Why Clause 5.1 Is the Most Audited Clause in ISO 45001
When auditors sit down with a CEO, operations director, or site manager during an ISO 45001 certification audit, they are not there to test technical knowledge of the standard. They are there to find out whether leadership is genuine. Clause 5.1 of ISO 45001 sets out what top management must personally demonstrate in relation to the occupational health and safety management system, and it is one of the most revealing clauses in the entire standard.
On this page
The reason Clause 5.1 attracts so much attention is straightforward. Safety culture does not come from a policy document pinned to a noticeboard. It comes from the people at the top of the organisation making decisions, setting priorities, and modelling the behaviour they expect from everyone else. ISO 45001 recognised this when it was published in 2018, and it placed leadership and commitment front and centre in a way that older standards like OHSAS 18001 never did.
This article walks through every element of Clause 5.1, explains what the standard actually requires, and gives you practical guidance on what auditors look for when they assess this clause. Whether you are a WHS manager preparing your organisation for certification, an internal auditor building your audit checklist, or someone studying for a lead auditor qualification, understanding Clause 5.1 in depth will sharpen your practice.
What Is Clause 5.1 and Where Does It Fit?
Clause 5 of ISO 45001 covers leadership and worker participation. It sits between Clause 4, which deals with the context of the organisation, and Clause 6, which covers planning. The position is deliberate. Before an organisation can plan its OH&S management system effectively, leadership needs to be established and committed.
Clause 5.1 specifically addresses leadership and commitment from top management. The standard defines top management as the person or group of people who directs and controls an organisation at the highest level. In a large company, that might be a board of directors or an executive leadership team. In a small business, it might be a single owner or managing director.
The key word in the clause title is demonstration. ISO 45001 does not ask top management to delegate OH&S to a safety manager and then sign off on whatever they produce. It asks top management to take personal accountability for the effectiveness of the OH&S management system. That is a meaningful distinction, and it is one that auditors probe carefully.
If you want a broader overview of how ISO 45001 is structured, the article on ISO 45001:2018 overview: clauses and requirements provides useful context before diving into individual clauses.
Exemplar Global Recognised Training ProviderRTP No. 310970
The Specific Requirements of Clause 5.1
ISO 45001 Clause 5.1 contains a list of specific actions and behaviours that top management must demonstrate. Let us work through each one.
Taking Overall Accountability for the OH&S Management System
The standard requires top management to take overall accountability for preventing work related injury and ill health, and for providing safe and healthy workplaces. This is not a responsibility that can be fully delegated. While day to day tasks can be assigned to WHS managers, safety officers, or supervisors, accountability for the system as a whole sits with top management.
In practice, this means top management must be able to explain the OH&S management system in their own words, describe how it is performing, and demonstrate that they are actively involved in decisions that affect safety outcomes. An auditor who asks a CEO about the organisation's top three OH&S risks should receive a credible, informed answer, not a blank stare followed by a suggestion to speak with the safety manager.
Ensuring the OH&S Policy and Objectives Are Compatible with Strategic Direction
The OH&S policy and objectives must align with the strategic direction of the organisation. This prevents a situation where safety is treated as a separate function with no connection to how the business actually operates.
For example, if an organisation is expanding rapidly into new markets and taking on a larger workforce, the OH&S objectives should reflect that growth context. A static policy that has not been reviewed in three years and objectives that were written for a different operating environment would raise questions about whether leadership is genuinely integrating safety into business planning.
Integrating OH&S Management System Requirements into Business Processes
Top management must ensure that OH&S requirements are integrated into the organisation's business processes. This means safety is not a bolt on. It is woven into procurement, project planning, contractor management, design decisions, and operational controls.
Auditors look for evidence of this integration. If a purchasing manager has no awareness of OH&S criteria when selecting suppliers, or if project managers launch new work activities without any safety review, that points to a failure at the leadership level. The system may exist on paper, but it has not been embedded in how the business actually runs.
Ensuring Resources Are Available
Clause 5.1 requires top management to ensure that the resources needed for the OH&S management system are available. Resources include people, infrastructure, technology, time, and money. This is one of the most practical requirements in the clause because it connects leadership commitment directly to budget decisions.
