Auditing Competence vs. Awareness Under ISO 45001 Clauses 7.2 and 7.3

Learn how internal auditors evaluate competence and awareness requirements under ISO 45001 Clauses 7.2 and 7.3 to verify audit readiness.

By 4Auditee6 min read
Auditing Competence vs. Awareness Under ISO 45001 Clauses 7.2 and 7.3
On this page
  1. What the Requirement Is, and Why It Exists
  2. Technical Nuances: Competence Versus Awareness
  3. Example
  4. Audit Verification Procedure and Requirement Matrix
  5. Before your audit
  6. Questions people ask
  7. What is the main difference between competence and awareness in ISO 45001?
  8. Does ISO 45001 require documented information for awareness training under Clause 7.3?
  9. How do internal auditors evaluate worker awareness during an ISO 45001 audit?
  10. Who must be consulted when determining training needs under ISO 45001?
  11. Reference documents

The short version

  • Clause 7.2 requires organisations to determine competence criteria, ensure worker capability, and retain appropriate documented information.
  • Clause 7.3 mandates ensuring workers are aware of safety policy, objectives, hazards, contribution, and removal from danger.
  • Competence focuses on demonstrated ability through education, training, or experience, whereas awareness focuses on worker understanding and alignment.
  • Internal auditors must evaluate competence records and conduct worker awareness sampling across operational shifts and contractor groups.

What the Requirement Is, and Why It Exists

ISO 45001 establishes distinct operational frameworks for managing workforce competence under Clause 7.2 and workforce awareness under Clause 7.3. Under Clause 7.2, organisations must determine the necessary competence of workers that affects or can affect occupational health and safety performance. The organisation must ensure workers are competent based on appropriate education, training, or experience, take actions to acquire and maintain necessary competence, and retain appropriate documented information as evidence. Under Clause 7.3, organisations must ensure that workers are made aware of the health and safety policy, objectives, their contribution to system effectiveness, implications of non-conformance, hazards, and their right to remove themselves from imminent danger.

This human resource framework applies across all management levels, including top management, line supervisors, compliance leads, internal auditors, contractors, and non-managerial workers. Conflating training attendance records with proven competence or assuming that passive policy distribution achieves worker awareness creates critical operational vulnerabilities. ISO 45001 distinguishes between knowing what is required and possessing the demonstrated capability to execute work safely. Quality managers and compliance leads must build systematic processes that establish competence benchmarks, deliver targeted training, verify worker comprehension, and retain audit-ready evidence.

Technical Nuances: Competence Versus Awareness

Understanding the technical distinction between Clause 7.2 and Clause 7.3 relies on standard definitions and mandatory documented information rules. Under Clause 3.23, competence is defined as the ability to apply knowledge and skills to achieve intended results. Competence requires proven capability, whereas awareness represents understanding, mental alignment, and risk perception. Under Clause 7.2, retaining documented information is a mandatory requirement, whereas Clause 7.3 does not explicitly require retaining documented information for awareness itself.

Under Clause 7.2, organisations must evaluate training needs associated with hazard identification and risk assessment under Clause 6.1.2. Non-managerial workers must participate in determining competence requirements and training needs in accordance with Clause 5.4 e) 4). Where applicable actions are taken to acquire competence, such as mentoring, reassignment, or hiring external personnel, organisations must evaluate the effectiveness of actions taken. Under Clause 7.3, worker awareness must encompass the right to remove themselves from work situations that present an imminent and serious danger to life or health, along with protection from undue consequences for doing so under Clause 5.1 k).

Important: Retaining training attendance sheets alone does not satisfy Clause 7.2, as organisations must retain documented information proving post-training evaluation of competence.

Common finding: Internal auditors frequently cite nonconformities when organisations fail to evaluate competence requirements for temporary workers and contractors performing high-risk tasks.

Example

A chemical processing plant hires contract maintenance technicians to service high-pressure reactor valves. Under Clause 7.2, the compliance lead checks technical certifications and past experience records to confirm that technicians possess necessary competence before starting work. Non-managerial technicians participate in defining task safety instructions under Clause 5.4 e) 4). During an internal audit, the auditor interviews technicians at the reactor unit under Clause 7.3 to verify hazard awareness and emergency procedures, confirming full compliance across both clauses.

Audit Verification Procedure and Requirement Matrix

Auditing Clause 7.2 and Clause 7.3 requires a structured, multi-step verification procedure combining documentation review with operational worker sampling. Internal auditors must execute the following four-step procedure during internal audits.

