Free and Premium PECB ISO-45001-Lead-Auditor Dumps Questions Answers

The correct answers are B, E, and G.

G is true because ISO 19011 states that a closing meeting should be held to present the audit findings and conclusions. This applies to audits generally, not only third-party audits. (Oshisis)

E is true because ISO 19011 guidance says that for some audit situations the closing meeting may be formal, but in other instances, such as internal audits, the closing meeting can be less formal and may simply consist of communicating the findings and conclusions. That means a first-party closing meeting is commonly less formal than a third-party certification closing meeting. (Synersia Foundation)

B is also true. ISO 19011 and related guidance allow the use of remote methods / ICT in audit activities, and remote audit methods may be combined with on-site methods. From that, it follows that the audit team leader may arrange for audit team members to join activities such as the closing meeting virtually, where appropriate and controlled. This is an inference from the permitted use of ICT in audits. (ISO)

Why the others are false:

A is false because the closing meeting is for presenting findings and conclusions, not for changing findings simply because the auditee is unhappy. Findings can be clarified, but not changed without objective evidence. (Oshisis)

C is false because there is no rule that the audit team must meet formally immediately after the closing meeting to consider recommendations.

D is false because ISO 19011 says some closing meetings may be formal and recorded, but internal audits can be less formal, so they do not always have to be documented in that way. (Synersia Foundation)

F is false because the audit team leader is responsible for managing the audit team and assigning roles.

H is false because the closing meeting should be chaired by the audit team leader, not by the audit client. (Oshisis)

2. Prepare the audit checklist, 3. Obtain objective evidence, 4. Review audit evidence, 5. Document findings

For a first-party audit, the sequence follows the normal audit flow described in ISO auditing guidance: first the audit is initiated and leadership is assigned, then audit activities are prepared, then evidence is collected during the audit, then that evidence is evaluated, then findings are recorded, and finally the audit report is issued. ISO 19011 describes the audit flow as initiating the audit, preparing audit activities, conducting audit activities, and preparing and distributing the audit report. (ISO)

That is why, after 1. Appoint an audit team leader, the next correct step is 2. Prepare the audit checklist. The checklist is part of preparing for the audit and helps the auditor plan questions, clauses, process interactions, and sampling points before going on to collect evidence. (WEDEAQ | Official VDA QMC Partner)

After preparation, the auditor moves to 3. Obtain objective evidence. Audit evidence is gathered through interviews, observation, and review of documented information during the audit. This is a core activity of conducting the audit. (DNV)

Once evidence is collected, the auditor must 4. Review audit evidence. ISO audit practice requires the evidence to be evaluated against the audit criteria to determine whether conformity or nonconformity exists. Evidence is not simply collected and reported immediately; it is first reviewed and assessed. (PRETESH BISWAS)

After reviewing the evidence, the auditor can 5. Document findings. Findings are the result of evaluating the evidence against criteria, so they logically come after evidence review. Recorded findings can include conformity, nonconformity, and opportunities for improvement, depending on the audit plan and method. (PRETESH BISWAS)

The final step is 6. Issue the report, because the report is prepared only after the audit evidence has been reviewed and the findings have been determined and documented. (ISO)

So, the correct full order is:

1. Appoint an audit team leader

2. Prepare the audit checklist

3. Obtain objective evidence

4. Review audit evidence

5. Document findings

6. Issue the report

The correct answers are B and D.

In certification audits, the certification body decides the audit team composition and audit time using its own documented procedures and competence requirements. ISO/IEC 17021-1 requires the certification body to determine the competencies needed for the audit team and to assign an audit team that is competent for the audit scope. It also requires the certification body to determine the audit time needed to plan and accomplish a complete and effective audit.

IAF MD 5 further explains that the certification body should consider the composition and size of the audit team to ensure audit effectiveness. This means a client request for “only one auditor” may be considered, but it cannot simply be accepted just to reduce travel costs if that would undermine competence, coverage, or effectiveness.

Therefore:

B is correct because the OHS Manager should be told that audit duration and team make-up are decided in line with the certification body’s internal procedures.

D is correct because the request can be considered, and the certification body can respond after applying its rules and competence requirements.

