8 min read
How to Audit OH&S Objectives in ISO 45001
How to check that objectives are measurable, linked to the policy and risks, backed by a plan and actually achieved.
3FOLD Training is a CQI IRCA Approved Training Partner (ATP 6039853) · Licensed by KHDA, Dubai
Objectives turn the occupational health and safety (OH&S) policy into something a team can work toward. A policy that promises to protect workers means little until someone sets a target, finds the resources and checks the result. An auditor therefore looks past the list of objectives and asks whether each one was planned, owned and followed up. This guide is for auditors working to ISO 45001:2018 and for anyone preparing for the CQI (Chartered Quality Institute) and IRCA (International Register of Certificated Auditors) ISO 45001 Lead Auditor course.
To audit OH&S objectives in ISO 45001, check that objectives exist at relevant functions and levels, that they are consistent with the OH&S policy and measurable where practicable, and that they take account of requirements, risks and opportunities and worker consultation. Then check the plan to achieve them: what will be done, resources, who is responsible, when it will be done and how results are evaluated. Clause 6.2 of ISO 45001:2018 sets the requirements.
| Standard audited | ISO 45001:2018, Occupational health and safety management systems |
| Clause | 6.2, OH&S objectives and planning to achieve them |
| Purpose | Turn the policy into targets the organization can achieve |
| Key tests | Link to policy, measurable, planned, owned, monitored, communicated |
| Evidence to use | Objectives register, action plans, progress reports and interviews |
| Related course | ISO 45001 Lead Auditor · PR357 · CQI and IRCA |
__STRIP1__
What does ISO 45001 require for OH&S objectives?
It requires the organization to set OH&S objectives at relevant functions and levels and to plan how to achieve them.
Clause 6.2.1 of ISO 45001:2018 asks for objectives that are consistent with the OH&S policy and measurable where practicable or capable of performance evaluation. They must take account of applicable requirements, the results of the risk and opportunity assessment and the results of consultation with workers. They must also be monitored, communicated and updated as appropriate. Clause 6.2.2 then asks the organization to plan how to achieve them. Always check the exact wording in the current standard. Our guide to the role of top management in ISO 45001 explains who owns the policy behind the objectives, and our guide to how an ISO 45001 audit works shows where this check sits in an audit.
What makes a good OH&S objective?
A good objective is linked to the policy and the risks, measurable where practicable, owned by someone and updated when things change.
The table turns the requirements into audit questions. Use it to judge a single objective.
| Test | What the auditor asks |
|---|---|
| Consistent with the policy | Which policy commitment does this objective support? |
| Based on risks and requirements | Did risks, opportunities and legal requirements shape it? |
| Worker input | Were workers consulted when it was set? |
| Measurable or evaluable | How will the organization know it has been achieved? |
| Monitored and communicated | Who sees progress, and who is told? |
| Updated | Has it changed when risks or the business changed? |
An objective with no measure is a wish, not a target.
Want to practice auditing a real process? The course includes editable audit working documents and a case study.
What must the plan to achieve objectives contain?
It must say what will be done, with what resources, who is responsible, when and how results are evaluated.
Clause 6.2.2 also asks the organization to decide how the actions will be integrated into its business processes. An objective with no plan rarely moves. Look for a plan that names an owner, a date and an indicator, and that shows how the work fits into normal operations instead of sitting on the side. Our guide to continual improvement in ISO 45001 shows how achieved objectives feed improvement.
| Plan element | What the auditor asks |
|---|---|
| What will be done | Are the actions specific? |
| Resources | Were people, time and money considered? |
| Who is responsible | Is a named person accountable? |
| When it will be completed | Is there a date, and is it being met? |
| How results are evaluated | Is there an indicator to track? |
| Integration | Are the actions part of normal business processes? |
How do you plan an audit of OH&S objectives?
Ask for the objectives register, the plans and the latest progress reports, and pick a sample to trace.
Request the objectives, the action plans and the last one or two progress reports. Choose objectives of different kinds, such as one linked to a high risk, one linked to a legal requirement and one that came from worker consultation. Plan to meet the person who owns the objectives and at least one owner of an action. Our ISO 45001 audit plan and checklist guide shows how to build this into your checklist, and our guide to the documents required for an ISO 45001 audit helps you decide what to read first.
What evidence should you collect?
Collect the objectives register, the action plans, progress records and proof that people were told.
| Check | Records | Interview or observation |
|---|---|---|
| Linked to the policy | Policy and objectives register | Ask which commitment each objective supports |
| Plan exists | Action plan with owner, date and resources | Ask the owner what has been done |
| Progress is measured | Indicators and progress reports | Ask how progress is checked |
| Workers were consulted | Consultation records | Ask workers if they helped set it |
| Communicated and updated | Notices, briefings and revision history | Ask workers what they know about the objectives |
Remember that a comment is a lead, and you confirm it with a record or an observation. Our guide to how to interview workers in an ISO 45001 audit shows how to ask the questions.
