ISO 45001 Lead Auditor Training — Lesson 3: Operational Controls, Contractors, Procurement, Change, and Incidents

Learning Objectives

• Interpret the principles, requirements, roles, and dependencies shaping operational controls, contractors, procurement, change, and incidents.
• Apply the workflow and produce OH&S finding matrix that can withstand review.
• Analyze “contractors use unassessed methods” and recommend a proportionate evidence-based response.

Detailed Topics

• operational controls
• hierarchy of controls
• contractors
• procurement
• management of change
• emergency preparedness
• incident investigation
• finding classification
• Competence, communication, governance, documented information, risk, and follow-up

Instructor Demonstration

The instructor demonstrates the operational controls, contractors, procurement, change, and incidents workflow, identifies applicable inputs and responsibilities, records checkpoints in OH&S finding matrix, and contrasts the accepted state with a condition where contractors use unassessed methods.

Hands-On Exercise

Complete a controlled implementation, audit, analysis, or foundation exercise for Operational Controls, Contractors, Procurement, Change, and Incidents. Establish scope and criteria, collect or create evidence, examine “contractors use unassessed methods,” reach a supported conclusion, and preserve the result in OH&S finding matrix.

1. Confirm objectives, scope, roles, criteria, stakeholders, and expected outputs.
2. Perform planned activities while recording assumptions, evidence, and decisions.
3. Test a normal case, an exception, and a follow-up or improvement condition.
4. Document conclusions, owners, due dates, escalation, and verification requirements.

Scenario Analysis

• Identify the requirement or principle with the strongest influence on operational controls, contractors, procurement, change, and incidents.
• Compare two defensible responses and explain governance, risk, and evidence trade-offs.
• Determine how OH&S finding matrix should be approved, retained, reviewed, and updated.

Troubleshooting Guidance

Separate missing evidence from ineffective practice, and distinguish a documentation issue from a control, process, governance, or competence failure. Use OH&S finding matrix to trace the earliest divergence. Treat “contractors use unassessed methods” as a hypothesis until the response is validated against the relevant requirement and intended outcome.

Validation Checklist

• The scope, criteria, stakeholders, and intended outcome for operational controls, contractors, procurement, change, and incidents are explicit.
• The OH&S finding matrix links statements and decisions to objective, reviewable support.
• Responsibilities, competence, communication, risk, legal duties, and change impact were considered.
• Findings, corrective actions, monitoring, review triggers, and improvement ownership are clear.

Lesson Outcome

Learners can apply Operational Controls, Contractors, Procurement, Change, and Incidents, explain the reasoning, and defend the result through OH&S finding matrix.