Why the other options are incorrect:

A is not the best answer because the people managing the audit programme already operate within the certification body’s process.

C is inappropriate; a client request does not justify telling them to use another certification body.

E is incorrect because the accreditation body does not decide the audit team for the client’s audit.

F is incorrect because the request cannot be automatically accepted based only on cost saving.

ISO 45001 Clause 7.2 Competence requires the organization to:

determine the necessary competence of workers that affect or can affect OH and S performance;

ensure workers are competent, including the ability to identify hazards;

where applicable, take actions to acquire and maintain competence and evaluate the effectiveness of those actions; and

retain appropriate documented information as evidence of competence.

Based on that wording, C is clearly correct because the clause explicitly says workers must be competent, including having the ability to identify hazards. If there is no evidence of that ability, this directly supports a nonconformity against Clause 7.2.

F is also correct because Clause 7.2 requires the organization to determine the competence needed for roles and ensure workers meet it. If there is no evidence that workers’ knowledge and skills are assessed against role requirements, the organization cannot demonstrate that competence has been determined and verified.

H is the third correct answer because Clause 7.2 requires the organization to retain documented information as evidence of competence. Attendance on OH and S training is not, by itself, full proof of competence, but the absence of training records can still support a finding that the organization lacks documented evidence related to competence development and maintenance.

Why the others are not Clause 7.2 findings:

A belongs to Clause 7.3 Awareness, which requires awareness of the consequences of not conforming.

B also relates more to Clause 7.3 Awareness, which includes awareness of the ability to remove themselves from imminent and serious danger.

D is also Clause 7.3 Awareness, because workers must understand their contribution to the effectiveness of the OHSMS.

E relates to consultation and participation under Clause 5.4, not competence.

G refers to quality policy and objectives, which are not ISO 45001 OH and S competence requirements.

Option A reproduces the ISO management-system definition of an interested party: a person or organisation that can affect, be affected by, or perceive itself to be affected by a decision or activity. This concept is fundamental to ISO 45001 Clause 4.2 because an organisation must determine relevant interested parties and their relevant needs and expectations when establishing its OHSMS context. Examples can include workers, contractors, regulators, suppliers, customers, neighbouring communities and other stakeholders. Options B, C and D alter the defined relationship by substituting terms such as “influence,” “interfere” or limiting the concept to a third party. Those formulations do not match the standardized ISO terminology. The same standardized interested-party wording is published in ISO ' s terminology resources.

Clause 5.4 of ISO 45001:2018 emphasizes the importance of worker consultation and participation in the OHS management system. It requires organizations to establish processes that ensure workers are actively involved in decision-making and implementation of OHS practices.

Analysis of Options:

A. Promoting collaborating workers to higher positions:While promotions may boost morale, they do not directly contribute to worker consultation and participation in the OHSMS.

B. Appointing worker representatives:This action fosters direct communication and representation of workers ' interests in health and safety matters.

C. Conducting toolbox talks on health and safety:Toolbox talks are an effective way to engage workers in discussing and addressing health and safety issues.

D. Giving ownership of health and safety matters:Involving workers in decision-making and giving them responsibility for specific health and safety tasks encourages participation.

E. Ignoring workers ' suggestions:This undermines consultation and is contrary to ISO 45001 principles.

F. Implementing a payment scheme to reward workers ' OHS performance:While incentives can motivate safe behavior, they are not a consultation or participation mechanism as required by Clause 5.4.

G. Implementing methods for engaging workers:This aligns directly with Clause 5.4, as effective engagement methods (e.g., surveys, focus groups) enhance participation.

H. Threatening reprisals to whistleblowers:This violates ISO 45001 principles and discourages worker participation.

ISO References:

Clause 5.4: Worker consultation and participation.

Clause 5.1: Leadership’s responsibility to foster participation.

Ethical – C

Diplomatic – F

Open to improvement – B

Perceptive – E

These behaviours are standard auditor personal attributes used in lead auditor training and are aligned with audit competence guidance.

Ethical – C. Fair, truthful, sincere, honest, discreet

An ethical auditor acts with integrity. This includes honesty, truthfulness, sincerity, fairness, and discretion when handling audit evidence, findings, and confidential information. Ethical behaviour is essential because audit conclusions must be trusted and based on professional conduct.

