8 min read
Is an Emergency an Incident Under ISO 45001?
What the standard means by an incident, when an emergency counts as one, and what the organization must do about near misses and accidents.
3FOLD Training is a CQI IRCA Approved Training Partner (ATP 6039853) · Licensed by KHDA, Dubai
A fire alarm sounds, people leave the building and everyone is safe. Was that an incident? The answer matters, because an incident triggers the investigation and corrective action that ISO 45001 requires, while a well-run drill does not. This guide explains how ISO 45001:2018 defines an incident, when an emergency counts as one and how an auditor checks the decision. It is for auditors and for anyone preparing for the CQI (Chartered Quality Institute) and IRCA (International Register of Certificated Auditors) ISO 45001 Lead Auditor course. Always check the exact definitions and wording in the current standard.
Not always. ISO 45001:2018 defines an incident as an occurrence arising out of, or in the course of, work that could or does result in injury and ill health. An emergency that caused harm, or could have caused it, is likely to be an incident and should be investigated and corrected under clause 10.2. A planned drill that goes well is normally an exercise, not an incident. The organization should be able to show how it decided and keep records.
| Standard | ISO 45001:2018, Occupational health and safety management systems |
| Incident | An occurrence arising out of or in the course of work that could or does result in injury and ill health |
| Accident | An incident in which injury and ill health occur |
| Near miss | An incident with potential for harm but no injury or ill health |
| Response | Clause 10.2, incident, nonconformity and corrective action |
| Related course | ISO 45001 Lead Auditor · PR357 · CQI and IRCA |
What is an incident in ISO 45001?
It is an occurrence at or because of work that could or does cause injury and ill health.
The word could is important. An incident is not only an event in which someone is hurt. It also covers an event where harm did not happen but was possible. That is why the standard treats near misses as part of the same picture. Our guide to auditing emergency preparedness and response in ISO 45001 covers readiness, and our guide on what should happen after an emergency under ISO 45001 covers the review that follows.
Is an emergency always an incident under ISO 45001?
No. It depends on whether harm occurred or could have occurred.
| Event | Likely treatment |
|---|---|
| Planned fire drill, no problems | An exercise, recorded under clause 8.2 |
| Real evacuation, someone hurt | An incident, and an accident because injury occurred |
| Gas leak, evacuation, no injury | An incident, as a near miss, because harm was possible |
| False alarm, no hazard found | Review the cause of the alarm; the organization decides if it is an incident |
| Injury during a drill | An incident, because harm occurred |
A near miss is still an incident, because the standard asks whether harm could have happened.
Want to practice auditing a real process? The course includes editable audit working documents and a case study.
How do accidents, near misses and incidents differ?
An incident is the wide term, and accidents and near misses are two kinds of it.
- Incident. Any occurrence that could or does result in injury and ill health.
- Accident. An incident where injury and ill health actually occur.
- Near miss. An incident where no injury or ill health occurs but there was potential for it.
The standard also notes that an incident can occur without any nonconformity, and that one incident can be linked to several. That is why the investigation looks at causes rather than blame. Our guide to auditing the hierarchy of controls shows how the findings should lead to stronger controls.
What must the organization do when it is an incident?
React, investigate, find the causes, act and check the action worked.
- React to the incident, control and correct it and deal with the consequences.
- Evaluate the need for corrective action with workers involved.
- Find the root causes and see whether similar incidents could happen elsewhere.
- Review risks and take action, applying the hierarchy of controls.
- Check effectiveness and keep documented information as evidence.
Our guide to audit follow-up and corrective action in ISO 45001 explains how to check that actions really close the gap, and our guide to worker consultation and participation in ISO 45001 explains how workers take part.
How do you decide whether an event needs an investigation?
Use clear criteria: harm, potential for harm and learning value.
The standard leaves the organization to decide how, but good practice is to write the criteria down. An event with injury or ill health is investigated. An event with serious potential for harm, such as a gas leak or a structural failure, is investigated as a near miss. Minor events may be logged and trended. The decision and the reason should be recorded so that an auditor can see consistency. Our guide to documents required for an ISO 45001 audit helps you decide which records to ask for.
Not sure whether to start as an internal or lead auditor? Compare the two roles in our guide.
How do auditors check the link between emergencies and incidents?
