a mechanism are two different audit conclusions, and your evidence must support whichever you claim.
- Ask for the mechanism, not the sentiment: arrangements, agenda, minutes, actions.
- Trace one raised issue end to end before judging conformity.
- Use open questions in interviews; leading questions produce unusable evidence.
The Hierarchy of Controls: Rank Before You Recommend
Clause 8.1.2 directs a sequence: eliminate the hazard first, then substitute, then engineering controls, then administrative controls, and finally personal protective equipment. Scenario answers should rank options in that order rather than treating every control as an equal choice.
Worked example: a scenario describes workers exposed to high noise from a machine. The plausible mistake is to lead with a better model of earmuffs, because PPE is visible, cheap, and fast. The stronger decision walks the hierarchy: could the task be eliminated or automated (removing exposure), could the process be substituted or the machine enclosed (engineering), could job rotation or scheduling reduce exposure time (administrative), and only then does PPE appear as the final layer of a layered control package. Why it matters: leading with PPE inverts the standard's logic and signals in your answer that you have not internalized the ranking that clause 8.1.2 establishes.
In an audit framing, reliance on PPE as the primary control is not automatically a nonconformity; it is a prompt for a question. The auditor asks whether the organization considered higher-order controls and can show that reasoning, because the standard expects hazard elimination and risk reduction to follow the hierarchy where practicable. When you grade a scenario, distinguish between 'PPE was wrongly chosen as the only response, with no documented consideration of alternatives' and 'PPE supplements an enclosure that could not fully remove the residual risk'. The first is a finding-shaped problem; the second is a defensible control strategy.
- Order of consideration: elimination, substitution, engineering, administrative, PPE.
- PPE-first answers are a red flag in your own writing, not just in auditees'.
- Auditor question: where is the documented reasoning for the chosen control level?
Audit Program, Audit Plan, and Process-Tracing on Audit Day
The audit program is the portfolio of audits over time with its objectives; the audit plan describes one audit's objectives, scope, criteria, and team assignments. On the day, auditors follow processes through sampled records, not clause checklists in isolation.
Worked scenario: you must audit operational control in a maintenance workshop. The plausible mistake is to march down the clause asking yes/no checklist questions to whoever is available, collecting opinions and isolated documents. The better decision: pick one process — say, repair of a guarded machine — and trace it forward: the work order, the associated risk assessment, the permit or isolation procedure, the training record of the technician, and the completed job with its sign-off. Sample records at each step and note precisely where the documented trail stops. Why it matters: a process trace produces linked objective evidence, and the exact point where the trail breaks is where a clause-anchored finding lives.
The lead auditor's role sits on top of this technique. You prepare the audit plan, allocate areas to team members, manage the schedule, hold briefings so findings are shared and corroborated, and assemble audit conclusions from the team's evidence. Two professional boundaries apply throughout: impartiality, meaning you do not audit your own work or let relationships soften findings, and confidentiality, meaning audit evidence is not workplace gossip. In scenario answers that ask what the lead auditor does, distinguish your own conduct from the technical content of findings — assigning, coordinating, and concluding are the lead's tasks, while every individual finding still needs its evidence and criteria.
- Program = the whole portfolio and its objectives; plan = one audit's scope, criteria, and assignments.
- Trace one process end to end instead of interviewing the clause question by question.
- A finding is strongest exactly where the documented trail breaks.
A Practical Preparation Sequence With Readiness Rubric
Study in four passes: terms and clause map first, then daily finding-writing drills, then process-trace scenarios, then timed case analysis. Readiness is behavioral — you can produce a cited, evidence-based finding without notes.
A realistic sequence, adaptable to the time you have. Pass one (about a fifth of your time): build a clause map of ISO 45001:2018 and write your own one-line definition plus one example for each core term — hazard, OH&S risk, OH&S opportunity, incident, nonconformity, correction, corrective action. Pass two: each day, take one workplace observation and write a three-part finding; this is the drill above. Pass three: run two process-trace scenarios per week using paper cases, following the maintenance-shop method. Pass four: complete full case-style scenarios under time pressure, then review your findings against the rubric below.
For administrative details of the credential and the current status of the ISO 45001:2018 standard, check directly with ISO at https://www.iso.org/ ; this article deliberately does not restate exam logistics, formats, or fees. Treat every rubric score below as a learning milestone for your own feedback loop, not a prediction of any exam outcome.
Self-check rubric — score each of your written findings from a drill:
- Evidence named concretely: an observed object, record, or interview statement — not an impression. (1 point)
- Criteria cited: the organization's requirement or the relevant clause anchor is named. (1 point)
- The finding sentence states the gap between evidence and requirement in one reading. (1 point)
- Correct term discipline: incident, nonconformity, correction, corrective action each used where they belong. (1 point)
- Grading rationale stated in terms of how far the requirement failed. (1 point)
- Milestone: five consecutive drill findings scoring 5/5 without notes is a strong signal you are ready for timed case work.
References and further reading
Use these references to explore the concepts and check the latest information from the relevant organizations.