Diplomatic – F. Tactful in dealing with individuals

A diplomatic auditor interacts with people carefully and respectfully. During audits, questions may be sensitive, findings may be difficult to communicate, and interviewees may feel pressure. Being tactful helps maintain cooperation and supports effective evidence gathering.

Open to improvement – B. Willing to learn from situations

An auditor who is open to improvement learns from audit experience, changing conditions, and new information. This behaviour supports continual development and better audit effectiveness over time.

Perceptive – E. Aware of and able to understand situations

A perceptive auditor recognizes what is happening in the audit environment and understands the significance of what is seen, heard, and observed. This helps the auditor detect inconsistencies, identify risks, and understand process realities beyond prepared answers.

Why the other options are not used here:

A. Persistent and focused on objectives describes tenacious behaviour.

D. Actively observing surroundings/activities describes observant behaviour.

So the correct matching is:

Ethical – C

Diplomatic – F

Open to improvement – B

Perceptive – E

Audit reports should provide a clear summary of the audit process, findings, and conclusions based on the defined scope, objectives, and criteria. They do not include administrative details (e.g., invoices) or operational aspects (e.g., corrective action plans).

Analysis of Options:

A. A copy of the certification body invoice for the audit:Incorrect. Invoices are unrelated to the content of audit reports and are handled separately.

B. A reference to the audit criteria used:Correct. Audit criteria (e.g., ISO 45001 standards) must be included in the report to define the basis for the audit.

C. A statement of the audit objectives:Correct. The report must outline the objectives to ensure clarity on the purpose of the audit.

D. Audit findings and any related evidence:Correct. Findings and evidence are essential to support conclusions and recommendations.

E. Confirmation of the audit scope:Correct. The scope defines the boundaries of the audit and must be documented in the report.

F. Contact details for all members of the audit team:Incorrect. Personal contact details are unnecessary and not typically included in reports.

G. The audit conclusions reached:Correct. Conclusions summarize the outcomes of the audit, such as conformity, nonconformities, or recommendations.

H. A corrective action plan that addresses the identified nonconformities:Incorrect. Corrective action plans are the auditee ' s responsibility and not included in the audit report.

ISO References:

ISO 19011:2018, Clause 6.7.3: Content of audit reports.

The best answer is B.

Under ISO 45001, worker consultation and participation is required by Clause 5.4, but the standard does not require a specific documented procedure for that clause. The organization must provide mechanisms, information, time, training, and resources for consultation and participation, but ISO 45001 does not say it must maintain a formal procedure specifically for this.

Also, ISO 45001 Clause 7.5.3 requires documented information to be controlled so that it is available and suitable for use, and adequately protected. An “obsolete” document is not automatically a nonconformity just because it exists. It may be retained for reference or historical reasons, provided the organization controls it properly and it is not being used unintentionally as current information. That is why the correct audit reaction is to note it and verify on site whether it is actually part of the current controlled documented information.

Why the other options are not the best:

A is weak because using an obsolete procedure to prepare the checklist risks relying on invalid information before confirming what the current controlled version is.

C is unnecessary as the first response. You already have enough evidence to note a potential document-control point and verify it during the audit.

D is incorrect because you should not raise a nonconformity before verifying the facts on site. An obsolete-marked document alone does not prove a breach of Clause 7.5.3. A nonconformity must be based on objective evidence gathered during the audit.

Follow-up audits verify that corrective actions have been implemented effectively and address the root cause of the nonconformities.

Analysis of Options:

A. Review the latest emergency response drill report:Correct. This verifies whether emergency response processes are functional and effective.

B. Check if the internal audit schedule was revised:Incorrect. While beneficial, this is not directly related to closing out the nonconformity.

C. Check safety data sheets for completeness:Incorrect. While this ensures compliance, it is not directly related to verifying corrective actions.

D. Check if revised procedures were signed off:Correct. This confirms that changes were properly documented and approved.

E. Determine whether an updated risk assessment was carried out:Correct. Risk assessments confirm the effectiveness of new controls.

