Skip to main content
Aegentra
Display and payment currency for course bundles. Billing country determines applicable tax.
AU

/ ISO 45001 · Clause 9.2

ISO 45001 internal audit, independently run.

We audit whether your occupational health and safety management system conforms to your organisation’s requirements and ISO 45001, and whether it is effectively implemented and maintained.

Aegentra accepts the engagement only after checking scope, prior involvement and conflicts. The work does not replace legal advice, regulatory inspection or accredited certification.

Scope an ISO 45001 audit

Teams in Melbourne and Sydney. Delivered across all Australian states and territories, remotely or onsite by arrangement. New Zealand and Asia Pacific by arrangement.

Occupational health and safety auditor reviewing worksite conditions with a site supervisor

Engagement scope

What we examine and deliver.

Clauses 4–10, your OH&S scope and applicable organisational requirements

Leadership, consultation and participation of workers

Hazard identification, risk controls and operational planning

Incidents, compliance evaluation, management review and corrective action

An audit plan, traceable workpapers, findings register and close-out review

Scope, fee and responsibilities

Quote only. A fixed project fee is agreed after reviewing the management-system boundary, sites, processes, available evidence and required specialist competence. The proposal records the criteria, sample, timetable, inclusions, exclusions, client responsibilities and any travel before work begins.

Your team provides authorised evidence access, available process owners and management decisions. Remediation, corrective-action verification and aftercare are included only to the extent stated in the written scope; the engagement does not promise unlimited follow-up or a certification outcome.

Qualified delivery matched to your scope

Our team combines implementation, audit, security-governance and technical expertise. Across their professional careers, team members have delivered 2,000+ hours of ISO, ISM and GRC audit work across 70+ organisations.

Team qualifications and credentials

Qualifications, professional credentials and formal training held across Aegentra’s delivery team.

Management systems and audit

  • ISO/IEC 27001 Lead Implementer
  • ISO/IEC 27701 Lead Implementer
  • PECB ISO/IEC 27001 Lead Auditor
  • ISO/IEC 42001 Lead Auditor
  • CISA — Certified Information Systems Auditor
  • ISM Auditor

Cybersecurity and cloud

  • CISSP — Certified Information Systems Security Professional
  • CISM — Certified Information Security Manager
  • Certificate of Cloud Security Knowledge (CCSK)
  • OSCP+ — OffSec Certified Professional Plus

Service delivery and specialist training

  • ITIL Expert
  • PRINCE2
  • Mastering Generative AI for Cybersecurity Certificate
  • Essential Eight Assessment Course certificate — TAFEcyber

Further training and audit qualifications across the team include ISO/IEC 42001 Lead Implementer training, ASD ISM General and Technical audit codes, ISO/IEC 27017 and ISO/IEC 27018 audit codes, and ISO 9001 and ISO 19011 audit qualifications.

Credentials are held across the delivery team and matched to assigned roles. The proposal identifies the consultants, responsibilities and relevant qualification evidence before work begins.

View our delivery-team capability

Frequently asked questions

Important boundaries.

What evidence is relevant to an ISO 45001 internal audit?

Relevant evidence includes the OH&S scope, hazard and risk records, operational controls, worker consultation, competence, incidents, management review and previous actions. Trace sampled activities to how work actually occurs. A signed safety policy alone does not demonstrate implementation. The audit plan identifies interviews, observations and records appropriate to the activities and hazards, while protecting confidential worker information.

Can an ISO 45001 internal audit be completed entirely remotely?

Only where remote methods can adequately support the agreed audit objectives. Documents and interviews may be reviewed remotely, but observing work, site conditions or particular controls may require attendance. Confirm access, worker availability, safety arrangements and limitations before agreeing the method. A remote document review should not imply that physical conditions were observed when they were not.

What follows an ISO 45001 internal-audit finding?

The organisation is responsible for responding to the finding and managing the associated risk. Record the criterion, evidence, immediate response, cause assessment and corrective action, with owners and follow-up evidence. Urgent safety concerns should use the agreed escalation arrangements rather than await a final report. The audit does not replace operational safety management, regulatory inspection or legal advice.

How is an ISO 45001 internal-audit quote scoped?

The quote considers the activities, hazards, sites, shifts, worker participation, specialist competence, evidence and reporting needed. Agree whether onsite observation and follow-up review are included. A small office and a complex operational site require different plans; headcount alone is not a sufficient basis. Certification-body fees and implementing corrective actions are separate unless expressly scoped.

Does this satisfy ISO 45001 Clause 9.2?

The engagement is designed as a separately scoped Clause 9.2 internal audit. Scope and sampling are confirmed against your OH&S management system, activities, sites, hazards and previous results, with objectivity and impartiality protected.

Does the audit replace WHS legal advice?

No. It evaluates the OH&S management system against the agreed audit criteria. Legal interpretation, regulator activity and accredited certification remain separate.

Scope an ISO 45001 auditView all Govern services