10.3 Auditing the Safety Management System
Key Takeaways
- An audit is a systematic, independent check of whether the safety management system is implemented and effective — not a casual walk looking only for hazards.
- Evidence comes from documents/records, interviews, and workplace observation (triangulation).
- Internal and external auditors both need competence and appropriate independence from the work being audited.
- Audits use sampling, raise non-conformities, and track corrective actions to closure.
- Exam focus: audit tests system effectiveness; inspection is more about physical conditions and practices (contrasted fully in the next section).
10.3 Auditing the Safety Management System
Quick Answer: An audit is a systematic, independent examination of whether the management system is implemented and effective. Auditors gather evidence from documents/records, interviews, and observation. They sample, raise non-conformities, and track corrective actions. Audit ≠ only “spot the hazard” — it tests whether arrangements work as designed.
Inspections look hard at the workplace. Audits look hard at the system that is supposed to keep that workplace under control: policy, organisation, planning, risk assessment, training, monitoring, investigation, and review. Managing Safely expects managers to understand the purpose of audit, the evidence it uses, and how findings become improvement — not to become full-time professional auditors overnight.
What an audit is (and is not)
| Audit is… | Audit is not… |
|---|---|
| Systematic (planned scope, criteria, method) | A random moan about one messy corner |
| Independent (suitable separation from day-to-day ownership of the area) | The same person marking their own homework without challenge |
| Evidence-based | Rumour or a single opinion with no check |
| Focused on system implementation and effectiveness | Only listing physical hazards (that is closer to inspection) |
| Leading to findings and corrective action | A paperwork exercise filed and forgotten |
Course-style definition to remember: systematic, independent check that the management system is in place and working.
Why independence matters
If the person who designed a weak permit system is the only one who “audits” it, findings may be soft. Independence does not always mean an outsider from another company — it can mean another department, a corporate H&S auditor, or a trained peer from a different site — but the auditor must be free enough to report honestly.
Evidence types — triangulate
Strong audits combine three evidence streams. One stream alone is fragile.
| Evidence type | Examples | What it proves (and limits) |
|---|---|---|
| Documents / records | Policy, risk assessments, training matrix, PTW forms, inspection logs, investigation reports, maintenance records | Shows what the system says and what was recorded; documents can be out of date or false |
| Interviews | Managers, supervisors, workers, contractors, safety reps | Shows understanding, culture, and whether procedures are known; people may say what they think you want |
| Observation | Workplace conditions, behaviours, real use of guards, traffic routes, welfare | Shows what actually happens; a short visit can miss night shift or peak chaos |
Triangulation example: The training matrix says all FLT drivers are competent (document). Two drivers cannot describe pre-use checks (interview). Observation shows a truck used with a damaged fork (observation). Finding: competence assurance and supervision are not effective in practice.
Internal vs external auditors
| Aspect | Internal audit | External audit |
|---|---|---|
| Who | Staff or group within the organisation (site, division, corporate) | Third party (certification body, client, consultant, insurer) |
| Typical purpose | Ongoing assurance, prepare for external review, drive improvement | Certification (e.g. ISO 45001), client approval, independent assurance |
| Strengths | Local knowledge, frequent, builds capability | Fresh eyes, perceived credibility, benchmarking against standards |
| Risks | Familiarity bias, soft findings if culture is weak | Snapshot timing, less operational detail if scope is thin |
| Competence needed | Audit skill + H&S system understanding | Same; plus standard-specific knowledge for formal schemes |
Competence includes understanding the audit criteria (legal duties, company procedures, ISO clauses if used), interviewing skills, sampling logic, and fair reporting. A technically brilliant engineer who cannot sample records systematically may still produce a weak audit.
How an audit typically runs (manager’s view)
- Scope and criteria — which sites, topics, standards, period?
- Plan — timetable, interviewees, documents requested.
- Opening — purpose, confidentiality, no-blame learning tone where appropriate.
- Evidence gathering — sample records, interview, observe.
- Evaluate — conformity, non-conformity, opportunities for improvement.
