Auditing OH&S Objectives Against Clause 6.2.1 of ISO 45001

Why Clause 6.2.1 Is Worth Your Full Attention

Auditing OH&S objectives against Clause 6.2.1 of ISO 45001 is one of those areas where the gap between what organisations document and what they actually do becomes very visible, very quickly. On paper, most organisations have objectives. They have a spreadsheet, a table in their OH&S manual, or a slide from last year’s management review. The question is whether those objectives meet the specific criteria the standard sets out, and whether the organisation can demonstrate genuine progress against them.

This article walks through what Clause 6.2.1 actually requires, what good looks like in practice, and the specific evidence you should be gathering when you audit this clause. Whether you are conducting an internal audit or working as a third party auditor, the same logic applies: objectives should be meaningful, measurable, and connected to what matters most in the OH&S system.

For context on what the clause itself requires from the organisation’s perspective, the companion article Setting OH&S Objectives: Clause 6.2.1 of ISO 45001 Explained covers the requirements in detail. This article focuses on the auditor’s role.

What Clause 6.2.1 Actually Requires

Before you can audit effectively, you need to be clear on what the clause demands. ISO 45001 Clause 6.2.1 sets out that OH&S objectives must:

• Be consistent with the OH&S policy
• Be measurable, or capable of evaluation
• Take into account applicable requirements, including legal and other requirements
• Take into account the results of the hazard identification and risk assessment process
• Take into account the results of consultation with workers
• Be monitored
• Be communicated
• Be updated as appropriate

The standard also requires that documented information on OH&S objectives is retained. That gives you a clear starting point: the objectives must exist in documented form, and they must satisfy each of those criteria. Your job as an auditor is to test whether they do.

One thing worth noting is the phrase “measurable or capable of evaluation.” Some auditors interpret this narrowly and only accept numerical targets. That is not quite right. An objective that is evaluated through a defined method, even if not purely quantitative, can still satisfy the requirement. What you are looking for is whether the organisation can actually tell you whether it is on track or not.

Starting the Audit: Documents First, Then People

When you begin auditing this clause, start with the documented objectives themselves. Ask for the current OH&S objectives register, plan, or equivalent document. Most organisations will produce something. Your first review should focus on these questions:

• Are the objectives actually documented, or are they buried in a management review presentation that nobody looks at between reviews?
• Do they have measurable targets or defined evaluation criteria?
• Do they have owners, timeframes, and a monitoring mechanism?
• Can you trace them back to the OH&S policy and to the risk assessment findings?

That last point is critical. The standard is explicit that objectives must take into account the results of hazard identification and risk assessment. If the organisation has identified significant risks in its risk register but none of those risks are reflected in the objectives, that is a finding worth pursuing. It suggests the objectives were set in isolation rather than driven by what the system has actually identified as important.

The same logic applies to legal requirements. If there are compliance obligations relevant to the organisation’s operations, you would expect to see at least some objectives that address areas of legal exposure. An organisation with known WHS regulatory obligations that has objectives focused only on generic safety statistics may not be taking its compliance context seriously enough.

Testing Whether Objectives Are Genuinely Measurable

This is where many organisations fall short. Common examples of poorly constructed objectives include:

• “Improve safety culture across the organisation”
• “Reduce incidents”
• “Increase worker participation in safety activities”

None of these are inherently wrong as intentions. The problem is that without a defined baseline, a specific target, and a method of measurement, they cannot be monitored or evaluated in any meaningful way. When you ask the responsible person how they know whether they are achieving the objective, and they cannot give you a clear answer, that tells you something important.

A well constructed objective might look like this: reduce the frequency of manual handling incidents by 20% compared to the previous 12 month period, measured quarterly using the incident register, with the Operations Manager as the responsible owner, targeting completion by the end of the financial year. That is something you can audit against. You can check the baseline data, review the quarterly monitoring records, and ask the responsible person what actions have been taken.

