ISO-45001-Lead-Auditor PECB Certified OHSMS ISO 45001 Lead Auditor Exam Questions and Answers

The PDCA (Plan-Do-Check-Act) model is a continuous improvement framework used in ISO 45001 and other management systems.

Plan: Establish objectives and processes to deliver results in line with the OH and S policy.

Do: Implement the processes.

Check: Monitor and measure processes against the policy, objectives, and requirements.

Act: Take actions to continually improve the system ' s performance.

Analysis of Options:

A. Plan, Do, Check, Act:Correct. This is the standard PDCA cycle.

B. Plan, Do, Check, Ask:Incorrect. " Ask " is not part of the cycle.

C. Plan, Deliver, Control, Achieve:Incorrect. This is not the PDCA cycle.

D. Prepare, Deliver, Control, Assess:Incorrect. This deviates from the PDCA framework.

ISO Reference:

Clause 0.3: PDCA model.

ISO 45001 requires organizations to identify and maintain documentation to demonstrate compliance with legal and other requirements (Clause 7.5 and Clause 9.1.2). It also requires the evaluation and control of outsourced processes (Clause 8.1.4.3).

Analysis of Options:

A. The park did not have the required documentation to demonstrate compliance with legal requirements:Correct. The outdated and incomplete inspection report (8 years old, lacking detailed identification) fails to demonstrate compliance with health and safety legislation.

B. The organization did not monitor the safety checks by staff of equipment:Incorrect. While there is a potential gap in monitoring, the evidence provided does not directly indicate a lack of monitoring of staff checks.

C. The inspection organization employed by the insurance organization was not evaluated:Correct. ISO 45001 requires the organization to evaluate outsourced services, including those provided by the inspection body, to ensure their adequacy.

D. The park relied on the insurance organization to evaluate its OHS risks:Incorrect. Reliance on external evaluations may not constitute a nonconformity if risks are properly managed, but there is no evidence provided for noncompliance here.

E. Testing to determine the safe loading of equipment was not carried out:Incorrect. While load testing is crucial, there is no evidence presented to confirm this specific issue as a nonconformity.

ISO References:

Clause 7.5: Control of documented information.

Clause 8.1.4.3: Control of outsourced processes.

Clause 9.1.2: Evaluation of compliance.

The three correct responses are A, B, and G.

A is correct because ISO 45001 Clause 5.3 requires top management to ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood at all levels within the organization, and that they are maintained as documented information. So if top management asks whether responsibilities and authorities for relevant roles have to be documented, the correct answer is yes.

B is correct because Clause 5.1 Leadership and commitment requires top management to ensure that the resources needed to establish, implement, maintain and improve the OH and S management system are available. Therefore, the auditor’s “Yes, you do” is correct.

G is correct because Clause 5.1 also requires top management to promote continual improvement. This is stated directly as part of top management leadership and commitment responsibilities under ISO 45001.

Why the others are not correct:

C is incorrect because top management does have to ensure that processes are established for consultation and participation of workers. Clause 5.4 makes this a requirement, so “No, you do not” is wrong.

D is incorrect as written. Top management must establish, implement and maintain the OH and S policy, but ISO 45001 does not state that top management personally has to “write” it. The wording in the option is too specific and not how the standard states the requirement.

E is incorrect because top management does have to ensure that the OH and S management system achieves its intended results. Clause 5.1 says this directly.

F is incorrect because top management must ensure OH and S objectives are established and compatible with the strategic direction, but ISO 45001 does not require top management personally to “write” the objectives.

H is incorrect because the organization must determine the scope under Clause 4.3, and top management remains accountable for the OH and S management system. Saying “No, you do not” is not correct in this context.

A second-party audit is conducted by a party having an interest in the auditee—most commonly a customer auditing a supplier—or by another competent party acting on that interested party ' s behalf. Consequently, an auditor from a customer may perform the audit, and an external consultant may conduct it on the customer ' s behalf. Auditor training or professional credentials do not, by themselves, determine whether an audit is first-, second- or third-party. By contrast, a certification-body auditor performs independent third-party certification activities, while an accreditation-body auditor assesses conformity-assessment or certification bodies rather than functioning as a customer-side second-party auditor. Therefore, D and F are the two roles that do not correspond to participation in a normal second-party ISO management-system audit. ISO 19011 provides the overarching framework for internal and external management-system audits.

The correct answers are A and F.

