The Helm and the Lens – volume 3b

A system can be conforming in every requirement and audited clean every year. It can still be a system nobody has watched while it was running.
What this volume is
Volume 3a built the occupational health and safety system from the position of the people who own a hotel and run it. This volume examines the same system from the two positions that have to be convinced it works: the internal auditor, who keeps coming back and lives with what he wrote, and the certification body, which arrives for a few days and signs. Neither of them builds anything. Both decide whether what was built is real.
The internal auditor’s lens
Fifteen subchapters on verifying your own system. An audit programme built on the hours a hotel works rather than on the months of a calendar. Criteria nobody has questioned. Competence and independence you may not have, because in a small property the person auditing the system is usually the person who wrote it. Hazard identification, the hierarchy of controls, fatigue and workload. Evidence in an occupied building. Sampling across shifts, seasons, departments and contractors. Emergency preparedness while the house is full. Findings, grading, and the one that cannot wait until Monday.
The certifier’s lens
Fifteen subchapters on the machinery almost nobody explains to a hotel. How audit days are calculated and why the number is not negotiable. What the first stage is actually assessing. What effectiveness evidence looks like, as distinct from the evidence that a control exists. The worker interview, and what it is evidence of. Root cause, and the response a certification body will accept. Who actually takes the decision — and it is not the auditor you met. Surveillance, recertification, suspension and withdrawal. An injury while the certificate is valid. And, last, what the certificate proves about a hotel and what it has never claimed.
How it is built
Thirty composite hotels in thirty cities, one to each subchapter, each closing with a concept card that carries the argument in a single image. No property is real; the cases are assembled from patterns that recur across four decades of work in international hospitality. Every financial figure is a modelled estimate, declared as such wherever it appears, never an industry benchmark — the sector does not publish them. Every subchapter ends with the case that runs the other way: the obvious correction that produces the opposite failure, because over-application is how much of the failure in this book was built in the first place.
On sources
The second chapter rests almost entirely on sources other than the standard, and says so at the opening of every subchapter, because the standard says almost nothing about certification. That machinery lives in the requirements applied to certification bodies and in the mandatory documents of the international arrangement. This book describes them by what they do rather than by what they are called, because designations change — and keeps the perishable part on this platform, where it can be corrected without reprinting a book.
Who it is for
The coordinator who inherited a safety system from somebody who left. The chief engineer told to audit a discipline nobody asked whether he was trained to audit. The general manager who will sit across from the certification auditor. And the owner who decides whether the certificate is a line worth keeping.
It states what ISO 45001:2018 requires today and separates requirement from method on the page rather than in a footnote. It invents no obligations.
A book for the people who have to find out whether it is true.