When auditing, ask for the monitoring records. These might be monthly safety dashboards, KPI reports, management review inputs, or toolbox talk records. If the organisation says it monitors objectives but cannot produce evidence of monitoring having occurred, that is a gap. Audit Evidence Explained covers the distinction between documented claims and actual evidence in more detail.

Tracing Objectives Back to the OH&S Policy

Clause 6.2.1 requires that objectives are consistent with the OH&S policy. This is a straightforward check but one that is often skipped. Pull out the OH&S policy and compare it with the objectives. If the policy commits to eliminating hazards at source and applying the hierarchy of controls, but the objectives are entirely focused on lagging indicators like incident counts, there is a mismatch worth exploring.

Ask the auditee: “Can you walk me through how these objectives connect to your OH&S policy commitments?” If they can do that clearly, good. If they struggle, that tells you the objectives may have been set without reference to the policy. That does not automatically mean a nonconformity, but it is a signal to probe further.

This is also a useful way to test whether top management is genuinely engaged with the objectives or whether the objectives exist primarily to satisfy a certification requirement. Objectives that are genuinely driven by policy commitments tend to be more specific and more challenging than objectives that were written to fill a template.

Worker Consultation: The Evidence Auditors Often Miss

One of the more distinctive requirements in Clause 6.2.1 is that objectives must take into account the results of consultation with workers. This connects directly to the broader consultation and participation requirements in Clause 5.4, but it has a specific application here.

When you audit this, do not just ask whether workers were consulted. Ask how that consultation influenced the objectives that were set. If the organisation ran toolbox talks or safety committee meetings where workers raised concerns about specific hazards, can you see those concerns reflected in the objectives? If workers consistently raised issues about a particular work area or task, and that concern is nowhere in the objectives, you have a question to answer.

Evidence to look for includes safety committee minutes, toolbox talk records, hazard report logs, and any documented feedback from workers. The link between that feedback and the objective setting process should be traceable. It does not need to be a direct one to one relationship, but there should be some visible connection.

This is an area where auditing clause 6.2.1 overlaps with auditing worker participation more broadly. If you are already auditing Clause 5.4, carry that thread through to your objectives review.

Checking That Objectives Are Communicated

The standard requires that OH&S objectives are communicated. This sounds simple but it is often poorly implemented. Communicating objectives does not mean emailing a spreadsheet to managers once a year. It means that the people whose work is relevant to achieving the objectives actually know what those objectives are and understand their role in achieving them.

When you are on the floor or in interviews, ask workers and supervisors whether they are aware of the current OH&S objectives. Ask what they know about the targets and how their work contributes. If frontline workers have no idea what the objectives are, communication has not been effective, regardless of what the documented communication plan says.

This is a practical test that often reveals a significant gap between what management believes has been communicated and what has actually landed with the workforce. It is not about catching people out. It is about testing whether the system is functioning as intended.

Are Objectives Being Updated When Circumstances Change?

Clause 6.2.1 requires that objectives are updated as appropriate. This means the objectives should not be static documents that sit unchanged from one management review to the next. If the organisation has had significant changes to its operations, its risk profile, its legal obligations, or its OH&S performance, you would expect to see the objectives reviewed and, where necessary, revised.

Ask when the objectives were last reviewed and what triggered that review. If the answer is “at the last management review” and the management review happens annually, that may be acceptable if nothing significant has changed. But if the organisation has introduced new plant, changed processes, or had a serious incident since the last review, and the objectives have not been updated to reflect those changes, that is a gap.

This also connects to the planning of changes requirements elsewhere in the standard. Changes to operations should feed back into the objective setting process, not sit in isolation.