A. The auditee should review the audit plan for agreement is true because, in certification auditing practice, the audit plan is communicated to the client/auditee in advance and should be agreed regarding the practical arrangements for the audit. ISO guidance on certification auditing includes preparation of the audit plan and communication of the audit plan and audit team as part of planning audits. (ISO)

F. The audit team leader must define the responsibilities of team members and observers is also true. ISO/IEC 17021-1 states that the audit team leader, in consultation with the audit team, shall assign to each team member responsibility for auditing specific processes, functions, sites, areas or activities. This is a direct audit-planning responsibility of the team leader. Observers are also part of the audit arrangements that must be defined and managed during planning. (IAS)

Why the other statements are false:

B. The audit team leader should plan to interview each employee is false. Certification audits are conducted using sampling, not by interviewing every employee. Audit evidence is gathered on a representative basis. (ISO)

C. The organisation must provide hospitality for the audit team is false. Hospitality is not a certification requirement and can raise impartiality concerns.

D. The audit team leader should audit the Occupational Health and Safety Manager is not a mandatory requirement. The audit plan must cover relevant processes, functions, activities and responsibilities, but it does not require the team leader personally to audit one named individual. (IAS)

E. The organisation should cancel all staff leave during the audit is false. The auditee should ensure availability of relevant personnel as needed, but cancelling all leave is not an audit requirement.

Therefore, the two true statements are:

A, F

ISO 45001 Clause 5.2 explicitly requires the OH and S policy to be available as documented information, making A the correct statement. The policy must include commitments to provide safe and healthy working conditions, fulfil legal and other requirements, eliminate hazards and reduce OH and S risks, continually improve the OHSMS, and consult and ensure participation of workers. However, option B is incomplete because the prescribed commitment is to eliminate hazards and reduce OH and S risks, not merely to reduce risks in isolation. The policy must be communicated within the organisation and be available to interested parties as appropriate; this does not mean automatically supplying it to every conceivable stakeholder. Workers must be aware of the policy, but ISO 45001 does not prescribe formal policy-awareness training for every worker. The policy must also remain appropriate to the organisation ' s purpose, size and context.

Clause 5.1 of ISO 45001:2018 requires top management to demonstrate leadership and commitment to the OH and S management system. This includes awareness of the OH and S policy and its objectives.

Analysis of Options:

A. As a member of the management team, the Deputy College Principal is not aware of the OHSMS policy:Correct. A lack of awareness of the policy reflects poor leadership commitment, which violates Clause 5.1.

B. OH and S improvement is not possible due to the lack of awareness of the OHSMS:Incorrect. While improvement may be hindered, this is not the main issue in this scenario.

C. The Deputy College Principal is not competent to manage the OHSMS:Incorrect. The Deputy’s competence to manage the OHSMS is not in question; the issue is their lack of awareness of key elements.

D. The OH and S policy only exists as a document in the College Principal’s office:Incorrect. The policy may be accessible but not effectively communicated or understood by management.

ISO References:

Clause 5.1: Leadership and commitment.

Clause 5.2: OH and S policy.

ISO 45001 Clause 7.2 Competence requires the organization to:

determine the necessary competence of workers that affect or can affect OH and S performance;

ensure workers are competent, including the ability to identify hazards;

where applicable, take actions to acquire and maintain competence and evaluate the effectiveness of those actions; and

retain appropriate documented information as evidence of competence.

Based on that wording, C is clearly correct because the clause explicitly says workers must be competent, including having the ability to identify hazards. If there is no evidence of that ability, this directly supports a nonconformity against Clause 7.2.

F is also correct because Clause 7.2 requires the organization to determine the competence needed for roles and ensure workers meet it. If there is no evidence that workers’ knowledge and skills are assessed against role requirements, the organization cannot demonstrate that competence has been determined and verified.

H is the third correct answer because Clause 7.2 requires the organization to retain documented information as evidence of competence. Attendance on OH and S training is not, by itself, full proof of competence, but the absence of training records can still support a finding that the organization lacks documented evidence related to competence development and maintenance.

Why the others are not Clause 7.2 findings:

A belongs to Clause 7.3 Awareness, which requires awareness of the consequences of not conforming.

B also relates more to Clause 7.3 Awareness, which includes awareness of the ability to remove themselves from imminent and serious danger.

D is also Clause 7.3 Awareness, because workers must understand their contribution to the effectiveness of the OHSMS.

E relates to consultation and participation under Clause 5.4, not competence.

G refers to quality policy and objectives, which are not ISO 45001 OH and S competence requirements.