F. Inspect areas for safe chemical storage and handling:Correct. Direct observation ensures that corrective actions are implemented effectively.

G. Interview staff on revised emergency procedures:Incorrect. While important, this does not directly address the effectiveness of corrective actions for chemical storage.

H. Interview the OH and S Manager about additional objectives:Incorrect. This is unrelated to the specific nonconformities raised.

ISO References:

Clause 10.2.2: Verification of corrective actions.

Clause 8.1.2: Hazard identification and controls.

ISO 45001 Clause 5.2 OH and S policy requires top management to establish, implement and maintain an OH and S policy that includes a commitment to provide safe and healthy working conditions, fulfill legal and other requirements, and achieve continual improvement of the OH and S management system. It also requires the policy to be communicated within the organization and to be available to interested parties, as appropriate.

B. The management is committed to health and safety improvement is correct because the policy states: “Continual health and safety improvement is a permanent objective of the organisation.” That clearly demonstrates commitment to improvement, which aligns with Clause 5.2.

C. The organisation intends to communicate its policy to external parties is correct because the policy says: “Where required, the policy shall be communicated to all interested parties.” This matches the ISO 45001 requirement that the OH and S policy be available to interested parties, as appropriate.

G. The organisation is committed to continual health and safety improvement is also correct because the statement explicitly says: “Continual health and safety improvement is a permanent objective of the organisation.” This directly reflects the requirement for continual improvement in the OH and S policy.

Why the other options are not supported by the policy statement:

A is not correct because the policy expresses intent to work in accordance with regulations, but it does not prove the organization meets all statutory requirements in practice.

D is not correct because the policy does not provide evidence of reputation.

E is not correct because the policy does not prove that processes actually deliver improvement; it only states commitment.

F is not correct because the policy mentions contractors, but it does not prove that contractors themselves are committed to health and safety.

H is not correct because the policy mentions safe experiences and customers, but it does not prove that customer health and safety requirements are satisfied.

Therefore, the three options for which the organization is meeting ISO 45001 policy requirements are:

B, C, G

A pre-audit documented-information review provides intelligence needed to prepare an effective, risk-based audit. It can identify higher-risk areas requiring greater audit attention, verify the defined OHSMS scope, help confirm whether the planned audit team ' s size and collective competence are adequate, and develop a clearer understanding of the auditee ' s processes and activities. These are direct planning benefits. The review does not automatically justify shortening the total audit duration or reducing interviews; sufficient audit time and evidence must still be obtained. Nor is the purpose to retain auditee-controlled emergency documentation after the audit. ISO 19011 ' s documented-information-review guidance emphasizes understanding the auditee ' s operations, preparing audit activities, identifying possible areas of concern and taking account of scope, organisational size, complexity, risks and opportunities.

The PDCA (Plan-Do-Check-Act) cycle is a core principle of ISO 45001 and many other management systems. It does not include environmental management, as ISO 45001 focuses on Occupational Health and Safety (OH and S), while environmental aspects are covered by ISO 14001.

Analysis of Options:

A. Treatment of Risks:Correct. Risk assessment and control are part of the Plan phase.

B. OHSMS Policy:Correct. The OH and S policy is established in the Plan phase.

C. Environment Management Program:Incorrect. This is outside the scope of ISO 45001 and pertains to ISO 14001.

D. Analyzing OHSMS Performance:Correct. Performance analysis occurs in the Check phase of the PDCA cycle.

ISO Reference:

Clause 0.3: PDCA model in ISO 45001.

Answer: A-Fair, truthful, sincere, honest, discreet; B-Tactful in dealing with individuals; C-Willing to learn from situations; D-Aware of and able to understand situations

ISO 19011 identifies specific professional behaviours expected of auditors. Ethical means being fair, truthful, sincere, honest and discreet, supporting integrity and confidence in the audit process. Diplomatic means being tactful when dealing with individuals, particularly when asking difficult questions or communicating adverse findings. Open to improvement means being willing to learn from situations and improve one ' s auditing competence and approach. Perceptive means being aware of and able to understand situations rather than merely recording superficial observations. The two unused descriptions represent other ISO 19011 behaviours: actively observing surroundings and activities relates to being observant, while being persistent and focused on objectives describes being tenacious. These distinctions are explicitly reflected in ISO 19011 ' s auditor personal-behaviour guidance.