- Report — clear findings linked to evidence and criteria.
- Corrective action — owners, dates, verification.
- Follow-up — check actions closed and effective, not just “done on paper.”
Sampling — you cannot check everything
Audits almost always sample. Sampling is not laziness; it is how limited time still produces a credible picture.
| Sampling idea | Practical example |
|---|---|
| Risk-based | More samples on high-risk work (confined space, hot work, work at height) |
| Random within population | Every 10th PTW from last month |
| Stratified | Day shift and night shift; permanent and contractor |
| Trace-through | Follow one incident from report → investigation → actions → verification |
If sampling finds repeated gaps, expand the sample or raise a systemic non-conformity rather than treating each miss as a one-off.
Non-conformities and corrective action tracking
A non-conformity (NC) is a failure to meet a requirement of the audit criteria (legal duty, procedure, standard, or stated arrangement).
| Finding type (common language) | Meaning |
|---|---|
| Major NC (where grading used) | Serious system failure or legal breach risk; widespread or critical |
| Minor NC | Isolated or less severe departure |
| Observation / OFI | Opportunity for improvement; not always a formal NC |
Corrective action should address underlying and root causes (link back to Investigating Incidents thinking), not only rewrite a sentence in a procedure.
Tracking essentials
| Field | Why it matters |
|---|---|
| Clear statement of finding | So the owner knows what failed |
| Evidence reference | Defensibility and learning |
| Root/underlying cause consideration | Stops pure cosmetic fixes |
| Action owner | Accountability |
| Due date | Time-bound closure |
| Verification method | Proves effectiveness, not just completion |
| Status (open/closed) | Feeds active KPIs (audit actions closed on time) |
Unclosed audit actions are themselves a leading performance failure: the organisation found a problem and then ignored it.
Exam focus: system effectiveness, not only “spot the hazard”
| Activity emphasis | Typical question cue |
|---|---|
| Audit | “Is the system implemented?”, policy, training records, interview + observation, non-conformity against procedure |
| Inspection (next section) | Workplace conditions, housekeeping, guards, routes, more frequent operational checks |
If an option says the auditor’s job is only to walk around listing trailing cables, prefer the answer that includes checking arrangements against criteria with evidence. Spotting a trailing cable may be useful observation evidence, but the audit question is often: Why did the inspection and housekeeping system allow this? Is monitoring effective?
Worked micro-scenario
Scope: Audit of isolation/LOTO for maintenance.
Documents: Procedure exists; last review two years ago; 12 permits sampled — 3 missing isolation verification signatures.
Interviews: Two maintainers describe “we usually isolate” but cannot find the current procedure on the intranet.
Observation: One job starts with padlocks applied correctly; another shows a spare key culture on a shift.
NCs: Procedure control failure; incomplete permits; weak supervision of key control.
Actions: Reissue controlled procedure, retrain, supervisor checks for 30 days, remove spare-key practice, re-audit sample in 8 weeks.
That is system auditing — not merely “I saw a hazard.”
Manager’s role when audited (and when commissioning audits)
- Provide honest access to people and records.
- Do not coach interviewees to hide problems.
- Treat findings as free consulting on system health.
- Resource corrective actions; do not argue only about grading.
- Use audit results in management review (Act stage).
- Commission internal audits on significant risks, not only on easy topics that always score green.
Manager checklist
- Do we have a planned audit programme covering key system elements?
- Are auditors competent and sufficiently independent?
- Do reports triangulate documents, interviews, and observation?
- Are NCs tracked to verified closure?
- Do we understand audit as system effectiveness — not a duplicate of daily hazard spotting?
Master the definition, the three evidence types, independence/competence, sampling, and NC tracking, and you will answer Managing Safely audit questions with the language examiners expect.
Which statement best defines a safety management system audit in Managing Safely terms?
Which combination best represents the three main evidence types used in an audit?
Why is independence important for auditors?
An exam question contrasts audit with simply listing workplace hazards. What is the best emphasis for audit?