QEHScompliance
ISO 45001 audit prep: the 7 evidence gaps most programs share
We walk through the seven gaps the external auditor will find if you do not fix them first. Every gap has a Composer template that closes it.
QEHS safety desk · Safety practitioners on staff · March 3, 2026 · 10 min read
- Worker consultation and participation (clause 5.4) — consultation log missing timestamps and attendance.
- Legal and other requirements (6.1.3) — compliance register exists as a spreadsheet, not a live evaluation.
- Operational planning and control (8.1) — procedures referenced in documents but not executable as workflows.
- Emergency preparedness (8.2) — drill records present, but corrective actions from drills are not tracked.
- Monitoring, measurement, analysis (9.1) — leading indicators defined but not reported at management review.
- Internal audit (9.2) — audit plan exists, but scope coverage is not traceable across clauses.
- Management review (9.3) — minutes exist, but inputs/outputs are not mapped to the clause-required items.
Each of the seven above is a module-plus-report pattern. The fastest path is the Audits module paired with the clause-mapped lookup list we ship with the ISO 45001 template pack.