ISO 45001 Contractor Risk Gaps in 2026: 5 Audit Lessons From 'Passed' Sites

Frequently Asked Questions

Can a site pass an ISO 45001 audit and still have contractor safety gaps?

Yes. A site can have complete procedures, rosters, and vendor files on paper while still failing to verify onboarding, authorization, supervision, and stop-work authority in the field.

What is the biggest contractor-risk gap internal audits miss?

Role ambiguity is one of the biggest gaps. Many sites do not clearly define who trains, who authorizes the task, and who supervises the worker once the job starts.

How should we audit temporary-worker safety differently?

Test real work conditions, not just orientation records. Interview workers, observe the job, verify task-specific authorization, and confirm the host employer and staffing agency responsibilities are clearly assigned.

What incident patterns should trigger a contractor-control review?

Look closely at near misses and minor events involving first days on site, mixed crews, permit work, schedule pressure, borrowed equipment, or tasks that drift beyond the original assignment.

What evidence is most useful for the next surveillance audit?

Show a closed loop: you found a gap, changed the process, verified the new control in the field, and tracked whether the risk pattern improved.