Common Nonconformities Under Clause 6.2.1

Based on real audit experience, the most common findings against this clause fall into a few recurring patterns:

• Objectives that are not measurable. Vague statements of intent with no defined target, no baseline, and no evaluation method.
• No evidence of monitoring. Objectives exist on paper but there are no records showing they have been tracked over time.
• No connection to risk assessment findings. Objectives appear to have been set independently of the hazard identification and risk assessment process.
• No documented information retained. The objectives exist but cannot be produced in a documented form that satisfies the retention requirement.
• Objectives not communicated to relevant workers. Management is aware of the objectives but frontline staff have no knowledge of them.
• Objectives not updated after significant changes. The organisation has changed but the objectives have not been revisited.

When you find one of these issues, check whether it is isolated or systemic. A single objective without a measurable target might be a minor gap. A full set of objectives that are all vague and unmonitored suggests a more fundamental failure in planning.

For guidance on how to write up findings clearly and accurately, the article on How to Write Audit Findings That Stand Up to Challenge is worth reading before you finalise your report.

Linking Objectives to Performance Evaluation

One of the most useful audit techniques for Clause 6.2.1 is to follow the objectives through into the performance evaluation clauses. Under Clause 9.1, the organisation is required to monitor, measure, analyse, and evaluate its OH&S performance. The objectives set under Clause 6.2.1 should feed directly into that monitoring process.

If you are auditing both clauses in the same audit, cross reference what you find. Are the objectives showing up in the performance monitoring process? Are the results being fed into management review? Is management review actually discussing whether objectives have been achieved, and what actions are being taken where they have not?

This kind of vertical audit approach, tracing a requirement from planning through to evaluation, is one of the most effective ways to test whether the system is genuinely integrated or whether the clauses are being addressed in silos. The objectives under Clause 6.2.1 should not exist in a separate document that nobody looks at between certification audits. They should be a live part of how the organisation manages its OH&S performance.

Practical Audit Questions for Clause 6.2.1

Here are specific questions you can use during interviews and document review when auditing this clause:

1. Can you show me your current OH&S objectives and the documented information you retain for them?
2. How did you determine these objectives? What inputs did you use?
3. How do these objectives connect to the findings from your hazard identification and risk assessment?
4. Which legal or other requirements influenced these objectives?
5. How were workers consulted in setting these objectives?
6. How do you monitor progress? Can you show me recent monitoring records?
7. Who is responsible for each objective, and what is the target completion date?
8. How are these objectives communicated to workers?
9. When were the objectives last reviewed? What triggered that review?
10. What happens when an objective is not being achieved on schedule?

These questions are designed to move beyond the documented objectives themselves and test whether the process behind them is genuine. A confident, evidence backed response to all of these questions is a good sign. Vague or inconsistent answers are a signal to dig deeper.

Auditing Quality Objectives as a Parallel

If you are familiar with auditing quality objectives under ISO 9001 Clause 6.2, the structure is very similar. The criteria are largely the same: measurable, monitored, communicated, consistent with policy, linked to planning. The main differences in ISO 45001 are the explicit requirements to consider hazard identification results and worker consultation. Those additions reflect the safety context and the standard’s emphasis on worker involvement throughout the system. The article on Auditing Quality Objectives: Evidence to Look for Under Clause 6.2 provides useful parallels if you are auditing integrated systems.

Building Your Audit Skills for ISO 45001

Auditing Clause 6.2.1 well requires more than knowing the clause requirements. It requires the ability to follow evidence across multiple parts of the system, ask questions that get beneath the surface, and make sound judgements about whether what you are seeing represents genuine conformance or paper compliance. Those are skills that develop with practice, good training, and exposure to a range of organisations and audit contexts.

At Audit Workshop, the ISO 45001 Internal Auditor and Lead Auditor courses are built around exactly this kind of practical, clause level audit skill. The training covers how to plan and conduct audits across all clauses of ISO 45001, with worked examples, practice scenarios, and guidance from auditors who have conducted hundreds of real OH&S audits. If you are looking to build or sharpen your ISO 45001 audit capability, the courses at auditworkshop.com are a practical starting point.