In a first-party audit (internal audit), the organization conducts the audit to determine whether its management system conforms to planned arrangements, to the organization’s own requirements, and to the requirements of ISO 45001, and whether it is effectively implemented and maintained. ISO 45001 Clause 9.2 requires internal audits to provide information on conformity and effectiveness.

E. Verify compliance with regulatory requirements is a valid audit objective because ISO 45001 requires the organization to determine its legal and other requirements and to evaluate compliance with them. Internal audits commonly include verification that these legal OH and S obligations are being met as part of checking the effectiveness and conformity of the OH and S management system. This aligns with Clause 6.1.3 and Clause 9.1.2 of ISO 45001.

B. Complete the audit on time is also an audit objective in practical first-party auditing because audit objectives are established for the audit and supported by planning, resources, timing, and reporting arrangements. While it is not a system conformance criterion, it is a valid objective for the audit assignment itself, ensuring the audit is performed as planned and efficiently managed. This fits normal lead auditor practice in planning and conducting internal audits.

Why the other options are not correct:

A. Apply international standards is too broad and is not itself an audit objective. Standards are the criteria or reference, not the objective.

C. Confirm the scope of the management system is accurate is not usually stated as a first-party audit objective; scope is established by the organization under Clause 4.3, though it may be reviewed during audits.

D. Prepare the audit report for the certification body does not apply to a first-party audit, because internal audits are not performed for a certification body.

F. Update the management policy is a management responsibility, not an audit objective. Audits may identify inputs for policy review, but updating the policy is not the purpose of the audit itself.

Therefore, the two correct options are:

B, E

Conducting the interview virtually is the most appropriate response because it preserves the planned audit activity, enables the General Manager to provide the required evidence and avoids unnecessary disruption to the surveillance audit. Remote audit methods are legitimate when the required information can be accessed effectively and confidentiality, connectivity and other audit risks are appropriately managed. Replacing the General Manager with other managers could prevent the auditor from obtaining evidence specifically associated with that person ' s leadership responsibilities. Delaying only that interview until the following week would leave the current audit incomplete, while postponing the entire audit is disproportionate when a practical remote method is available. ISO guidance expressly recognizes physical and virtual audit locations, and ISO/IEC TS 17012 provides dedicated guidance for remote methods in first-, second- and third-party management-system audits.

ISO 45001 emphasizes worker participation and engagement at all levels of the organization to support continuous improvement (Clause 5.4 and Clause 10.3). Continuous improvement requires input from everyone, including workers who identify hazards, report incidents, and contribute to safety enhancements.

Analysis of Options:

A. Everyone, at all levels of the company:Correct. Clause 5.4 explicitly includes all levels of the organization in consultation and participation, fostering continuous improvement.

B. Top management and senior officers only:Incorrect. While top management plays a crucial role in leadership, ISO 45001 extends the responsibility for participation to all levels.

C. Top management, senior officers, and designated safety representatives only:Incorrect. Limiting participation to designated representatives excludes a significant portion of the workforce from the improvement process.

D. Top management only:Incorrect. While top management must lead and commit to continuous improvement, their involvement alone is insufficient under ISO 45001.

ISO References:

Clause 5.4: Worker consultation and participation.

Clause 10.3: Continual improvement.

The correct answers are E, F.

ISO 45001 Clause 8.1.4.2 Contractors requires the organization to coordinate its procurement processes with its contractors, in order to identify hazards and to assess and control the OH and S risks arising from the contractors’ activities and operations that impact the organization, the organization’s activities and operations that impact the contractors’ workers, and the contractors’ activities and operations that impact other interested parties in the workplace. It also requires the organization to ensure that contractors and their workers meet the organization’s OH and S management system requirements.

In this case, the objective evidence already found during the audit supports the nonconformity:

the hazards list did not include contractor-related hazards;

the Purchase Manager relied on trust rather than controlled OH and S coordination;

the OH and S team said chemical safety had never been a problem, which is not evidence of hazard identification, risk assessment, or control.

