9.3 Developing the Audit Plan, Checklists & Sampling Plan

9.3 Developing the Audit Plan, Checklists & Sampling Plan

Lead Auditor Core Concept: An audit plan is not an administrative timetable; it is a tactical operational risk management document. Under ISO 19011:2018 Clause 6.3, the Audit Team Leader translates organizational context, Stage 1 findings, and operational hazard profiles into an actionable audit plan. Preparing working documents—specifically audit checklists and sampling strategies—requires balancing systematic standard coverage against operational agility. An auditor bound blindly to a checklist suffers from tunnel vision, whereas an auditor without a plan wanders aimlessly.

---

1. Preparing the Risk-Based Audit Plan (ISO 19011 Clause 6.3.2)

The Audit Team Leader is responsible for developing the audit plan. Under ISO 19011 Clause 6.3.2.1, the planning process must adopt a risk-based approach, scaling audit depth and resource allocation to the inherent risks, organizational complexity, and technological hazards of the auditee's operations.

Mandatory Components of the Audit Plan (Clause 6.3.2.2)

A comprehensive ISO 45001 audit plan must formally articulate:

1. Audit Objectives: The purpose of the evaluation (e.g., determining conformity with ISO 45001:2018, evaluating legal compliance, and assessing operational effectiveness for initial certification);
2. Audit Scope: The organizational boundaries, physical facilities, remote project sites, subsidiaries, and processes subject to evaluation;
3. Audit Criteria: The reference standards, statutory regulations, corporate policies, and client operational procedures used as benchmarks for conformity;
4. Locations, Dates & Durations: Precise timetables specifying physical sites, departments, remote video links, and expected durations of audit sessions;
5. Audit Methods: Specific verification methods deployed, including face-to-face interviews, physical observation, live permit-to-work testing, document sampling, and remote data audits;
6. Team Roles & Resource Allocations: Assignments designating which auditor or technical expert evaluates each department, process, or clause;
7. Logistical and Safety Arrangements: Meeting room locations, site safety inductions, PPE mandates (e.g., hard hats, steel-toe boots, flame-retardant coveralls, personal H2S monitors), security badges, and escort guide assignments.

---

2. Communicating and Finalizing the Audit Plan (Clause 6.3.2.3)

The audit plan must be submitted to the auditee well in advance of the on-site audit (typically 1 to 2 weeks prior). This allows auditee management to arrange worker availability, notify safety representatives, schedule shift escorts, and verify logistical arrangements.

Handling Auditee Objections & Operational Conflicts

If the auditee objects to any component of the audit plan—such as scheduling conflicts, shut-down windows, confidential trade secret areas, or specific auditor assignments—the issue must be resolved between the Audit Team Leader, the audit program manager, and the auditee before audit activities commence.

• Operational Rescheduling: If an audit time slot coincides with an unexpected plant emergency or critical vessel maintenance, the Lead Auditor flexibly rearranges department times while preserving overall scope;
• Auditor Competence or Bias Objections: If the auditee provides reasonable grounds demonstrating auditor bias or commercial conflict, the Lead Auditor and certification body must adjust team assignments;
• The Principle of Audit Flexibility: The audit plan is an operational guide, not a rigid statute. If unexpected audit trails emerge during on-site execution (e.g., finding unrecorded chemical spills), the Lead Auditor has the authority to revise the plan dynamically, reallocate resources, and pursue evidence wherever safety risks dictate.

---

3. Preparing Working Documents: Audit Checklists (Clause 6.3.4)

Audit team members prepare working documents to guide evidence collection, record interview notes, and log audit findings. The primary working document is the Audit Checklist.

Advantages vs. Pitfalls of Audit Checklists

┌─────────────────────────────────────────────────────────────────────────────┐
│                     AUDIT CHECKLIST STRATEGIC BALANCE                       │
├──────────────────────────────────────────┬──────────────────────────────────┤
│ Operational Advantages (The Shield)      │ Inherent Pitfalls (The Trap)     │
├──────────────────────────────────────────┼──────────────────────────────────┤
│ • Ensures systematic, comprehensive      │ • "Checklist Myopia": Auditor    │
│   coverage of all standard clauses.      │   develops tunnel vision.        │
│ • Serves as an effective time-management │ • Mechanical box-ticking rather  │
│   and pacing framework.                  │   than deep process inquiry.     │
│ • Provides structured space for noting   │ • Blindness to unexpected live   │
│   sample IDs, records, and worker names. │   hazards outside the checklist. │
│ • Reduces auditor stress and maintains   │ • Auditee treats checklist as a  │
│   team consistency across sites.         │   test to "pass" or script.      │
└──────────────────────────────────────────┴──────────────────────────────────┘

Overcoming "Checklist Myopia"

Checklist myopia occurs when an auditor stares exclusively at written questions and fails to look up at surrounding shop-floor realities. For example, an auditor reading a checklist question regarding emergency lighting fails to notice workers bypassing machine guards ten feet away.

