ISO-45001-Lead-Auditor Exam Dumps - PECB ISO 45001 Questions and Answers

Audit reports should provide a clear summary of the audit process, findings, and conclusions based on the defined scope, objectives, and criteria. They do not include administrative details (e.g., invoices) or operational aspects (e.g., corrective action plans).

Analysis of Options:

A. A copy of the certification body invoice for the audit:Incorrect. Invoices are unrelated to the content of audit reports and are handled separately.

B. A reference to the audit criteria used:Correct. Audit criteria (e.g., ISO 45001 standards) must be included in the report to define the basis for the audit.

C. A statement of the audit objectives:Correct. The report must outline the objectives to ensure clarity on the purpose of the audit.

D. Audit findings and any related evidence:Correct. Findings and evidence are essential to support conclusions and recommendations.

E. Confirmation of the audit scope:Correct. The scope defines the boundaries of the audit and must be documented in the report.

F. Contact details for all members of the audit team:Incorrect. Personal contact details are unnecessary and not typically included in reports.

G. The audit conclusions reached:Correct. Conclusions summarize the outcomes of the audit, such as conformity, nonconformities, or recommendations.

H. A corrective action plan that addresses the identified nonconformities:Incorrect. Corrective action plans are the auditee ' s responsibility and not included in the audit report.

ISO References:

ISO 19011:2018, Clause 6.7.3: Content of audit reports.

Clause 9.1.2 of ISO 45001:2018 outlines the need for organizations to evaluate compliance with applicable legal and other requirements as part of their OH and S management system.

Analysis of Options:

A. The organization must evaluate its compliance status at least once a year:The standard does not prescribe a specific frequency but states that evaluations must be conducted at planned intervals.

B. ' Other requirements ' include requirements that the organization has chosen to comply with:Correct. Other requirements may include voluntary standards, industry codes, or contractual obligations.

C. A management review is required in all instances where one or more legal requirements are not being met:This is not true. Management reviews address compliance but are not mandated for every noncompliance.

D. Every member of an audit team must have a detailed understanding of the legal requirements for the sector and type of organization they are auditing:Not true. Auditors must have general competency but can rely on subject-matter experts for legal specifics.

E. If the organization is failing to address a legal requirement relating to another discipline (e.g., Environmental management), this cannot be raised in the audit:Not true. If the legal noncompliance impacts OH and S, it can be raised.

F. The organization cannot outsource its process for evaluating compliance:The organization can outsource evaluation but retains accountability.

G. The organization is required to establish a process for evaluating compliance:Correct. Clause 9.1.2 requires a process for compliance evaluation.

H. The organization is required to evaluate its compliance status with OH and S legal and other requirements:Correct. Clause 9.1.2 explicitly states this requirement.

ISO References:

Clause 9.1.2: Evaluation of compliance.

Clause 7.5: Documented information requirements

ISO 45001 emphasizes the importance of worker participation, particularly non-managerial workers, in developing and improving the OH and S management system. Clause 5.4 outlines specific areas where their involvement is crucial.

Analysis of Options:

A. Determining competence requirements:Incorrect. Competence requirements are primarily determined by management but may involve feedback from workers.

B. Determining how to fulfil legal requirements:Incorrect. Management typically handles compliance with legal requirements.

C. Determining controls on outsourced processes:Incorrect. This is a management responsibility.

D. Managing the internal audit programme:Incorrect. Workers participate in audits, but managing the program is a management task.

E. Determining what needs to be communicated:Incorrect. Communication strategies are usually set by management.

F. Determining actions to eliminate hazards:Correct. Non-managerial workers ' input is vital in identifying and eliminating workplace hazards (Clause 8.1.2).

G. Establishing the OHS policy:Correct. Workers’ participation in policy development ensures it is relevant and inclusive (Clause 5.2).

H. Establishing OHS objectives:Correct. Workers’ participation ensures that objectives are practical and aligned with workplace realities (Clause 6.2).

Analysis of Options:

A. The organisation must attempt to identify and address every risk it faces:Incorrect. ISO 45001 focuses on OH and S risks and not every risk faced by the organization.

B. The effect of uncertainty (i.e. risk) can result in positive outcomes as well as negative ones:Correct. Clause 3.20 defines risk as the " effect of uncertainty, " which may result in positive or negative outcomes.

C. Although organisations are required to carry out risk management, the method by which they do so is up to them:Correct. ISO 45001 does not prescribe specific risk management methods, leaving the organization to choose the approach that best suits its context (Clause 6.1.2).

D. Risk assessment is an activity that must be carried out by top management:Incorrect. Risk assessment can involve workers and other personnel; it is not limited to top management.

E. The organisation is required to assess risks arising from OH and S hazards:Correct. Clause 6.1.2.2 requires organizations to assess OH and S risks associated with hazards.

F. Risk is often expressed as a combination of likelihood and impact:Correct. This is a common way to express risk, aligned with Clause 6.1.2.

ISO References:

Clause 3.20: Definition of risk.

Clause 6.1.2: Hazard identification and risk assessment

Worker participation is a fundamental principle of ISO 45001 (Clause 5.4). It ensures workers at all levels are involved in key activities to enhance the OH and S management system ' s effectiveness.

