Safety evidence should show controls working during actual work. A risk table and training attendance list are starting points, not complete proof of an effective system.

01

Trace a work activity through its controls

For hypothetical contractor maintenance, connect work planning, responsibility, equipment isolation checks, required authorisation, competence and supervision. Match the records to the time, place and people involved. Check whether workers can report an unsafe condition and whether the organisation responds. A contractor’s certificate does not remove the host organisation’s interface responsibilities.

02

Investigate and verify corrective action

Review incidents and near misses with relevant worker participation. Record immediate measures, causes and corrective actions, then check effectiveness. Avoid explaining every event only as worker error. Evaluate changes to equipment or shifts and update controls where needed. Emergency exercises should record performance and gaps, not only attendance; management review should address unresolved risks.

03

Plan fees and verify scope

Separate protective measures, monitoring, equipment improvements and legally required services from the independent audit fee. Compare initial, surveillance and recertification audit, travel and additional assessment against site, workforce and hazard assumptions. Verify issuer, entity, activities, sites, edition, status and claimed accreditation. Neither a preparation consultant nor a quoted completion date can guarantee a certificate or an accident-free workplace.

04

Preparation and independent decision

ISO does not issue certificates. Verify the proposed issuer, standard and activity against any claimed accreditation scope. Consultancy cannot guarantee approval; the competent body evaluates evidence and makes the independent decision. The applicant implements the system and prepares procedures specific to its own operations and operating records. A certification enquiry to Kayra concerns actual activities, sites, application information, authority and impartiality risks; this role does not include designing or implementing the client’s system. A management-system certification body, other parts of the same legal entity and controlled entities cannot offer or provide management-system consultancy; separate contracts do not remove this restriction.

Sources and application limits

Examples are hypothetical checks. Operating evidence and risk gaps affect readiness; the competent certification body applies its independent audit and decision process.