  1. Review job descriptions, risk assessments, and legal requirements to verify that competence criteria are clearly defined for each role affecting safety performance.
  2. Inspect competence records under Clause 7.2 d) to confirm that qualifications, training certificates, and post-training effectiveness evaluations are retained.
  3. Sample workers across operational shifts, maintenance teams, and contractor groups to conduct direct, structured interviews regarding Clause 7.3 awareness items.
  4. Evaluate whether corrective actions taken under Clause 10.2 include retraining or updating competence requirements following workplace incidents.
RequirementWhat the Auditor ChecksEvidence to Have Ready
Clause 7.2 a) Competence DeterminationWhether the organisation has defined necessary education, training, and experience requirements for safety-critical rolesJob descriptions, competency matrices, risk assessment competence specs
Clause 7.2 b) Worker CapabilityWhether workers, including contractors, satisfy established competence criteria before performing workQualification certificates, trade licenses, apprenticeship records
Clause 7.2 c) Actions & EffectivenessWhether actions taken to acquire competence are evaluated for practical effectiveness in the workplacePost-training assessment forms, practical task evaluations, mentoring sign-offs
Clause 7.2 d) Documented InformationWhether documented evidence of competence is systematically retained and kept up to dateCentralised competence registers, audit-ready training files, re-certification logs
Clause 7.3 a) & b) Policy & Objectives AwarenessWhether workers can explain the health and safety policy commitments and relevant safety objectives in their own wordsWorker interview records, toolbox talk logs, shift briefing notes
Clause 7.3 c) & d) Contribution & ImplicationsWhether workers understand how their actions impact safety performance and the consequences of deviating from proceduresInterview sampling notes, procedure review logs, incident review records
Clause 7.3 e) & f) Hazards & Right to WithdrawWhether workers are aware of workplace hazards and understand their right to remove themselves from imminent dangerHazard reporting logs, worker interview records, stop-work policy records

Tip: Conduct awareness interviews at the actual workstation rather than in an office setting to observe whether physical safety controls align with worker answers.

Before your audit

  • Verify that competence criteria are established for all roles affecting health and safety performance under Clause 7.2 a).
  • Confirm that documented information proving worker competence is retained and easily accessible under Clause 7.2 d).
  • Ensure that effectiveness evaluations are documented for all completed internal and external training activities.
  • Check that contractor and temporary worker competence files are verified prior to site access.
  • Verify that non-managerial workers were consulted when determining competence and training needs under Clause 5.4 e) 4).
  • Sample workers across different shifts to confirm awareness of the OH&S policy, objectives, and hazards under Clause 7.3.
  • Confirm that workers understand their right to remove themselves from imminent danger without fear of reprisals under Clause 7.3 f).

Questions people ask

What is the main difference between competence and awareness in ISO 45001?

Competence under Clause 7.2 is the demonstrated ability to apply knowledge and skills to achieve intended health and safety outcomes, requiring retained documented information. Awareness under Clause 7.3 is a worker's understanding of safety policies, objectives, hazards, procedural compliance implications, and their right to withdraw from danger. Both are essential to maintain operational safety.

Does ISO 45001 require documented information for awareness training under Clause 7.3?

ISO 45001 explicitly requires retaining documented information as evidence of competence under Clause 7.2 d). While Clause 7.3 does not explicitly mandate documented information for awareness itself, organisations typically retain communication logs, toolbox talk sign-offs, or interview notes to demonstrate that awareness processes were carried out effectively.

How do internal auditors evaluate worker awareness during an ISO 45001 audit?

Internal auditors evaluate awareness under Clause 7.3 by interviewing a representative sample of workers across operational shifts and locations. Auditors ask open-ended questions regarding workplace hazards, health and safety policy commitments, emergency responses, and their right to halt unsafe work. Direct interviews provide reliable evidence of worker comprehension.

Who must be consulted when determining training needs under ISO 45001?

Under Clause 5.4 e) 4), organisations must emphasise the participation of non-managerial workers in determining their competence requirements, training needs, and evaluating training actions. This ensures training programs address practical operational risks faced by workforce personnel. Active worker input improves training relevance and workplace safety controls.

Reference documents

  • BS ISO 45001:2018 Occupational health and safety management systems — Requirements with guidance for use
ShareLinkedInEmail

Manage this work in 4Auditee

Keep audit plans, problems, corrective actions and document versions in one place. See the records behind each change and decision.

Book a demo

Get new articles by email

Pick your topics. A short digest every Monday, or each new article as it is published.

You’ll get: ISO 45001 · ISO 45001 · Weekly digest

We email you a link to confirm. Nothing else is sent, and every email lets you unsubscribe. How we handle your address