How do you interview people about objectives?
Ask the owner how an objective was set and what has been done, then ask workers what they know.
- Ask top management how the objectives connect to the OH&S policy.
- Ask the objective owner to show the plan and the latest progress.
- Trace one action from the plan to evidence that it was done.
- Ask for a missed target and what the organization did about it.
- Ask workers or their representatives whether they were consulted and what they know about the objectives.
Our guide to worker consultation and participation in ISO 45001 explains why workers should help set objectives, and our guide to auditing management review in ISO 45001 shows where progress on objectives is reviewed.
Not sure whether to start as an internal or lead auditor? Compare the two roles in our guide.
What gaps do auditors commonly find in OH&S objectives?
Common gaps are vague objectives, no plan, no owner, no measure and objectives that never change.
- Vague objectives. “Improve safety” with no measure or date.
- No plan. The objective is stated but nobody planned the work.
- No owner. Nobody is accountable for the result.
- Not linked to risk. Objectives ignore the biggest hazards.
- Never updated. The same objectives run for years while the business changes.
Treat these as prompts, not conclusions, and confirm each one with evidence before you raise a finding. Our guide to auditing OH&S monitoring in ISO 45001 covers how progress is measured, and our guide to auditing evaluation of compliance in ISO 45001 covers the neighboring part of performance evaluation.
Objectives simulation: choose the best auditor action
For practice only. Read each situation and choose the best response. These scenarios were written by 3FOLD Training and are not real exam questions.
1 scenario answered: 1 of 1 correct
Preloaded example: Situation 1 is already answered. An objective such as “improve safety” has no measure, so ask how the organization will know it has been achieved.
Frequently asked questions
What does ISO 45001 clause 6.2 require?
Clause 6.2 of ISO 45001:2018 requires the organization to establish OH&S objectives at relevant functions and levels and to plan how to achieve them. Objectives must be consistent with the OH&S policy, measurable where practicable or capable of evaluation, monitored, communicated and updated as appropriate.
What must an ISO 45001 objective take into account?
Under clause 6.2.1 of ISO 45001:2018, objectives must take into account the applicable requirements, the results of the assessment of risks and opportunities and the results of consultation with workers and, where they exist, workers’ representatives.
What must the plan to achieve ISO 45001 objectives include?
Clause 6.2.2 of ISO 45001:2018 asks the organization to determine what will be done, what resources will be required, who will be responsible, when it will be completed and how the results will be evaluated, including indicators for monitoring. It must also consider how to integrate the actions into its business processes.
Must ISO 45001 objectives be measurable?
ISO 45001:2018 asks for objectives that are measurable if practicable or capable of performance evaluation. Where a number is not practicable, the organization needs another way to judge whether the objective has been achieved, and an auditor checks that it exists.
What evidence do auditors look for on ISO 45001 objectives?
Auditors look for the objectives register, the link to the OH&S policy, action plans with owners, dates and resources, progress reports and indicators, records of consultation with workers, and proof that objectives were communicated and updated. They also interview top management, objective owners and workers.
How do ISO 45001 objectives link to the OH&S policy?
Clause 6.2.1 requires objectives to be consistent with the OH&S policy. An auditor checks that each objective supports a commitment in the policy, such as eliminating hazards, reducing risks or continual improvement.
Are ISO 45001 objectives reviewed by top management?
Clause 9.3 asks management review to consider the extent to which OH&S objectives have been met. An auditor traces progress from the objective into the review and checks that top management acted on it.
Where 3FOLD Training fits
3FOLD Training is a CQI IRCA Approved Training Partner (ATP 6039853), licensed by the Knowledge and Human Development Authority (KHDA) in Dubai. The ISO 45001 Lead Auditor course is delivered as 40 hours of Virtual Instructor Led Training (VILT), with learning management system (LMS) access for class recordings and mock exams, and you can check the next available batch on the course page. We prepare you for the exam; CQI and IRCA examine and certify. Before you book, read what you need in our eligibility guide.
Ready to audit with confidence? Check the next batch and see what the course includes.
UAE mobile and WhatsApp: +971 50 481 9989
India mobile: +91 91762 57536
Chennai: Plot No: 1342, HIG, TNHB Main Road, Sithalapakkam, Chennai 600126
Monday to Friday 9:00 am to 5:00 pm, Saturday 9:00 am to 2:00 pm. See the 3FOLD Training contact page for all details.



Leave a reply