A nonconformity is raised against the organisation ' s management system and applicable audit criteria, not personally against an individual manager or top management as a separate auditee. ISO 45001 Clause 5.1 makes top management accountable for ensuring that resources needed for the OHSMS are available, while Clause 7.1 explicitly requires the organisation to determine and provide resources needed for establishing, implementing, maintaining and continually improving the OHSMS. If sufficient objective evidence demonstrates that these requirements have not been fulfilled, a nonconformity is appropriate. However, its wording should identify the organisational failure and the relevant requirement, supported by objective evidence. Option A incorrectly assumes resource adequacy cannot be audited, while D incorrectly treats top management personally as the object of the nonconformity. Additional evidence can be useful, but B does not address the fundamental issue.

The correct answer is D.

ABC states that it has implemented one single OH and S management system for both plants. Once a single management system covers both sites, the certification body has to determine and audit the scope of the management system being operated, not an artificially narrowed commercial scope. IAF MD 1 says a multi-site organization has a single management system, and the certification body must confirm that a single management system is deployed and determine the scope of the management system being operated. It also says the certification document must reflect the scope of certification and the sites/legal entities covered by that multi-site certification. (IAF)

The argument that XYZ is “just a supplier” does not solve the problem. IAF MD 5 makes an important distinction: where an external provider is only a supplier, the certification body audits the organization’s control of the supplied activity, not the performance of the activity itself. But here, XYZ is not outside the management system; ABC has already said both plants are inside one single OHSMS. So XYZ cannot simply be treated as an external supplier for certification-scoping purposes. (IAF)

This is also consistent with the multi-site certification rules that do not allow an organization to exclude covered sites just to avoid certification consequences. IAF MD 1 explicitly says it is not admissible to exclude a problematic site from scope during certification, and the certification documents must show the sites covered by the certified system. While this example is about a “problematic” site, the principle is the same: once the site is part of the single management system, it cannot be carved out simply for convenience or marketing. (IAF)

Therefore, as a third-party auditor, you should not agree to audit only the food plant while ignoring the packaging plant if both are included in the same ISO 45001 management system.

Clause 0.2 of ISO 45001 emphasizes the involvement of top management and alignment of OH and S objectives with the organization’s OH and S policy.

Nonconformities Identified:

The objectives were developed by an external consultant without involving top management, which undermines leadership accountability and commitment.

The objectives were based on a competitor’s framework, not aligned with the organization’s unique OH and S policy or context.

Analysis of Options:

A. Establishing OH and S objectives did not include top management.True. Clause 5.1 (Leadership) and Clause 6.2 (Objectives) emphasize that top management must be involved in defining and supporting OH and S objectives.

B. OH and S objectives are not being implemented by personnel.Implementation relates to operationalization, not the development phase, and is not relevant to Clause 0.2.

C. OH and S objectives are not maintained as documented information.While documentation is required, the absence of documented information is a separate issue under Clause 7.5, not Clause 0.2.

D. OH and S objectives were not established in alignment with the organization’s OH and S policy.True. Clause 6.2.1 requires objectives to align with the OH and S policy, which reflects the organization’s commitment to safety and health.

E. The consultant has not interpreted ISO 45001 correctly.While possibly true, the issue here is the organization’s failure to involve top management, not the consultant’s interpretation.

F. The organization cannot afford to undertake OH and S objectives all at once.Financial constraints are not relevant to Clause 0.2; objectives can be prioritized for phased implementation.

ISO References:

Clause 0.2: Leadership commitment and alignment with organizational policy.

Clause 5.1: Top management’s role in leadership and participation.

Clause 6.2.1: Establishing OH and S objectives aligned with the policy.

The three targeted responses conflict directly with core objective-setting and planning requirements. A is incorrect because ISO 45001 Clause 6.2.1 requires OH and S objectives to be monitored and updated as appropriate; objectives are not permanently fixed once approved. B is inconsistent because objectives must take account of applicable requirements and the results of the assessment of OH and S risks and opportunities. Objective setting therefore cannot deliberately disregard forward-looking risk and opportunity information. E conflicts with Clause 6.2.2, which requires the organisation, when planning how to achieve its OH and S objectives, to determine what will be done, required resources, responsible persons, completion timing, how results will be evaluated and how actions will be integrated into business processes. An informal discussion without defined implementation planning does not satisfy those requirements. Worker consultation and measurability where practicable are consistent with ISO 45001 ' s framework.

