Introduction to Health and Safety Auditing: A Practical Guide

Health and safety auditing is one of the most powerful tools available for improving workplace safety. A well-conducted audit provides objective assurance that your safety management arrangements are working effectively. It identifies weaknesses before they cause harm, verifies that control measures are in place and functioning, and demonstrates to regulators, clients, and employees that your organisation takes safety seriously.

Yet many organisations misunderstand what auditing involves. Some confuse audits with inspections, treating them as simple hazard-spotting exercises. Others view audits as bureaucratic paperwork rather than valuable management tools. This guide explains what health and safety auditing actually is, how it differs from other monitoring activities, and how to use audits effectively to strengthen your safety management system.

What Is Health and Safety Auditing?

ISO 19011 defines auditing as "a systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled." In practical terms, this means examining your safety management arrangements against a benchmark, whether legal requirements, company standards, international standards such as ISO 45001, or recognised good practice.

Auditing operates at a strategic level within an organisation. It examines not only whether your management system is being followed, but also whether the system itself is adequate for managing your risks. An audit asks fundamental questions: Do you have the right policies and procedures in place? Are they being implemented as intended? Are they achieving the desired outcomes? Where are the gaps and weaknesses?

Key outputs from the auditing process include:

• Identification of weaknesses or gaps in management arrangements
• Confirmation that appropriate management arrangements are in place
• Verification that risk control systems exist, are implemented, and are consistent with the organisation's risk profile
• Assurance that organisational controls are in place for identified risks
• Evidence of progress against safety objectives

How Audits Differ from Inspections and Safety Tours

Understanding the difference between audits, inspections, and safety tours is essential for using each tool effectively. While all three are proactive monitoring activities, they serve different purposes and operate at different levels.

Health and Safety Inspections

Inspections are primarily hazard-spotting activities. They use checklists and visual observation to judge whether local controls are working. Inspections focus on physical conditions and behaviours at a specific point in time. They identify unsafe conditions such as slip, trip, and fall hazards, faulty equipment, or improper storage of hazardous substances. They also identify unsafe acts such as failure to wear PPE, defeating safety guards, or not following procedures.

Inspections are typically carried out by line managers, supervisors, or safety representatives as part of their normal duties. The frequency depends on the level of risk: low-risk environments such as offices may need inspecting less often, while high-risk or rapidly changing environments such as construction sites may need daily or even more frequent inspections.

Safety Tours

Safety tours involve senior management visiting the workplace to observe conditions and have conversations with workers about safety. They serve to demonstrate management commitment, connect leadership with front-line challenges, and reinforce the importance of safety culture. Senior managers typically conduct tours with a line manager or safety professional who can provide operational context.

Audits

Audits take a broader, more systematic view. Rather than spotting individual hazards, audits examine the systems, processes, and arrangements that determine how well safety is managed across the organisation. They assess whether policies and procedures are adequate, whether they are being followed, and whether they are achieving their intended outcomes. Audits require trained auditors with appropriate competence and independence.

Understanding Audit Findings

The main outputs from audits are called findings. Understanding how findings are categorised helps organisations prioritise their response and allocate resources appropriately.

Observations

Observations are not failings. They are outputs from evidence gathered during the audit that help add value to the organisation. Observations are subdivided into positive feedback and opportunities for improvement.

Positive feedback: Evidence that highlights good practice. Including positive feedback gives a balanced view of compliance and reinforces behaviours the organisation should continue.

Opportunities for improvement: Observations that, while not indicating a procedural failure, would improve the effectiveness of a process or procedure if acted upon. These are recommendations rather than requirements.

Non-Conformances

Non-conformances are identified failings in the safety management system based on evidence found during the audit. They require corrective action and are subdivided into major and minor categories.

Major non-conformance: A finding relating to the absence of a required procedure or process, or the effective breakdown of a procedure that puts at risk the system's ability to deliver its intended outcomes. Major non-conformances require urgent attention.

Minor non-conformance: An isolated lapse in a procedure or process that has not significantly impacted the capability of the system but needs to be addressed to assure future capability. Multiple minor non-conformances against the same procedure may collectively represent a major non-conformance.

From Findings to Action: Remedial and Corrective Actions

An audit is only valuable if it leads to action. Non-conformances must be addressed through an action plan with clear responsibilities and timescales. Understanding the difference between remedial and corrective actions is important for ensuring lasting improvement.

Remedial actions: Fix the identified problem but do not correct the underlying weakness. For example, getting a manager to clean up an oil spill fixes the immediate hazard but does not address why the spill occurred or why it was not reported and cleaned up immediately.

Corrective actions: Address the underlying weakness in the system and prevent recurrence. For the oil spill example, corrective action might involve implementing a procedure for handling oil drums correctly, providing training to workers, and establishing a system for reporting and responding to spills. Corrective actions prevent future problems rather than just fixing the current one.

Effective action plans specify what action is required, who is responsible, the target completion date, and how completion will be verified. Progress should be tracked and reported, and the effectiveness of actions should be reviewed to confirm they have achieved the intended improvement.

International Standards and Frameworks

Health and safety auditing is recognised internationally as a fundamental element of effective safety management. ISO 45001, the international standard for occupational health and safety management systems, requires organisations to conduct internal audits at planned intervals to verify that the management system conforms to requirements and is effectively implemented and maintained.

ISO 19011 provides guidance on auditing management systems, including principles of auditing, managing audit programmes, conducting audits, and evaluating auditor competence. While ISO 19011 is not specific to health and safety, it provides a robust framework that applies to all management system audits.

For organisations operating internationally, auditing provides a consistent mechanism for verifying safety standards across multiple locations and regulatory environments. A well-designed audit programme can identify variations in implementation, share good practice across the organisation, and ensure that safety management meets the highest applicable standards wherever the organisation operates.

Auditor Competence and Independence

The value of an audit depends heavily on the competence and independence of the auditor. Auditors need training in audit techniques, knowledge of the standards or criteria against which they are auditing, and understanding of the activities and processes being audited.

Independence is equally important. Auditors should not audit their own work or areas where they have direct responsibility. This is why many organisations use a combination of internal auditors who audit areas other than their own, and external auditors who bring complete independence along with specialist expertise and fresh perspectives.

For complex audits, a lead auditor typically manages the audit process, plans the audit, coordinates the audit team, and compiles the final report. Individual auditors conduct specific elements of the audit and report their findings to the lead auditor. This structure ensures consistency and allows larger audits to be completed efficiently.

How Arinite Can Help

At Arinite, we provide comprehensive health and safety audit services that help organisations understand their current position and identify opportunities for improvement. Our team of Chartered (CMIOSH) consultants brings the independence, expertise, and fresh perspective that effective auditing requires.

Our audit services include:

• Comprehensive health and safety management system audits
• Compliance audits against UK legislation and regulations
• ISO 45001 gap analysis and internal audits
• Topic-specific audits covering areas such as COSHH, manual handling, and work at height
• Pre-tender and pre-qualification audits
• Audit programmes for international operations
• Support with developing internal audit capability and training auditors

With experience supporting over 1,500 UK businesses and operations in more than 50 countries, we understand how to conduct audits that drive real improvement. Our approach is practical, proportionate, and focused on adding value. We call it "Keeping It Simple."