Analysis of Options:

A. Determining competence requirements:Incorrect. Determining competence is primarily the responsibility of management, though workers may provide input.

B. Establishing OHS objectives:Correct. Worker involvement ensures objectives are realistic and relevant to workplace conditions (Clause 6.2).

C. Managing internal audit programme:Incorrect. Managing audits is typically a managerial responsibility, though workers may participate in audits.

D. Determining actions to eliminate hazards:Correct. Workers’ insights are critical in identifying and implementing actions to eliminate hazards (Clause 8.1.2).

E. Determining what needs to be communicated:Incorrect. While communication strategies impact workers, their participation in determining communication needs is not explicitly required.

F. Establishing OHS policy:Correct. Workers should be involved in developing policies to ensure relevance and buy-in (Clause 5.2).

ISO References:

Clause 5.4: Worker participation.

Clause 6.2: OHS objectives.

Clause 8.1.2: Hierarchy of controls and hazard elimination.

In a first-party audit (internal audit), the organization conducts the audit to determine whether its management system conforms to planned arrangements, to the organization’s own requirements, and to the requirements of ISO 45001, and whether it is effectively implemented and maintained. ISO 45001 Clause 9.2 requires internal audits to provide information on conformity and effectiveness.

E. Verify compliance with regulatory requirements is a valid audit objective because ISO 45001 requires the organization to determine its legal and other requirements and to evaluate compliance with them. Internal audits commonly include verification that these legal OH and S obligations are being met as part of checking the effectiveness and conformity of the OH and S management system. This aligns with Clause 6.1.3 and Clause 9.1.2 of ISO 45001.

B. Complete the audit on time is also an audit objective in practical first-party auditing because audit objectives are established for the audit and supported by planning, resources, timing, and reporting arrangements. While it is not a system conformance criterion, it is a valid objective for the audit assignment itself, ensuring the audit is performed as planned and efficiently managed. This fits normal lead auditor practice in planning and conducting internal audits.

Why the other options are not correct:

A. Apply international standards is too broad and is not itself an audit objective. Standards are the criteria or reference, not the objective.

C. Confirm the scope of the management system is accurate is not usually stated as a first-party audit objective; scope is established by the organization under Clause 4.3, though it may be reviewed during audits.

D. Prepare the audit report for the certification body does not apply to a first-party audit, because internal audits are not performed for a certification body.

F. Update the management policy is a management responsibility, not an audit objective. Audits may identify inputs for policy review, but updating the policy is not the purpose of the audit itself.

Therefore, the two correct options are:

B, E

Clause 0.2 of ISO 45001 emphasizes the involvement of top management and alignment of OH and S objectives with the organization’s OH and S policy.

Nonconformities Identified:

The objectives were developed by an external consultant without involving top management, which undermines leadership accountability and commitment.

The objectives were based on a competitor’s framework, not aligned with the organization’s unique OH and S policy or context.

Analysis of Options:

A. Establishing OH and S objectives did not include top management.True. Clause 5.1 (Leadership) and Clause 6.2 (Objectives) emphasize that top management must be involved in defining and supporting OH and S objectives.

B. OH and S objectives are not being implemented by personnel.Implementation relates to operationalization, not the development phase, and is not relevant to Clause 0.2.

C. OH and S objectives are not maintained as documented information.While documentation is required, the absence of documented information is a separate issue under Clause 7.5, not Clause 0.2.

D. OH and S objectives were not established in alignment with the organization’s OH and S policy.True. Clause 6.2.1 requires objectives to align with the OH and S policy, which reflects the organization’s commitment to safety and health.

E. The consultant has not interpreted ISO 45001 correctly.While possibly true, the issue here is the organization’s failure to involve top management, not the consultant’s interpretation.

F. The organization cannot afford to undertake OH and S objectives all at once.Financial constraints are not relevant to Clause 0.2; objectives can be prioritized for phased implementation.

ISO References:

Clause 0.2: Leadership commitment and alignment with organizational policy.

Clause 5.1: Top management’s role in leadership and participation.

Clause 6.2.1: Establishing OH and S objectives aligned with the policy.

Clause 5.2 of ISO 45001:2018 outlines requirements for the OH and S policy, emphasizing commitment to continual improvement, compliance with legal requirements, and communication of the policy to interested parties.

Analysis of Options:

A. The management is committed to health and safety improvement:Correct. The policy explicitly states the organization’s commitment to improvement, meeting Clause 5.2 requirements.

C. The organization has a good reputation for safe experiences:Not relevant to ISO 45001 requirements; reputation is not a policy criterion.

D. The organization intends to communicate its policy to external parties:Correct. Clause 5.2 requires the policy to be communicated to interested parties.

E. The organization is committed to continual health and safety improvement:Correct. This directly aligns with Clause 5.2, which mandates continual improvement.

F. The organization meets all statutory requirements:The policy does not explicitly state compliance with legal requirements, even though this is implied.

G. The organization satisfies its customers’ health and safety requirements:The policy does not specifically address customer requirements.

H. The organization uses contractors committed to health and safety:Not stated in the policy.

I. The organization’s processes deliver the intended improvement to health and safety:This is not evident from the policy statement.

ISO References:

Clause 5.2: OH and S policy.