An organisation that consistently underfunds safety training, delays corrective actions because of cost, or runs an OH&S system on the efforts of a single overworked coordinator is demonstrating a gap between stated commitment and actual behaviour. Auditors will look at resource allocation as evidence of whether leadership commitment is real or performative.
Communicating the Importance of OH&S Management
Top management must communicate the importance of effective OH&S management and conforming to the OH&S management system requirements. This communication needs to reach workers at all levels, not just managers and supervisors.
The form of communication matters less than its consistency and authenticity. A CEO who addresses safety at every all hands meeting, who asks about near miss reporting rates when visiting sites, and who visibly reinforces safe behaviours is communicating in a way that shapes culture. A CEO who issues an annual safety message drafted by the communications team and otherwise avoids the topic is not meeting this requirement in any meaningful sense.
Directing and Supporting People to Contribute to the OH&S Management System
Top management must direct and support people to contribute to the effectiveness of the OH&S management system. This includes creating conditions where workers feel safe to raise concerns, report hazards, and participate in improving safety.
This requirement connects directly to Clause 5.4, which deals with worker consultation and participation. But the obligation in Clause 5.1 is specifically about leadership creating the conditions for that participation to happen. If workers are reluctant to report near misses because they fear blame, or if hazard reports go unacknowledged, that is a leadership failure, not a worker behaviour problem.
Ensuring and Promoting Continual Improvement
Top management must ensure and promote continual improvement of the OH&S management system. This requires an active orientation toward getting better, not just maintaining compliance.
In audit practice, this means looking for evidence that the organisation is learning from incidents, near misses, audit findings, and monitoring data, and then actually changing how it operates as a result. An organisation that has the same nonconformities appearing year after year, or that treats management review as a box ticking exercise, is not demonstrating continual improvement at the leadership level.
Supporting Other Relevant Management Roles
Clause 5.1 also requires top management to support other relevant management roles in demonstrating their leadership in their areas of responsibility. This recognises that leadership in a large organisation is distributed. Frontline supervisors, middle managers, and department heads all play a role in OH&S leadership within their own areas.
Top management's job is to create the conditions where those leaders can be effective. That means providing them with clear expectations, adequate resources, and visible backing when they enforce safety requirements even when that creates friction with production or commercial pressures.
Developing, Leading and Promoting a Culture That Supports the OH&S Management System
This is perhaps the most significant requirement in Clause 5.1, and also the hardest to audit. Safety culture is not a document or a procedure. It is the sum of the values, beliefs, and behaviours that characterise how an organisation actually approaches safety when no auditor is watching.
Top management is expected to develop, lead, and promote a positive safety culture. Auditors assess this through a combination of interviews with workers at different levels, observation of how people behave on site, and examination of indicators like near miss reporting rates, corrective action closure times, and the nature of incidents that have occurred.
Protecting Workers from Reprisals
ISO 45001 explicitly requires top management to protect workers from reprisals when reporting incidents, hazards, risks, and opportunities. This is a non negotiable element of a functioning OH&S management system.
If workers fear that reporting a near miss will result in disciplinary action, or that raising a safety concern will harm their relationship with their supervisor, they will stop reporting. The organisation then loses the early warning signals it needs to prevent serious incidents. Top management must create and enforce a culture where reporting is encouraged and protected.
What Auditors Actually Look For in Clause 5.1
Understanding the requirements is one thing. Knowing how auditors assess them is another. Here is what experienced auditors focus on when examining Clause 5.1.
Interviews with Top Management
The most important source of evidence for Clause 5.1 is a direct interview with someone who qualifies as top management. Auditors will ask open questions designed to reveal the depth of understanding and genuine involvement, not just rehearsed answers.
Questions might include: What are the top three OH&S risks facing this organisation right now? How did you find out about the last serious incident? What changes have been made to the OH&S system in the past twelve months and why? How do you know the system is working?
Vague or deflected answers are a red flag. A top manager who cannot answer basic questions about the OH&S system without referring everything to the safety manager is demonstrating that their involvement is nominal rather than substantive.
Evidence of Resource Allocation
Auditors will look for evidence that resources have actually been allocated to OH&S. This might include budget approvals for safety equipment or training, records of corrective actions that were closed with adequate resources, and staffing levels in the safety function relative to the size and risk profile of the organisation.
