Utility safety managers track the wrong things under Clause 9.1 — here's what ISO 45001 actually requires and where the gap gets costly.
Most safety managers who learned Clause 9.1 from the standard itself walk away thinking it's a KPI checklist problem — pick your metrics, track them monthly, done. That's not wrong exactly, but it's not what the standard is asking for. The gap between what in-house safety teams actually measure and what Clause 9.1 requires shows up clearly in utility environments, where a safety coordinator for an electrical T&D or gas distribution contractor is already stretched thin across multiple crews, multiple job classifications, and a hazard profile that can kill someone in under a second.
Clause 9.1 has three components: 9.1.1 (general monitoring and measurement), 9.1.2 (evaluation of compliance), and 9.2 (internal audit — which feeds directly back into 9.1). The standard requires that your organization determine what needs to be monitored, when it needs to be measured, how the results will be analyzed, and who is responsible for that analysis. It also requires documented information as evidence. That's not a KPI dashboard. That's a system.
Where most in-house EHS teams fall short isn't in tracking data — it's in connecting that data to actual decisions. If your monthly safety report goes to leadership and nothing changes as a result, you're satisfying the form of Clause 9.1 without satisfying its intent. An ISO auditor who has spent time in the field will find that gap in about twenty minutes.
Consider a gas distribution contractor running two simultaneous main replacement projects — one in a residential neighborhood with limited staging space and one in an active commercial corridor with truck traffic. The safety coordinator tracks TRIR, toolbox talk sign-offs, and PPE observations. All three look fine on paper. TRIR is below the industry average. Sign-off sheets are complete. PPE compliance is at 92%.
What isn't tracked: the frequency of unplanned energized work events — moments when a backhoe operator hits an unmarked service line and the crew improvises a response rather than stopping work. These happen. Any gas distribution safety manager reading this already knows they happen. They're often logged internally as "near-miss, no injury" and closed out the same day. Under Clause 9.1.1, the question the standard is asking is whether those events are being monitored as signals about the effectiveness of your hazard controls — not just counted and filed. The answer, in most utility EHS programs, is no.
Most safety coordinators assume that if TRIR is dropping, the performance evaluation system is working. The real problem is that a falling TRIR in a high-energy environment like electrical T&D can be a sign that reporting culture is deteriorating, not that the work is getting safer. Clause 9.1 requires you to evaluate the performance of the OH&S management system, not just outcomes. Those are different questions.
A journeyman lineman working a 69kV transmission structure on a storm restoration crew is not the same risk profile as a distribution tech swapping a meter base. If your performance evaluation system doesn't distinguish between those two hazard profiles in its monitoring criteria, you are running one flat KPI set across wildly different exposures. The standard doesn't require that level of granularity by name — but it requires that monitoring be appropriate to the hazards and legal obligations your organization faces. An auditor will ask you to demonstrate that. "We track TRIR across all crews" is not a demonstration.
Clause 9.1.2 requires periodic evaluation of compliance with legal and other requirements. In utility work, that means OSHA 1910.269 for electrical work, 49 CFR Part 192 for gas distribution, state-level dig-safe regulations, and whatever your operator qualification program requires under DOT. Most in-house safety teams have a compliance calendar. What they don't have is documented evidence that the compliance evaluation actually happened and produced a result — even if the result is "we're compliant."
That documentation gap is what triggers a nonconformance in a third-party audit. OSHA serious violations run up to $16,131 per citation. Willful or repeat violations go to $161,323. But for a utility contractor, the more immediate cost of a failed audit isn't the fine — it's the prequalification consequence. A single major nonconformance in an ISNetworld or Avetta audit can drop your grade below the threshold a client requires, and contracts that were quietly assumed to renew stop coming. That rarely shows up as a line item anyone can point to. It just shows up as a slow erosion of bid opportunities over the following twelve months.
The safety managers who get this right share a few habits. They set monitoring criteria by hazard category, not by headcount or crew size. For an electrical T&D crew working energized distribution lines, that means separate leading indicator tracking — energized work event frequency, hot-stick inspection completion rate, equipment grounding verification before each switching sequence. For a gas distribution crew, it means monitoring dig ticket compliance, atmospheric monitoring frequency in excavations, and crew-level stop-work authority usage, not just company-wide stop-work authority policy existence.
They also close the loop between monitoring results and management review in a documented way. Clause 9.3 (management review) cannot happen meaningfully without 9.1 outputs that are actually worth reviewing. If what goes into management review is a TRIR number and a training completion percentage, nobody at that table has the information they need to make a decision about resource allocation, crew deployment, or equipment investment.
Clause 9.1 requires that organizations determine what to monitor and measure, establish methods for monitoring, measurement, analysis, and evaluation, document when monitoring happens, and analyze results to evaluate OH&S performance and the effectiveness of the OH&S management system. It is not satisfied by tracking TRIR alone — it requires a system that connects measurement to decisions.
The standard does not specify a fixed frequency. It requires that the frequency be "appropriate" to the legal and other requirements involved. For utility contractors subject to OSHA 1910.269 and DOT operator qualification requirements, quarterly compliance evaluations with documented results are a defensible minimum. Annual-only evaluations will draw scrutiny in a third-party audit.
Missing documented evidence that compliance evaluations actually occurred — not that compliance exists, but that it was evaluated and recorded. Safety managers often know they're compliant but have no dated, signed record of the evaluation itself. That's the gap auditors find first.
OSHA 300 log accuracy is a direct input to your Clause 9.1.1 monitoring program. If your 300 log is inaccurate — wrong classification, missing entries, days-away counts that don't match what actually happened — your performance data is corrupted at the source. Everything built on top of it, including your TRIR, your DART rate, and your management review outputs, is wrong.
Clause 9.1 is not a reporting exercise. For a utility contractor managing energized electrical work and gas distribution crews simultaneously, it's the mechanism that tells you whether your controls are actually working before someone finds out the hard way that they weren't. If the admin side of building and maintaining that system is eating the time you should be spending in the field with those crews, that's a solvable problem.
Talk to EHS, Inc. — we handle the documentation, the compliance tracking, and the records so your safety manager can stay where the real work happens.
Aaron West
Founder, EHS, Inc. — 18+ years in EHS compliance and contractor safety
Aaron West has spent over 18 years helping contractors and businesses navigate OSHA compliance, ISNetworld® certification, and workplace safety management. He founded EHS, Inc. to make enterprise-level EHS accessible to companies of all sizes — serving contractors and businesses nationwide — without long-term contracts or enterprise overhead.
Our team handles the complexity so you can focus on running your business. No long-term contracts, no learning curve.
Talk to EHSHigh turnover and subcontractor layering quietly destroy ISO 45001 Clause 10.2 compliance — and your audit report won't show it until it's too late.
Oil & gas contractors get cited not because the hazard wasn't identified—because nobody documented how they identified it.
Utility safety managers learn the hierarchy of controls from a standard. Here's what they miss by never learning it from the field.
Framework to achieve zero incidents
Stop hitting paywalls
54 topics in English & Spanish