High turnover and subcontractor layering quietly destroy ISO 45001 Clause 10.2 compliance — and your audit report won't show it until it's too late.
Walk into almost any mid-size manufacturing plant — 80 to 250 employees, general industry, running two or three shifts — and ask the safety coordinator to pull their corrective action log. What you usually find is one of two things: a log that's nearly empty, or a log full of entries that stopped moving six months ago. Both are problems. Neither shows up clean on an audit report until the auditor starts asking follow-up questions that the safety coordinator can't answer — because three of the four people who were supposed to close those actions no longer work there.
That's the ISO 45001 Clause 10.2 story that doesn't get told enough. Nonconformity and corrective action management isn't a documentation exercise. It's the earliest warning system your safety program has. And in manufacturing environments with high turnover, frequent temp-to-hire cycles, or layered subcontractor workforces, it's also the first system to quietly fall apart.
ISO 45001 Clause 10.2 requires that when a nonconformity occurs — whether from an incident, a near-miss, an audit finding, or a regulatory observation — you react to it, investigate causes, implement corrective actions, review their effectiveness, and document all of it. The standard also requires that you communicate these actions to relevant workers and retain records as documented evidence.
On paper, most manufacturing plants have a process for this. A maintenance supervisor writes something up after a near-miss on the press line. A safety coordinator logs it. An action item gets assigned to someone — maybe a shift lead, maybe a process engineer. And then that person takes a better offer at a competitor plant three weeks later.
The corrective action doesn't disappear from the log. It just sits there. Assigned to someone who no longer works there. Status: open.
Most counterintuitive insight for safety coordinators: the audit report will often show a clean corrective action closure rate right after an external audit, because teams scramble to close things before the auditor walks in. The real story is in the corrective action backlog between audits — specifically, how many open items have had no activity in 60 or 90 days, and why.
In a plant running 25–30% annual turnover — not unusual in general industry manufacturing right now — the average corrective action assigned to a line-level employee or shift supervisor has a meaningful chance of losing its owner before it closes. And the organizational knowledge attached to that action — the context of what actually happened, what the hazard was, what interim controls were put in place — often leaves with that person.
Subcontractor layering makes this worse. A general industry plant using maintenance subcontractors, janitorial subcontractors, and temporary staffing agencies simultaneously may have three or four different workforce populations in the building — none of whom are in the plant's corrective action system, and most of whom have no idea a corrective action exists that affects their work area.
A press operator on the second shift reports a near-miss: a guard on a stamping press was found partially disengaged — someone had tied it back to speed up a die change. The safety coordinator writes it up, assigns a corrective action to the maintenance supervisor to inspect all guards on the press line and verify LOTO procedures are being followed during die changes. The maintenance supervisor acknowledges it.
Two weeks later, that maintenance supervisor is gone. New hire comes in. No one explicitly transfers the open corrective action. The replacement maintenance tech doesn't know it exists. The guard gets inspected during the next scheduled PM — which happens to be three months out. In the meantime, the behavior that caused the original near-miss continues, because the corrective action that should have addressed it never closed.
If OSHA walks in during that three-month window and finds the same guarded press with the same issue, the employer is now looking at a serious violation — up to $16,131 per instance — with documented evidence that the hazard was already identified and the corrective action was never completed. That's not just a fine. That's a willful or repeat violation waiting to happen at up to $161,323 if it recurs.
A well-maintained Clause 10.2 record set tells you things your TRIR never will. Specifically:
Three practical adjustments that make an immediate difference in plants dealing with high turnover or subcontractor complexity:
Assign corrective actions to roles, not names. "Press line maintenance supervisor" instead of "Mike Thompson." When Mike leaves, the action doesn't leave with him. The system flags it to whoever fills that role next.
Build a 30-day orphan review into your corrective action process. Any action with no activity in 30 days gets flagged automatically. Whoever owns the safety function reviews it and either reassigns it or escalates it. This one step alone catches the turnover gap before it becomes an audit finding.
Require root cause documentation before closure, not after. If a corrective action can be closed with "employee retrained," your process is letting symptom treatments count as systemic fixes. Require a one-line root cause statement — even an informal one — before the action closes. It changes how people think about the corrective action, and it builds a record that tells a coherent story to the next auditor.
Clause 10.2 requires documented evidence that nonconformities were identified, causes were investigated, corrective actions were implemented, and the effectiveness of those actions was reviewed. Records must be retained and relevant workers must be informed. The standard does not prescribe a specific format — but the evidence must exist and must be traceable.
When corrective actions are assigned to specific individuals rather than roles, departing employees take ownership — and institutional knowledge — with them. Actions go stale, root causes stay unaddressed, and the corrective action log becomes evidence of a safety system that reacts but doesn't resolve. In an OSHA inspection, open corrective actions on known hazards significantly increase liability exposure.
Yes. ISO 45001 Clause 8.1.4 requires organizations to manage the OHS risks associated with contractor activities, and Clause 10.2 applies to nonconformities regardless of whether the worker involved is an employee or a contractor. A corrective action log with zero subcontractor-related entries in a plant with active contractor presence is a gap an auditor will find.
OSHA serious violations carry penalties up to $16,131 per instance. If the same hazard was previously identified — documented in an inspection report, incident record, or corrective action log — and not corrected, OSHA can classify the violation as willful or repeat, which carries penalties up to $161,323 per instance. See OSHA's current penalty structure for the full breakdown.
Safety coordinators at mid-size manufacturing plants are already running lean. Maintaining a clean corrective action log, chasing down action owners after turnover events, and keeping subcontractor activities inside the safety system is time-consuming work that competes with everything else on the plate. The paperwork doesn't shrink when headcount does.
If the administrative side of your ISO 45001 program is eating the time you should be spending on the floor, that's exactly what we handle. Talk to EHS, Inc. — we take the compliance management off your plate so you can do actual safety work.
Aaron West
Founder, EHS, Inc. — 18+ years in EHS compliance and contractor safety
Aaron West has spent over 18 years helping contractors and businesses navigate OSHA compliance, ISNetworld® certification, and workplace safety management. He founded EHS, Inc. to make enterprise-level EHS accessible to companies of all sizes — serving contractors and businesses nationwide — without long-term contracts or enterprise overhead.
Our team handles the complexity so you can focus on running your business. No long-term contracts, no learning curve.
Talk to EHSOil & gas contractors get cited not because the hazard wasn't identified—because nobody documented how they identified it.
Utility safety managers learn the hierarchy of controls from a standard. Here's what they miss by never learning it from the field.
Turnover and subcontractor layering don't just thin your workforce—they silently collapse the near-miss data your triangle depends on.
Framework to achieve zero incidents
Stop hitting paywalls
54 topics in English & Spanish