Records of Leadership Involvement
Management review records, safety committee meeting minutes, incident investigation reports, and site visit records can all provide evidence of top management involvement. Auditors look for whether top management is actively participating in these processes or whether their involvement is limited to signing off on documents prepared by others.
For a deeper look at how auditors assess leadership commitment in practice, the article on auditing leadership: how to test Clause 5 commitment provides detailed audit technique guidance.
Worker Interviews
One of the most reliable ways to assess whether leadership commitment is genuine is to ask workers. Auditors will interview workers at various levels and ask about their experience of safety culture. Do they feel comfortable reporting hazards? Have they ever seen a safety concern ignored? Do they feel that management takes safety seriously?
Workers are usually candid in audit interviews, especially when the auditor has established that their responses are confidential. Consistent negative feedback about leadership attitude toward safety is a strong indicator of a Clause 5.1 issue, even if the documents look fine.
Common Nonconformities Against Clause 5.1
Based on real audit experience, here are the most common nonconformities raised against Clause 5.1 of ISO 45001.
- Top management cannot demonstrate personal knowledge of OH&S risks, objectives, or system performance. This is the most frequent finding. It indicates that leadership has delegated not just tasks but accountability.
- Resources are demonstrably insufficient. Corrective actions are consistently delayed due to budget constraints, or the safety function is chronically understaffed relative to the organisation's risk profile.
- Safety culture indicators are negative. Low near miss reporting rates, high incident rates, or worker interviews that reveal fear of reprisal all point to a leadership failure.
- OH&S is not integrated into business processes. Procurement, project planning, or design activities proceed without any OH&S input or review.
- Management review does not reflect genuine leadership engagement. Reviews are infrequent, poorly documented, or limited to reviewing a slide deck without substantive discussion or decision making.
If you want to understand how these issues translate into formal audit findings, the article on frequent nonconformities in Clause 5 of ISO 45001 covers the most common patterns in detail.
Exemplar Global Recognised Training ProviderRTP No. 310970Practical Steps for Organisations Preparing for Audit
If you are a WHS manager or quality manager preparing your organisation for an ISO 45001 certification or surveillance audit, here is practical advice for Clause 5.1.
Brief Top Management Before the Audit
Top management should be able to answer basic questions about the OH&S management system without referring to notes or deferring to the safety team. Brief them on the current OH&S objectives, recent incident trends, significant hazards, and any corrective actions that are in progress. This is not coaching them to give scripted answers. It is ensuring they have the information they need to demonstrate genuine engagement.
Review Resource Allocation
Before the audit, review whether the resources committed to OH&S are proportionate to the organisation's risk profile. If there are open corrective actions that have stalled due to budget or time constraints, address them or be prepared to explain the situation honestly.
Check Integration into Business Processes
Walk through your key business processes and ask whether OH&S is genuinely integrated. Does the procurement process include supplier OH&S evaluation? Does project initiation include a safety review? Does the design process consider worker safety? Gaps here will be visible to an auditor conducting a process based audit.
Assess Safety Culture Indicators
Look at your near miss reporting rates, corrective action closure times, and worker participation levels. If these indicators suggest a culture of under reporting or disengagement, that is a leadership issue that needs to be addressed before the audit, not during it.
Why Clause 5.1 Matters Beyond Certification
It is worth stepping back from the audit mechanics to remember why this clause exists. Workplaces that have strong, visible, genuine leadership commitment to safety have fewer serious incidents. The evidence for this is overwhelming and consistent across industries and geographies.
ISO 45001 was designed to drive real safety outcomes, not just documentation compliance. Clause 5.1 is the mechanism through which the standard tries to ensure that the people with the most power in an organisation are personally invested in protecting the people who work for them.
For auditors, assessing Clause 5.1 is not a bureaucratic exercise. It is an opportunity to identify whether an organisation's safety management system is likely to actually protect workers, or whether it is a compliance facade that will fail under pressure.
Understanding how to audit this clause effectively is a skill that develops with practice. If you are working toward an ISO 45001 auditor qualification, the training at ISO 45001 auditor training levels explained outlines the different pathways available and what each level of training covers. Audit Workshop offers practical, experience based training for internal auditors and lead auditors across ISO 45001, delivered by a lead auditor who has conducted hundreds of real certification audits across Australia and internationally.