The email shown at the closing meeting only states that contractors carry out a site risk assessment. That does not automatically demonstrate that Shelf-Fit itself has met Clause 8.1.4.2 requirements for coordinated procurement control, hazard identification, and control of contractor OH and S risks within its own management system. Therefore, the nonconformity should not simply be withdrawn on the spot.

E. Advise management that the information provided will be reviewed at the audit follow-up stage is acceptable because the auditee can submit corrective-action evidence after the audit. The certification decision and close-out process can consider additional evidence later, but that does not erase the nonconformity already supported by audit evidence gathered during the audit.

F. Note the OHS Manager ' s comments but indicate that there is evidence of a nonconformity that needs to be addressed is also acceptable because this is exactly what the audit team leader should do at the closing meeting: acknowledge the auditee’s response, but maintain the finding where objective evidence supports it.

Why the other options are not acceptable:

A is not appropriate at the closing meeting. The audit team should base findings on evidence gathered within the audit scope and timing, not start a new off-line investigation with contractors at that point.

B is weak audit management. The audit team leader should control the discussion and decision, not hand it over informally.

C is incorrect because the information is not irrelevant; it is relevant, but not sufficient to invalidate the nonconformity.

D is not acceptable because the email does not remove the original evidence of failure in Shelf-Fit’s contractor control process.

Clause 9.1.2 of ISO 45001:2018 outlines the need for organizations to evaluate compliance with applicable legal and other requirements as part of their OH and S management system.

Analysis of Options:

A. The organization must evaluate its compliance status at least once a year:The standard does not prescribe a specific frequency but states that evaluations must be conducted at planned intervals.

B. ' Other requirements ' include requirements that the organization has chosen to comply with:Correct. Other requirements may include voluntary standards, industry codes, or contractual obligations.

C. A management review is required in all instances where one or more legal requirements are not being met:This is not true. Management reviews address compliance but are not mandated for every noncompliance.

D. Every member of an audit team must have a detailed understanding of the legal requirements for the sector and type of organization they are auditing:Not true. Auditors must have general competency but can rely on subject-matter experts for legal specifics.

E. If the organization is failing to address a legal requirement relating to another discipline (e.g., Environmental management), this cannot be raised in the audit:Not true. If the legal noncompliance impacts OH and S, it can be raised.

F. The organization cannot outsource its process for evaluating compliance:The organization can outsource evaluation but retains accountability.

G. The organization is required to establish a process for evaluating compliance:Correct. Clause 9.1.2 requires a process for compliance evaluation.

H. The organization is required to evaluate its compliance status with OH and S legal and other requirements:Correct. Clause 9.1.2 explicitly states this requirement.

ISO References:

Clause 9.1.2: Evaluation of compliance.

Clause 7.5: Documented information requirements

The three correct responses are A, B, and G.

A is correct because ISO 45001 Clause 5.3 requires top management to ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood at all levels within the organization, and that they are maintained as documented information. So if top management asks whether responsibilities and authorities for relevant roles have to be documented, the correct answer is yes.

B is correct because Clause 5.1 Leadership and commitment requires top management to ensure that the resources needed to establish, implement, maintain and improve the OH and S management system are available. Therefore, the auditor’s “Yes, you do” is correct.

G is correct because Clause 5.1 also requires top management to promote continual improvement. This is stated directly as part of top management leadership and commitment responsibilities under ISO 45001.

Why the others are not correct:

C is incorrect because top management does have to ensure that processes are established for consultation and participation of workers. Clause 5.4 makes this a requirement, so “No, you do not” is wrong.

D is incorrect as written. Top management must establish, implement and maintain the OH and S policy, but ISO 45001 does not state that top management personally has to “write” it. The wording in the option is too specific and not how the standard states the requirement.

E is incorrect because top management does have to ensure that the OH and S management system achieves its intended results. Clause 5.1 says this directly.

F is incorrect because top management must ensure OH and S objectives are established and compatible with the strategic direction, but ISO 45001 does not require top management personally to “write” the objectives.

H is incorrect because the organization must determine the scope under Clause 4.3, and top management remains accountable for the OH and S management system. Saying “No, you do not” is not correct in this context.