Golden Rule for Lead Auditors: The checklist is an aide-mémoire (memory aid), not a master. Qualified Lead Auditors use checklists to ensure all criteria are touched, but immediately deviate from the checklist whenever an unscripted hazard or inconsistent audit trail emerges.

---

4. Designing Sampling Strategies for OH&S Evidence (ISO 19011 Annex A.6)

Because an audit takes place over a limited duration with finite resources, evaluating 100% of an organization's activities, records, and workers is impossible. Auditing inherently relies on sampling. Under ISO 19011 Annex A.6, sampling introduces sampling risk—the risk that the auditor's sample is not representative of the whole, leading to an incorrect audit conclusion.

The Two Core Sampling Methodologies in ISO 19011:

---

5. Critical OH&S Sampling Dimensions

In occupational health and safety auditing, sampling must transcend daytime corporate records. A robust OH&S sampling strategy must cover three critical operational dimensions:

1. Shift and Schedule Sampling

Occupational health and safety controls frequently deteriorate during off-shifts. When evaluating 24/7 continuous operations, the sampling plan must incorporate evening, night, and weekend shifts. In these off-hours, supervisory presence is reduced, maintenance crews perform high-risk overhauls, emergency services response times are longer, and fatigue levels peak.

2. Multi-Employer and Contractor Sampling

Contractors and temporary agency personnel frequently experience higher injury rates than permanent staff. The sampling plan must deliberately include:

• Embedded long-term facilities maintenance contractors;
• Turnaround and shut-down specialized mechanical contractors;
• Short-term temporary agency labor and newly onboarded apprentices.

3. High-Hazard Operational Sampling

Auditors must prioritize judgmental sampling for operations governed by the Hierarchy of Controls (Clause 8.1.2) and high-risk Permit-to-Work (PTW) protocols: working at height, confined spaces, hot work, energetic machinery isolation (Lockout/Tagout - LOTO), and hazardous chemical offloading.

---

6. Real-World Audit Scenario: The Myopic Checklist and The Forgotten Third Shift

Audit Context: During a Stage 2 certification audit of a steel tube manufacturing mill, the Lead Auditor assigns auditor Karen to evaluate machine guarding and operational controls under Clause 8.1. The plant operates on a 24/7 three-shift schedule.

Investigation & Unfolding Failures:

1. Checklist Rigidity: Karen relies on a rigid generic 50-item checklist. While walking through the tube extrusion bay, she checks off written items regarding fire extinguisher tags and floor striping. She does not notice that workers are actively climbing over moving roller conveyor guards while holding pneumatic grinding tools.
2. Daytime Sampling Bias: Karen restricts all interviews and permit samples to the first shift (8:00 AM – 4:00 PM), sampling ten hot-work permits from daytime maintenance records. All ten permits are fully signed and compliant.
3. Lead Auditor Intervention: During the evening team debrief, the Lead Auditor notes that no third-shift (11:00 PM – 7:00 AM) records were sampled. The Lead Auditor adjusts the audit plan, scheduling an unannounced site visit at 1:30 AM.
4. The Reality Uncovered: The night visit reveals that night operators routinely bypass the interlock light curtains on the automated cutting saw using magnetic bypass keys to speed up production. Furthermore, three night-shift maintenance technicians state they have never seen a hot-work permit signed on night shift.

Lead Auditor Determination: The Lead Auditor issues a Major Nonconformity under Clause 8.1.1 (Operational Planning & Control) and Clause 8.1.2 (Hierarchy of Controls). The organization failed to maintain operational process criteria across all operational schedules. This scenario illustrates how checklist myopia and daytime sampling bias create dangerous audit blind spots that only flexible, risk-based sampling can uncover.

---

7. Common Exam Traps and Candidate Errors

• Trap 1: Believing the Audit Plan Is Legally Inflexible. Candidates often assume that once an audit plan is distributed, no schedule modification can occur. An audit plan is an operational guide; the Lead Auditor must dynamically adjust the plan to pursue emerging safety trails or accommodate plant operational emergencies.
• Trap 2: Handing the Checklist to the Auditee as a Questionnaire. A checklist is an internal working document for the auditor. Handing the checklist to the auditee to fill out transforms an independent evaluation into a self-assessment and constitutes an egregious audit methodology failure.
• Trap 3: Relying Exclusively on Statistical Sampling for High-Hazard Permitted Work. Statistical sampling works well for large volumes of routine records (like checking 50 out of 500 calibration stickers). For high-hazard operations like confined space entries, auditors must use judgmental (risk-based) sampling, deliberately selecting the highest-risk, most complex entries.
• Trap 4: Neglecting Shift Handover Sampling. Auditing only during daytime business hours violates the core principle of representative OH&S auditing. ISO 45001 auditors must sample night shifts, weekend skeleton crews, and shift handover briefings where safety communications frequently break down.