They look at the criteria, the records and how workers report events.
| Check | Records | Interview or observation |
|---|---|---|
| Criteria exist | Incident reporting procedure | Ask who decides what is an incident |
| Near misses captured | Near-miss log | Ask workers how they report and what happens next |
| Emergencies assessed | Post-event reviews and incident reports | Pick an emergency and trace its record |
| Actions closed | Action log with owners and dates | Look at the fix on site |
| Management informed | Management review inputs | Ask how results reach top management |
Our guide to auditing management review in ISO 45001 shows where incident results should be reviewed.
Which mistakes do organizations make about incidents?
Common mistakes are counting only injuries, ignoring near misses and blaming individuals.
- Injuries only. Events without injury are never investigated.
- Near misses ignored. Workers do not report them, or reports are not followed up.
- Blame culture. People stop reporting because they fear being blamed.
- No criteria. Nobody can say why one event was investigated and another was not.
- Drills ignored. Lessons from drills are not recorded or acted on.
Treat these as prompts and confirm each one with evidence before you raise a finding. Our guide to continual improvement in ISO 45001 shows how lessons from incidents feed improvement.
Incident simulation: choose the best action
For practice only. Read each situation and choose the best response. These scenarios were written by 3FOLD Training and are not real exam questions.
1 scenario answered: 1 of 1 correct
Preloaded example: Situation 1 is already answered. A drill is an exercise unless something goes wrong that could cause harm.
Frequently asked questions
Is an emergency an incident under ISO 45001?
Not always. ISO 45001:2018 defines an incident as an occurrence arising out of or in the course of work that could or does result in injury and ill health. An emergency that caused harm, or could have caused it, is likely to be an incident, and the organization should react, investigate and take corrective action under clause 10.2. Always check the definitions in the current standard.
What is an incident in ISO 45001?
In ISO 45001:2018 an incident is an occurrence arising out of, or in the course of, work that could or does result in injury and ill health. The standard notes that an incident where injury and ill health occur is sometimes called an accident, and one where none occurs but there was potential is sometimes called a near miss.
What is the difference between an accident and an incident in ISO 45001?
An accident is an incident in which injury and ill health occur. An incident is wider, because it also covers occurrences that could have resulted in injury and ill health but did not, which are often called near misses.
Is a fire drill an incident under ISO 45001?
A drill is normally an exercise, not an incident. Clause 8.2 asks the organization to periodically test and exercise its response, and records of drills show this. If someone is hurt or something goes wrong that could have caused harm, the event may need to be treated as an incident.
Must near misses be investigated under ISO 45001?
ISO 45001:2018 asks the organization to determine and manage incidents, and an incident includes occurrences that could result in injury and ill health. The organization decides how to evaluate the need for action, and clause 10.2 asks it to do so with worker participation. Auditors look at how near misses are handled.
What does ISO 45001 require after an incident?
Clause 10.2 asks the organization to react to the incident and take action to control and correct it, evaluate the need for corrective action to prevent it happening again, determine root causes, review risks, implement the action and review its effectiveness. It must keep documented information as evidence.
Does the ISO 45001 Lead Auditor course cover incident investigation?
According to the 3FOLD Training course page, the ISO 45001 Lead Auditor course is delivered as 40 hours of Virtual Instructor Led Training (VILT) and teaches the audit method, which you can apply to clauses such as incident, nonconformity and corrective action. We prepare you for the exam; CQI and IRCA examine and certify.
Where 3FOLD Training fits
3FOLD Training is a CQI IRCA Approved Training Partner (ATP 6039853), licensed by the Knowledge and Human Development Authority (KHDA) in Dubai. The ISO 45001 Lead Auditor course is delivered as 40 hours of Virtual Instructor Led Training (VILT), with learning management system (LMS) access for class recordings and mock exams, and you can check the next available batch on the course page. We prepare you for the exam; CQI and IRCA examine and certify. Before you book, read what you need in our eligibility guide.
Ready to audit with confidence? Check the next batch and see what the course includes.
UAE mobile and WhatsApp: +971 50 481 9989
India mobile: +91 91762 57536
Chennai: Plot No: 1342, HIG, TNHB Main Road, Sithalapakkam, Chennai 600126
Monday to Friday 9:00 am to 5:00 pm, Saturday 9:00 am to 2:00 pm. See the 3FOLD Training contact page for all details.




Leave a reply