ISO 45001 Clause 8.1.3 Management of change states that the organization must establish processes for the implementation and control of planned temporary and permanent changes that impact OH and S performance. It also says this includes new products, services and processes, and changes to existing products, services and processes. That makes A true. It also supports B, because the clause is specifically about changes that impact the organization’s OH and S performance.

Statement E is also true. If the organization decides, after an emergency preparedness and response exercise, that it needs to change part of the OHSMS to improve OH and S performance, then that change has to be implemented in a controlled way under the organization’s management-of-change process. ISO 45001 links emergency preparedness with improvement and requires changes impacting OH and S performance to be controlled.

Why the others are false:

C is false because ISO 45001 does not limit management of change to planned changes only. It says the organization must also review the consequences of unintended changes and take action to mitigate adverse effects.

D is false because Clause 8.1.3 does not require retaining documented information of all changes. The clause requires establishing processes for implementation and control, but it does not state a blanket requirement to retain documented information for every change.

F is false because developments in knowledge and technology are explicitly included in management of change, not excluded.

G is false because changes are not limited to those identified by the organization itself; the clause also includes changes in legal and other requirements, and changes in knowledge or information about hazards and risks.

H is false because ISO 45001 explicitly says management of change applies to temporary and permanent planned changes.

ISO 45001 requires an organization to determine the external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended results of the OH and S management system. This is established in Clause 4.1 – Understanding the organization and its context. External issues are typically conditions arising outside the organization, such as market conditions, social conditions, legal environment, economic factors, and technological developments. Internal issues are those related to the organization’s people, structure, culture, ownership, competence, and operational arrangements.

D. New technology available on the market is an external issue because it exists in the external business and technological environment. It is not created inside the organization, but it can affect how the organization manages OH and S risks and opportunities, for example by introducing safer equipment, automation, or new control methods. ISO 45001 guidance in Annex A recognizes that technological environment can be part of context analysis.

F. Average salaries in the business sector is also an external issue because it relates to the wider economic and labor-market environment, not the organization’s own internal arrangements. This kind of issue can influence recruitment, retention, competence availability, and worker welfare conditions, all of which may indirectly affect OH and S performance. It is part of the external economic context.

Why the other options are not external:

A. Increased number of outsourced processes is mainly an internal organizational decision about how work is arranged and controlled. Although outsourced providers are external parties, the increase in outsourcing is part of the organization’s internal operating model.

B. New owners of the organisation is an internal issue because ownership and governance are part of the organization’s internal structure and direction.

C. Workers joined a trade union is generally treated as an internal workforce/industrial relations issue, because it directly concerns the organization’s workers and participation arrangements.

E. Recently hired workers with limited command of the local language is an internal issue because it concerns the competence, communication, and workforce characteristics within the organization.

Therefore, the two options related to external issues are:

D, F

Analysis of Options:

A. Integrated Management System:Correct. An Integrated Management System (IMS) combines multiple standards like ISO 45001, ISO 14001, and ISO 9001, addressing environment management as part of the integration.

B. ISO 14501:Incorrect. ISO 14501 pertains to milk and milk products, not environmental management.

C. ISO 45001:Incorrect. ISO 45001 focuses on Occupational Health and Safety, not environmental management.

D. ISO 14001:Correct. ISO 14001 is the primary standard for Environmental Management Systems.

ISO References:

ISO 14001: Environment Management Systems.

Integrated Management Systems: Combines standards like ISO 14001 and ISO 45001.

Clause 5.1 of ISO 45001:2018 requires top management to demonstrate leadership and commitment to the OH and S management system. This includes awareness of the OH and S policy and its objectives.

Analysis of Options:

A. As a member of the management team, the Deputy College Principal is not aware of the OHSMS policy:Correct. A lack of awareness of the policy reflects poor leadership commitment, which violates Clause 5.1.

B. OH and S improvement is not possible due to the lack of awareness of the OHSMS:Incorrect. While improvement may be hindered, this is not the main issue in this scenario.

C. The Deputy College Principal is not competent to manage the OHSMS:Incorrect. The Deputy’s competence to manage the OHSMS is not in question; the issue is their lack of awareness of key elements.

