When the alarm stops and people are safe, the work is not finished. What an organization does next shows whether its emergency arrangements really work. ISO 45001 expects the response to be evaluated, the plan to be revised where needed, the right people to be told and any resulting incident to be investigated. This guide sets out what should happen after an emergency under ISO 45001:2018 and how an auditor checks it. It is for auditors and for anyone preparing for the CQI (Chartered Quality Institute) and IRCA (International Register of Certificated Auditors) ISO 45001 Lead Auditor course. Always check the exact wording in the current standard.

What does ISO 45001 expect once an emergency is over?

It expects a review, a plan update, communication and an investigation where needed.

The four moves work as a loop. The organization evaluates how the response went, revises the plan where it fell short, tells the right people and investigates any incident that resulted. The aim is that the next emergency is handled better than the last. Our guide to auditing emergency preparedness and response in ISO 45001 covers the planning and readiness side, and our guide to the role of top management in ISO 45001 explains who is accountable.

Which ISO 45001 clauses apply after an emergency?

Clauses 8.2, 10.2, 7.4, 5.4 and 9.3 work together after an emergency.

An emergency plan that is never revised after a real event is only half a plan.

How should the response be reviewed and the plan revised?

Hold a prompt review, record what went well and what did not, and update the plan.

1. Review soon after while people still remember what happened.
2. Compare what happened with what the plan said should happen.
3. Record the gaps and what worked well.
4. Assign actions with an owner and a date.
5. Revise the plan and the training, then check that the changes work.

Our guide to auditing the hierarchy of controls helps when the review finds that stronger controls are needed, and our guide to auditing management of change in ISO 45001 shows how revised plans should be handled as a change.

Who must be told and involved after an emergency?

Workers, contractors, visitors and, where relevant, emergency services and authorities.

Clause 8.2 asks the organization to communicate relevant information on emergency preparedness to its workers, to contractors, visitors, emergency response services, authorities and, as appropriate, the local community. After an event, that includes what happened, what is changing and what people must do differently. Workers should also be consulted on the review, because they know what really happened on the floor. Our guide to worker consultation and participation in ISO 45001 explains how, and our guide to auditing contractor management in ISO 45001 covers contractors on site. Any reporting to authorities that the law requires is a legal matter, so check your own obligations.

When does an emergency become an incident to investigate?

When it caused harm or a near miss, it should be investigated and corrected under clause 10.2.

An emergency that led to injury, ill health, damage or a near miss is likely to be an incident. Clause 10.2 asks the organization to react, take action to control and correct it, evaluate the need for corrective action with workers involved, determine the root causes, review the effectiveness of the action and keep documented information. Injuries during evacuations and drills count too. Our guide to audit follow-up and corrective action in ISO 45001 shows how to check that actions really close the gap.

Which records should you keep after an emergency?

Keep the report, the review, the actions, the revised plan and the communications.

Our guide to documents required for an ISO 45001 audit helps you decide what to read first, and our guide to auditing management review in ISO 45001 shows how results reach top management.

Which gaps do auditors find after emergencies?

Common gaps are no review, open actions, an outdated plan and workers left out.

• No review. The emergency ended and nothing was recorded.
• Open actions. Findings sit on a list for months with no owner.
• Outdated plan. The plan was not revised or the new version was not shared.
• Workers left out. People who were there were never asked.
• Drill injuries ignored. Harm during a drill is not treated as an incident.

Treat these as prompts and confirm each one with evidence before you raise a finding. Our guide to continual improvement in ISO 45001 shows how lessons from emergencies feed improvement.

Frequently asked questions

Where 3FOLD Training fits

3FOLD Training is a CQI IRCA Approved Training Partner (ATP 6039853), licensed by the Knowledge and Human Development Authority (KHDA) in Dubai. The ISO 45001 Lead Auditor course is delivered as 40 hours of Virtual Instructor Led Training (VILT), with learning management system (LMS) access for class recordings and mock exams, and you can check the next available batch on the course page. We prepare you for the exam; CQI and IRCA examine and certify. Before you book, read what you need in our eligibility guide.