The Audit on 22 September and the Director's Three Requests

These are four different problems and they should not be answered with one word.

1. Recreating the toolbox talks and pre-use checklists. If the talks and checks genuinely happened and only the paper is missing, the honest output is a reconstruction: a document dated today, signed by the people who attended, stating what was done and when, and clearly marked as a reconstruction. If they did not happen, any sheet produced is a fabricated record. The instruction as given - 'recreate' three months of weekly sheets - invites the second. A safety practitioner who produces contemporaneous-looking records for events they did not witness has made a false document, regardless of intent.

2. Signing the March management review minutes. This is straightforward fabrication. The meeting either occurred or it did not. Signing minutes for a meeting that did not take place is a false declaration, and it also conceals a real nonconformity: ISO 45001 requires management review at planned intervals, and a company that did not hold one has a gap to close, not a document to invent.

3. Reclassifying the back injury. This is misrepresentation with three victims. The client is misled about the contractor's safety performance; the certification body is misled about conformity; and the injured loader is exposed to a claims process that depends on the injury being recorded accurately. Back injuries from manual handling in a warehouse are exactly the events a safety management system exists to learn from. Moving the number to 0.0 destroys the learning and the record.

4. The expired forklift licence. This is a competence and authorisation failure, not a filing error. The man is operating a machine that kills people. It is also a conflict-of-interest problem, because the person who raised it is the director's nephew, and a discrimination or favouritism dimension will be alleged the moment it is enforced. The response must be documented and applied to the whole fleet, not to one man.

Same day. I sign nothing. I write a contemporaneous note of the 12 September conversation - date, time, who was present, what was asked - and keep a copy outside the company system. I secure the existing records, including the March injury file, in their original form.

Then, in writing to the operations director. A short memo that separates what I can do from what I cannot, with the legitimate route offered for each:

• Records: a reconstruction statement, signed by attendees, dated today, plus a forward-looking compliance schedule.
• Management review: convene a genuine review before 22 September. There is time. A dated, minuted meeting with the right attendees is a credential, not a problem.
• The March injury: correct the classification, report it through the proper channels, and present it as a system learning with actions.
• The operator: remove him from the truck today, verify licences across the fleet, and book refresher training. Framed as fleet-wide licence verification so it is not a personal matter.

If I am overruled. I escalate in writing to the managing director and, if there is one, the board audit or risk committee, setting out the specific documents at risk. If a false declaration is still made to the certification body, I put my objection in writing, decline to sign, and consider my notification obligations to the certification body and, for the injury, to the regulator. I consult my professional body's ethics committee for guidance, in confidence, before acting on that step.

What I do not do. I do not resign quietly and leave the false record behind with my name absent from the objection. And I do not stay and sign. The record of my objection is the thing that protects the workers, me and, ultimately, the company.

If I comply.

For me. I have signed a false declaration as a professional. That is a matter for my professional body's disciplinary process, potentially for the certification body's own integrity process, and in some circumstances for criminal exposure for false statements. My membership and my future employability in safety rest on being the person whose signature means something. Once it does not, I have no asset.

For the company. ISO 45001 certification is a statement that the management system conforms. Certification bodies sample records; three months of sheets in one hand with identical pens, and management review minutes with no supporting attendance, are exactly what a competent auditor finds. The consequence is not a finding - it is certificate withdrawal, notification to the accreditation body, and a client that discovers the misrepresentation through its own supply chain audit. Misrepresentation in an insurance proposal can also void cover for the very injury that was misrecorded.

For the worker. A back injury reclassified as first aid loses its place in the claims process and in the risk assessment. The next loader lifts the same load under the same assessment, which still says the task is safe.

On the expired licence. This is not an ethical footnote; it is the most immediately dangerous item on the list. An operator without a current licence is an operator whose competence has not been verified, driving a machine of two to three tonnes among pedestrians in a yard. The employer's duty to ensure competence and authorisation is non-delegable and cannot be satisfied by the fact that he has operated for four months without incident - that is luck, not control. He comes off the truck today, the whole fleet's licences are verified within the week, and the verification is documented with a named verifier and a review date.

On 'everyone does this'. That sentence is the ethical failure itself. It converts a decision about a specific false document into a claim about industry practice, which is unverifiable, irrelevant, and the standard defence of every organisation that is later found to have falsified its records. My answer is that the practice is not universal, and in any case the number of people doing it has never been a defence.