
Table of Contents
Introduction
ISO 45001 surveillance audit is essential for maintaining an effective Occupational Health and Safety (OH&S) management system. Proper preparation ensures compliance, improves workplace safety, and demonstrates continual improvement. This guide provides practical steps, short, actionable tips, and highlights the roles of HSE and risk management training to help your organization succeed.
What Is an ISO 45001 Surveillance Audit?
An ISO 45001 surveillance audit is a scheduled assessment conducted by a certification body to verify ongoing compliance with ISO 45001 standards. It checks:
- Implementation of OH&S procedures
- Effectiveness of risk controls
- Completion of corrective actions
- Employee participation and engagement
- Management system reviews
Surveillance audits are generally conducted annually or biannually based on your certification cycle.
Step-by-Step Preparation Guide
Review Previous Audit Findings
Check past audit reports, corrective actions, and internal audits. Ensure all gaps are addressed and verified. This step reduces the chance of non-conformities.
Conduct a Mock Internal Audit
Simulate the ISO 45001 surveillance audit internally. Focus on:
- Hazard identification and risk assessments
- Operational controls verification
- Training records, including HSE training and risk management training
- Emergency preparedness documentation
This helps identify gaps before the certification audit.
Update Documentation
Ensure all documents are accurate and accessible:
- OH&S policy and objectives
- Risk assessments and operational control procedures
- Incident and corrective action logs
- Training records
- Legal compliance registers
Verify Operational Controls
Confirm that operational safety procedures are applied effectively:
- Permit-to-work systems
- PPE compliance
- Contractor safety management
- Emergency response plans
Employees should understand these processes in practice.
Engage Employees
Employee participation is crucial. Make sure:
- Workers are aware of hazards and reporting processes
- Toolbox talks and safety meetings are documented
- Near-miss and incident reporting is active
HSE training ensures staff are confident and competent during the audit.
Prepare Management Review
Prepare Management Review
- Safety performance and compliance metrics
- Corrective actions follow-up
- Incident trends and improvements
- Resource allocation and safety initiatives
Proactive Risk Control (PRC) – HSE & Risk Management Training
At Proactive Risk Control (PRC), we help organizations prepare for ISO 45001 surveillance audits with expert guidance. PRC offers HSE training, risk management training, internal audit support, and operational control verification to ensure full compliance. By leveraging PRC, businesses can reduce audit findings, improve workplace safety culture, and demonstrate effective continual improvement.
Quick Audit Checklist
- Previous audit actions completed
- Internal audit conducted
- Documentation updated
- Employees are trained and engaged
- Corrective actions verified
- Operational risks assessed
- Emergency drills documented
- Management review completed
- Legal compliance verified
Common Mistakes to Avoid
- Missing or incomplete documentation
- Lack of worker participation
- Outdated risk assessments
- Unverified corrective actions
- Poorly prepared management review
Final Thoughts
Preparing for an ISO 45001 surveillance audit requires structured planning, documentation, and trained employees. Following this guide and leveraging PRC’s HSE training and risk management training ensures compliance, enhances workplace safety, and demonstrates continual improvement. Start early, engage your team, and approach your audit with confidence.
Call to Action
Ensure your organization is audit-ready! Contact Proactive Risk Control (PRC) today for expert ISO 45001 audit support, HSE training, and risk management training.
Frequently Asked Questions
Q1: How often is a surveillance audit conducted?
A: Typically annually or biannually, depending on your certification cycle.
Q2: What documents are needed?
A: OH&S policy, risk assessments, training records, incident reports, corrective actions, and legal compliance registers.
Q3: Why is employee engagement important?
A: Auditors verify that workers understand hazards, reporting procedures, and safety responsibilities.
Q4: How can PRC help?
A: PRC provides HSE training, risk management training, internal audit guidance, and support in operational control verification for audit readiness.
Q5: What are common non-conformities?
A: Missing documentation, outdated risk assessments, incomplete corrective actions, and insufficient worker participation