Clause 10.2 of ISO 45001 requires organizations to investigate incidents, determine root causes, and implement corrective actions to prevent recurrence.

Analysis of Options:

A. Check whether corrective actions were taken.This directly relates to the requirement to implement corrective actions to address the identified risks and hazards. Failure to do so would indicate nonconformity.

B. Determine whether the Health and Safety Authority was notified.Notification is a legal requirement in certain jurisdictions, but it is not explicitly required under ISO 45001 unless the legal context demands it.

C. Establish whether the root cause was determined.Root cause analysis is fundamental for effective corrective action. Without this, corrective measures may not address the underlying problem.

D. Find out when the operator ' s machine was last subject to maintenance.While maintenance is important, it does not directly address the incident ' s nonconformity.

E. Find out whether the operator was sent to the hospital.Sending the operator to the hospital is a reactive step and not relevant to compliance with Clause 10.2.

F. Interview the operator about PPE usage.This is relevant but insufficient for determining compliance with Clause 10.2.

ISO References:

Clause 10.2: Investigation of incidents, determination of causes, and implementation of corrective actions.

Clause 8.1.2: Hierarchy of controls and risk reduction.

Clause 9.3 of ISO 45001:2018 outlines the requirements for management reviews. These reviews must evaluate the performance of the OHSMS and identify opportunities for improvement. Outputs of management reviews typically include decisions and actions that align with strategic and operational priorities.

Analysis of Options:

A. Decisions related to continual improvement opportunities:This is a valid output, as continual improvement is a key objective of management reviews under Clause 10.3.

B. Allocation of a bigger budget for the OHS department:Resource allocation is a common output of management reviews to address identified needs.

C. Improvements in the OHSMS:Improvements reflect the organization’s commitment to enhancing safety performance.

D. Minutes of previous management reviews:While minutes provide context, they are not an output of the current management review.

E. Opportunities to integrate the OHS management system with other business processes:Integration opportunities are valid outputs, as they enhance the system ' s effectiveness.

F. Plan to prioritize health and safety issues as a business strategy:Strategic alignment of health and safety with business objectives is an expected output.

G. Procurement of new safety harnesses for workers:This is an operational action, not a direct output of the management review process.

H. Report showing the trend of an increase in safety incidents:This is an input to the management review, not an output.

I. Updates to the risk register:Risk register updates reflect changes in identified hazards and risks, making this a valid output.

J. Worker feedback of positive and negative comments:Worker feedback is an input to the management review, not an output.

ISO References:

Clause 9.3: Management review inputs and outputs.

Clause 10.3: Continual improvement actions.

Option D provides the most complete description because audit resources must be adequate for the audit programme and capable of supporting achievement of the audit objectives, with competent personnel being a critical component. Resources are broader than management personnel, technology or a timescale considered individually. Depending on the programme, they may include auditors and technical experts with appropriate competence, sufficient time, financial resources, audit methods and tools, travel arrangements, information and communication technology, and other logistical support. The overriding requirement is that resources collectively allow audits to be conducted effectively and credibly. ISO/IAF guidance on ISO 19011 specifically states that those managing an audit programme should ensure the audit team ' s competence matches the audit scope and objectives and that adequate resources are available for the audits included in the programme.

Stage 1 is the readiness and preliminary assessment stage of an initial certification audit. Its purposes include reviewing relevant management-system documented information, assessing site-specific conditions and determining whether the organisation is sufficiently prepared for Stage 2. Any weaknesses that could become nonconformities during Stage 2 can therefore be communicated as areas of concern, making C correct. Option A is incorrect because ISO 19011 provides auditing guidance; the formal two-stage certification requirements are established through ISO/IEC 17021-1. Option B describes the more extensive Stage 2 assessment, where effective implementation and conformity are evaluated. Option D is also incorrect because discussions with client personnel form part of Stage 1 readiness determination. ISO 45001 Lead Auditor training material explicitly identifies Stage 1 areas of concern that could become Stage 2 nonconformities.

The PDCA (Plan-Do-Check-Act) cycle is a core principle of ISO 45001 and many other management systems. It does not include environmental management, as ISO 45001 focuses on Occupational Health and Safety (OH and S), while environmental aspects are covered by ISO 14001.

Analysis of Options:

A. Treatment of Risks:Correct. Risk assessment and control are part of the Plan phase.

B. OHSMS Policy:Correct. The OH and S policy is established in the Plan phase.

C. Environment Management Program:Incorrect. This is outside the scope of ISO 45001 and pertains to ISO 14001.

D. Analyzing OHSMS Performance:Correct. Performance analysis occurs in the Check phase of the PDCA cycle.

ISO Reference:

Clause 0.3: PDCA model in ISO 45001.

