OHS Audit

An occupational health and safety audit assesses whether the hazards affecting workers' health and safety have been identified, whether the risks are under control and whether legal obligations are met.

The aim is to reduce the risk of accidents and occupational illness before an accident occurs. Most findings in OH&S audits concern situations already experienced as near misses but never dealt with systematically.

• Businesses in a high hazard class
• Organisations establishing or maintaining ISO 45001
• Companies working with subcontractors
• Businesses conducting a root-cause investigation after an accident
• Suppliers whose customers request evidence of OHS performance

The criteria are applicable occupational health and safety legislation together with a management system standard such as ISO 45001; the customer's code of conduct and sector requirements can be added.

• The currency and scope of the risk assessment
• Hazard identification and application of the hierarchy of risk control
• OHS organisation and role assignments
• Worker participation and consultation mechanisms
• Provision and use of personal protective equipment
• Machine guards and safety devices
• Electrical safety and earthing
• Permit systems for working at height, confined space and hot work
• Chemical exposure and safety data sheets
• Emergency plans, evacuation and drills
• Accident and near-miss records, incident investigations
• Health surveillance and periodic examinations
• OHS training and competence records
• Subcontractor and visitor management

• ISO 45001
• ISO 19011
• ISO 45003
• ILO-OSH 2001

1. 1Selecting the Criteria to ApplyThe standard, scheme or legislation against which the audit will be performed is determined; in subject-specific audits the choice of criteria directly determines what the result means.
2. 2Risk Assessment and ScopeRisk areas are identified according to the organisation's activity and location; the number of audit days is planned accordingly.
3. 3Review of Documents and RecordsPolicies, procedures, permits, measurement records and the results of previous audits are examined.
4. 4On-site AuditThe relevant areas are walked; subject-specific measurements, observations and record checks are made.
5. 5Worker InterviewsWhere the subject requires it, confidential interviews with workers are held independently of management; statements are compared with the records.
6. 6Assessment of Legal ComplianceCompliance with the legislation in force is checked separately; a legal nonconformity is the most serious category of finding in every scheme.
7. 7Reporting of FindingsFindings are classified by severity and compiled into a report.
8. 8Corrective Action and Follow-upA corrective action plan is obtained; its close-out within the period prescribed by the scheme is followed up.

Findings that pose an imminent danger to life (an unguarded machine, no fall protection at height, an electrical safety gap) fall into the immediate-action category and are reported to management during the audit. System deficiencies are remedied within a defined period.

• Details of the audit body, the auditor and the auditee
• Standard, scheme or legislation applied
• Date, duration and scope of the audit
• Findings from the review of documents and records
• On-site observations and measurement results
• Findings from worker interviews, where held
• Assessment of legal compliance
• Findings, their severity and the supporting evidence
• Corrective action plan and time limits

The audit covers determinations within the criteria applied and says nothing about matters outside them. It also shows the situation on a given date and does not cover later changes. Most of these audits produce a report rather than a certificate; only where they are carried out under an accredited certification scheme can they lead to a certificate.

Accreditation differs with the type of audit. Third-party audits underpinning management system certification are carried out under ISO/IEC 17021-1 and those underpinning product certification under ISO/IEC 17065; these scopes are subject to accreditation. First- and second-party audits, and audits governed by a scheme owner's own rules (such as SMETA or amfori BSCI), do not fall within accredited certification; they are conducted following the ISO 19011 guidance and produce a report. EUROLAB holds internationally recognised accreditation under ISO/IEC 17021-1 and ISO/IEC 17065, granted by accreditation bodies that are signatories to the IAF multilateral recognition arrangement; which audits can be offered within accredited scope is confirmed in writing at the quotation stage.

• Social Compliance Audit
• Environmental Audit
• Energy Audit
• Cybersecurity Audit
• Data Protection Audit
• ESG Audit