The auditor-reported findings are guidance, not official data. The certificate count of 542,527 (not verified on iso.org) comes from the ISO Survey 2024 as reproduced by Global Standards. Sources: ISO Survey of Management System Standard Certifications 2024 (ISO and IAF), as reproduced by Global Standards because the survey is now behind a login on IAF CertSearch; iso.org catalogue pages for ISO 45001:2018 and ISO/DIS 45001 (checked Oct. 13, 2026); LRQA, “Top five nonconformities”; GSDC, “Top 100 ISO 45001:2018 Lead Auditor Audit Failures”; BLS CFOI 2024. There is no official, published frequency ranking of ISO 45001 nonconformities. ISO Survey participation varies by year (China's reporting changed between 2023 and 2024), so do not read the certificate count as a trend.
-
Hazard identification and risk assessment (6.1.2)
- No. 2 in GSDC's list of frequent ISO 45001 audit failures
- Routine work is where most incidents happen, and where assessments are thinnest
- 1910.132(d) U.S. rule requiring a certified written hazard assessment for PPE
Start here: Pick the five jobs people do every day. Walk each with the worker, list the hazards, and update the register this month.
Rules and guidance: ISO 45001 6.1.2.1, 6.1.2.2 [ISO] · 29 CFR 1910.132(d) [GI] · 1926.20(b)(2) [CON] · OSH Act 5(a)(1) [BOTH]
-
Worker consultation and participation (5.4)
- No. 3 in GSDC's list of frequent ISO 45001 audit failures
- Non-managerial workers are the group ISO singles out for consultation and participation
- 1904.35 U.S. rule: reporting procedures must not discourage workers
Start here: Before the next equipment purchase or layout change, ask the crew who will use it. Write down what they said and what you changed because of it.
Rules and guidance: ISO 45001 5.4 [ISO] · 29 CFR 1904.35 [BOTH] · OSH Act 11(c) [BOTH] · OSHA Recommended Practices [GUIDANCE]
-
Emergency preparedness and response (8.2)
- No. 4 in GSDC's list of frequent ISO 45001 audit failures
- 10 employees or fewer: an OSHA emergency action plan may be oral instead of written
- Test ISO requires periodic testing and exercise of the planned response
Start here: Run a five-minute tabletop with each shift this month: “Fire in the paint booth, go.” Write down what broke, fix the top two.
Rules and guidance: ISO 45001 8.2 [ISO] · 29 CFR 1910.38, 1910.39 [GI] · 1926.35 [CON] · 1904.39 [BOTH]
-
Incident investigation and corrective action (10.2)
- No. 6 in GSDC's list of frequent ISO 45001 audit failures
- 48 hrs deadline to start a PSM incident investigation (1910.119(m))
- Effectiveness ISO requires you to review whether the action worked
Start here: Ban “employee retrained” as a stand-alone action. Every investigation must name at least one condition change.
Rules and guidance: ISO 45001 10.2 [ISO] · 29 CFR 1904 [BOTH] · 1910.119(m) PSM [GI] · OSHA Recommended Practices [GUIDANCE]
-
Management review (9.3)
- No. 7 in GSDC's list of frequent ISO 45001 audit failures
- Top management must do it; it cannot be handed to the safety manager
- 1904.32 U.S. rule: a company executive certifies the annual OSHA 300A summary
Start here: Hold a quarterly one-hour review with the owner. Three questions: what are our top risks, what did we fix, what do we fund next?
Rules and guidance: ISO 45001 9.3 [ISO] · ISO 5.1 [ISO] · 29 CFR 1904.32 [BOTH] · OSHA Recommended Practices [GUIDANCE]
-
Legal requirements and compliance evaluation (6.1.3 and 9.1.2)
- No. 8 in GSDC's list of frequent ISO 45001 audit failures
- 9.1.2 the clause that asks whether you actually comply, not just list the law
- Oct. 8, 2026 date the eCFR used for this guide was current to; rules change
Start here: List the ten OSHA standards most likely to apply (start with your OSHA Top 10 exposure). For each, write the control and the evidence. Expand from there.
Rules and guidance: ISO 45001 6.1.3, 9.1.2 [ISO] · 29 CFR 1910 [GI] · 29 CFR 1926 [CON] · 29 CFR 1904 and OSH Act [BOTH]
-
Competence (7.2)
- No. 9 in GSDC's list of frequent ISO 45001 audit failures
- 3 yrs maximum time between forklift operator evaluations (1910.178(l)(4)(iii))
- Effective ISO asks you to evaluate whether training worked, not just log it
Start here: For your three highest-risk tasks, write a one-page checklist of what a competent person can show. Have a qualified worker sign off each person on the floor.
Rules and guidance: ISO 45001 7.2 [ISO] · 29 CFR 1910.147(c)(7), 1910.178(l) [GI] · 1926.21(b)(2), 1926.503 [CON]
The full PDF adds, for each item, why it really happens, the rules in plain words, controls in hierarchy order, a 30-minute self-audit, who owns it and a toolbox talk starter.