The PDCA cycle (Plan-Do-Check-Act) is a core framework in ISO 45001 for continual improvement of the OH and S management system. An Environmental Management Program is part of ISO 14001 (Environmental Management System) and not ISO 45001.

Analysis of Options:

A. Treatment of Risks:Correct. Risk treatment is part of the Plan phase.

B. OHSMS Policy:Correct. The policy is developed in the Plan phase.

C. Environment Management Program:Incorrect. This is outside the scope of ISO 45001 and relates to ISO 14001.

D. Analyzing OHSMS Performance:Correct. Performance analysis is part of the Check phase.

ISO References:

Clause 0.3: PDCA framework in ISO 45001.

Audit reports should focus on objective evidence, observations, and findings relevant to the management system and the audit process. Personal opinions, unrelated remarks, or derogatory comments are inappropriate.

Analysis of Statements:

A. The guide was trying to be helpful and would not stop talking during the audit:Incorrect. This is irrelevant to the audit findings or conclusions.

B. The Sales Manager was kind and seems to be a nice person:Incorrect. Personal opinions about individuals are not appropriate in audit reports.

C. The audit client’s objectives for this audit were never realistic. That’s why we were unable to complete the audit plan:Correct. This is relevant as it relates to the audit process and highlights challenges in meeting objectives.

D. The maintenance team could not replace a lightbulb, let alone an air conditioning unit:Incorrect. This is derogatory and irrelevant to the audit report.

E. The OHS Management team were extremely helpful and went out of their way to facilitate access to required records:Correct. This is a valid observation about cooperation during the audit process.

F. The OHS Manager disagreed with me in respect of all of the nonconformances I raised. He still does not accept any of them:Incorrect. While disagreements may occur, this statement is overly subjective and not constructive.

G. The Production Manager is lucky to have a job as he does not appear to understand how anything works around here:Incorrect. Personal attacks or irrelevant judgments have no place in the report.

H. The Sales Manager said he had forgotten the password to the Sales Ordering system and so too had everyone else in his department:Correct. This relates to system access and could indicate a nonconformance or an opportunity for improvement.

ISO References:

ISO 19011:2018, Clause 6.7: Reporting audit results.

Analysis of Each Option:

ISO 45001 Clause 8.1.3 Management of change states that the organization must establish processes for the implementation and control of planned temporary and permanent changes that impact OH and S performance. It also says this includes new products, services and processes, and changes to existing products, services and processes. That makes A true. It also supports B, because the clause is specifically about changes that impact the organization’s OH and S performance.

Statement E is also true. If the organization decides, after an emergency preparedness and response exercise, that it needs to change part of the OHSMS to improve OH and S performance, then that change has to be implemented in a controlled way under the organization’s management-of-change process. ISO 45001 links emergency preparedness with improvement and requires changes impacting OH and S performance to be controlled.

Why the others are false:

C is false because ISO 45001 does not limit management of change to planned changes only. It says the organization must also review the consequences of unintended changes and take action to mitigate adverse effects.

D is false because Clause 8.1.3 does not require retaining documented information of all changes. The clause requires establishing processes for implementation and control, but it does not state a blanket requirement to retain documented information for every change.

F is false because developments in knowledge and technology are explicitly included in management of change, not excluded.

G is false because changes are not limited to those identified by the organization itself; the clause also includes changes in legal and other requirements, and changes in knowledge or information about hazards and risks.

H is false because ISO 45001 explicitly says management of change applies to temporary and permanent planned changes.

Analysis of Options:

A. The organisation must attempt to identify and address every risk it faces:Incorrect. ISO 45001 focuses on OH and S risks and not every risk faced by the organization.

B. The effect of uncertainty (i.e. risk) can result in positive outcomes as well as negative ones:Correct. Clause 3.20 defines risk as the " effect of uncertainty, " which may result in positive or negative outcomes.

C. Although organisations are required to carry out risk management, the method by which they do so is up to them:Correct. ISO 45001 does not prescribe specific risk management methods, leaving the organization to choose the approach that best suits its context (Clause 6.1.2).

D. Risk assessment is an activity that must be carried out by top management:Incorrect. Risk assessment can involve workers and other personnel; it is not limited to top management.