D. The OH and S policy only exists as a document in the College Principal’s office:Incorrect. The policy may be accessible but not effectively communicated or understood by management.

ISO References:

Clause 5.1: Leadership and commitment.

Clause 5.2: OH and S policy.

Clause 9.3 of ISO 45001:2018 defines inputs for management review, which must include information on performance trends, feedback, risks, and opportunities for improvement.

Analysis of Options:

A. Allocation of a bigger budget for the OHS department:This is an output of management review, not an input.

B. Decisions on improvements in the OHSMS:This is an output, not an input.

C. Decisions related to continual improvement opportunities:This is an output, not an input.

D. Procurement of new safety harnesses for workers:This is an operational action, not an input for management review.

E. Proposal to prioritize health and safety issues as a business strategy:Proposals may be discussed during review, but they are outputs.

F. Report showing the trend of an increase in safety incidents:Correct. This is a valid input that informs system performance.

G. Updates to the risk register:Correct. Risk updates are required inputs under Clause 6.1.2.

H. Worker feedback of positive and negative comments:Correct. Feedback is an essential input per Clause 5.4 and Clause 9.3.

ISO References:

Clause 9.3: Management review inputs.

Clause 5.4: Worker consultation and participation.

The correct answer is A.

This is a serious attempted bribe and a direct threat to audit integrity, impartiality, and credibility. A third-party auditor must not accept gifts, inducements, or favorable treatment in exchange for changing, hiding, or weakening audit findings. The auditor must act ethically and protect the certification process from improper influence.

The organization has also failed to implement the agreed corrective action, so that failure must be recorded accurately. Any attempt to conceal it would be dishonest and would invalidate the audit outcome. In certification auditing, impartiality and objective evidence are fundamental principles. An offer of discounted personal work in exchange for suppressing an audit finding is unacceptable and must be escalated.

Therefore, the correct response is to:

stop the audit activity, because the integrity of the audit has been compromised;

leave the site;

report the attempted bribe immediately to the individual(s) managing the audit programme or certification body;

avoid further direct contact with the auditee until instructions are given.

Why the other options are wrong:

B is unethical because it ignores both the failed corrective action and the attempted bribe.

C is fraudulent because it involves knowingly recording false audit information and accepting the improper benefit.

D is also unethical because it accepts the benefit indirectly and delays the audit to help the auditee avoid the finding.

Analysis of Options:

A. The organisation must attempt to identify and address every risk it faces:Incorrect. ISO 45001 focuses on OH and S risks and not every risk faced by the organization.

B. The effect of uncertainty (i.e. risk) can result in positive outcomes as well as negative ones:Correct. Clause 3.20 defines risk as the " effect of uncertainty, " which may result in positive or negative outcomes.

C. Although organisations are required to carry out risk management, the method by which they do so is up to them:Correct. ISO 45001 does not prescribe specific risk management methods, leaving the organization to choose the approach that best suits its context (Clause 6.1.2).

D. Risk assessment is an activity that must be carried out by top management:Incorrect. Risk assessment can involve workers and other personnel; it is not limited to top management.

E. The organisation is required to assess risks arising from OH and S hazards:Correct. Clause 6.1.2.2 requires organizations to assess OH and S risks associated with hazards.

F. Risk is often expressed as a combination of likelihood and impact:Correct. This is a common way to express risk, aligned with Clause 6.1.2.

ISO References:

Clause 3.20: Definition of risk.

Clause 6.1.2: Hazard identification and risk assessment

Stage 1 is the readiness and preliminary assessment stage of an initial certification audit. Its purposes include reviewing relevant management-system documented information, assessing site-specific conditions and determining whether the organisation is sufficiently prepared for Stage 2. Any weaknesses that could become nonconformities during Stage 2 can therefore be communicated as areas of concern, making C correct. Option A is incorrect because ISO 19011 provides auditing guidance; the formal two-stage certification requirements are established through ISO/IEC 17021-1. Option B describes the more extensive Stage 2 assessment, where effective implementation and conformity are evaluated. Option D is also incorrect because discussions with client personnel form part of Stage 1 readiness determination. ISO 45001 Lead Auditor training material explicitly identifies Stage 1 areas of concern that could become Stage 2 nonconformities.