Understanding, planning, and implementation of ISO 55001:2024 changes
This domain tests how you interpret the 2024 changes and plan and implement the transition in an organization. The exam focuses on gap analysis, documentation updates, risk-based thinking, and evidence of integration.
Understanding the changes
Build a clause-by-clause traceability matrix mapping each 2014 requirement to its 2024 location, or marking it removed. Identify the new emphasis: context issues and interested parties (clause 4), integration with business processes (clause 5), measurable objectives (6.2), risk-based thinking (6.1 and 8.1), and consolidated documented information (7.5). Understand that the HS changes the logic: risks and opportunities drive planning, and preventive action is not a separate corrective tool.
Planning the transition
Conduct a gap analysis against evidence, not just documents. For each 2024 requirement, ask what record or practice demonstrates conformity. Common gaps: procedures that reference removed clauses, a preventive action procedure with no risk-based equivalent, and internal audit checklists based on the 2014 structure. Update the AMS manual and procedures to reflect 7.5 documented information. Repurpose the preventive action procedure into a risk and opportunity management procedure under 6.1. Describe management of change and outsourcing controls within 8.1 and external provider requirements. Revise objectives to be measurable and linked to policy. Plan training for asset managers, process owners, and internal auditors.
Implementation
Demonstrate top management integration by showing how the AMS is used in business planning and resourcing. Update the internal audit programme to cover the 2024 clause structure and new requirements. Hold a management review that addresses transition status, changes, and effectiveness. Update documented information controls to cover creation, updating, and control of documents and records, and remove references to the old 7.5/7.6 split.
Worked example
An organization has a Preventive Action Procedure under 2014 clause 10.2. For 2024, they cannot simply delete it. They must show risks and opportunities are addressed in 6.1 and that operational controls prevent adverse effects in 8.1. They revise the procedure into a Risk and Opportunity Management Procedure under 6.1 and add evidence of risk-based operational planning. They also update the AMS manual to map 7.5 documented information. Reasoning: the 2024 standard expects integrated risk-based thinking, not a standalone preventive action process.
Traps
Treating the transition as renumbering; leaving references to removed clauses in procedures; failing to update internal audit checklists; not providing evidence of top management integration; assuming preventive action is still a separate requirement; ignoring the need to update risk registers and objectives.