E. The organisation is required to assess risks arising from OH and S hazards:Correct. Clause 6.1.2.2 requires organizations to assess OH and S risks associated with hazards.

F. Risk is often expressed as a combination of likelihood and impact:Correct. This is a common way to express risk, aligned with Clause 6.1.2.

ISO References:

Clause 3.20: Definition of risk.

Clause 6.1.2: Hazard identification and risk assessment

Clause 8.1.4.2 requires the organisation to coordinate its procurement processes with contractors to identify hazards and assess and control OH and S risks arising from contractor activities and operations. A establishes explicit OH and S requirements within the contractual relationship, creating a controlled mechanism through which Shelf-Fit can specify and enforce relevant safety expectations. B requires contractors to provide site-specific risk-assessment information before work begins, enabling Shelf-Fit to coordinate hazard identification and risk controls proactively rather than relying on contractor expertise or historical absence of incidents. The existing ODT confirms that contractor coordination must cover hazard identification, assessment and control of OH and S risks. Auditing contractors only after incidents is reactive, while chemical retention or merely suggesting training does not establish systematic coordination. ISO 45001 certification of every contractor is also not required by Clause 8.1.4.2.

The correct answers are B and D.

In certification audits, the certification body decides the audit team composition and audit time using its own documented procedures and competence requirements. ISO/IEC 17021-1 requires the certification body to determine the competencies needed for the audit team and to assign an audit team that is competent for the audit scope. It also requires the certification body to determine the audit time needed to plan and accomplish a complete and effective audit.

IAF MD 5 further explains that the certification body should consider the composition and size of the audit team to ensure audit effectiveness. This means a client request for “only one auditor” may be considered, but it cannot simply be accepted just to reduce travel costs if that would undermine competence, coverage, or effectiveness.

Therefore:

B is correct because the OHS Manager should be told that audit duration and team make-up are decided in line with the certification body’s internal procedures.

D is correct because the request can be considered, and the certification body can respond after applying its rules and competence requirements.

Why the other options are incorrect:

A is not the best answer because the people managing the audit programme already operate within the certification body’s process.

C is inappropriate; a client request does not justify telling them to use another certification body.

E is incorrect because the accreditation body does not decide the audit team for the client’s audit.

F is incorrect because the request cannot be automatically accepted based only on cost saving.

ISO 45001 requires an organization to determine the external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended results of the OH and S management system. This is established in Clause 4.1 – Understanding the organization and its context. External issues are typically conditions arising outside the organization, such as market conditions, social conditions, legal environment, economic factors, and technological developments. Internal issues are those related to the organization’s people, structure, culture, ownership, competence, and operational arrangements.

D. New technology available on the market is an external issue because it exists in the external business and technological environment. It is not created inside the organization, but it can affect how the organization manages OH and S risks and opportunities, for example by introducing safer equipment, automation, or new control methods. ISO 45001 guidance in Annex A recognizes that technological environment can be part of context analysis.

F. Average salaries in the business sector is also an external issue because it relates to the wider economic and labor-market environment, not the organization’s own internal arrangements. This kind of issue can influence recruitment, retention, competence availability, and worker welfare conditions, all of which may indirectly affect OH and S performance. It is part of the external economic context.

Why the other options are not external:

A. Increased number of outsourced processes is mainly an internal organizational decision about how work is arranged and controlled. Although outsourced providers are external parties, the increase in outsourcing is part of the organization’s internal operating model.

B. New owners of the organisation is an internal issue because ownership and governance are part of the organization’s internal structure and direction.

C. Workers joined a trade union is generally treated as an internal workforce/industrial relations issue, because it directly concerns the organization’s workers and participation arrangements.

E. Recently hired workers with limited command of the local language is an internal issue because it concerns the competence, communication, and workforce characteristics within the organization.

Therefore, the two options related to external issues are:

D, F

Analysis of Options:

A. Integrated Management System:Correct. An Integrated Management System (IMS) combines multiple standards like ISO 45001, ISO 14001, and ISO 9001, addressing environment management as part of the integration.

B. ISO 14501:Incorrect. ISO 14501 pertains to milk and milk products, not environmental management.

C. ISO 45001:Incorrect. ISO 45001 focuses on Occupational Health and Safety, not environmental management.

D. ISO 14001:Correct. ISO 14001 is the primary standard for Environmental Management Systems.

ISO References:

ISO 14001: Environment Management Systems.

Integrated Management Systems: Combines standards like ISO 14001 and ISO 45001.