1.6 Safety Audits, Inspections, & Corrective Action Tracking

Verifying System Performance

In any Safety Management System, the 'Check' and 'Act' phases of the PDCA cycle are where the organization learns and improves. For the Safety Management Professional (SMP), this involves a structured program of inspections and audits, followed by a rigorous Corrective and Preventive Action (CAPA) process. Relying solely on lagging indicators like injury rates is akin to driving while looking in the rearview mirror; audits and inspections provide the forward-looking visibility needed to steer the organization away from disaster.

Inspections vs. Audits

While often used interchangeably, inspections and audits serve different, complementary purposes.

Safety Inspections:

• Focus: Identifying immediate physical hazards, unsafe conditions, and unsafe behaviors in the workplace (e.g., a blocked fire exit, a frayed electrical cord, a worker not wearing safety glasses).
• Frequency: High frequency (daily, weekly, monthly).
• Conducted By: Frontline supervisors, safety committee members, or workers.
• Scope: Narrow, focusing on specific locations, equipment, or tasks.

Safety Audits:

• Focus: Evaluating the design and implementation of the safety management system itself. An audit asks: "Are our procedures effective? Are we complying with regulations and our own policies? Is our training working?"
• Frequency: Lower frequency (annually, bi-annually).
• Scope: Broad, looking at systemic issues across the organization.

Audits are further broken down into three categories based on who performs them:

• First-Party Audits: Internal audits conducted by the organization's own employees (e.g., a corporate safety manager auditing a specific facility). This promotes internal learning but carries the risk of inherent bias.
• Second-Party Audits: Audits conducted on a supplier or contractor by the primary organization to verify compliance with contractual safety requirements.
• Third-Party Audits: Audits conducted by an independent, external organization (like an ISO 45001 registrar). This provides the highest level of objectivity.

The Audit Process

A comprehensive safety audit involves triangulation of data to get a true picture of organizational performance. The process usually begins with an opening meeting to align expectations and ends with a closing meeting to discuss preliminary findings.

During the execution phase, the auditor gathers evidence through three primary methods:

1. Document Review: Checking written policies, risk assessments, training records, and past incident reports to see what the organization says it does.
2. Personnel Interviews: Speaking with employees at all levels (from the plant manager to the newest operator) to gauge their understanding of safety rules and the actual safety culture.
3. Field Observations: Walking the site to verify that the physical reality matches the documented procedures and interview statements.

By comparing these three data streams, an auditor can identify systemic gaps. For example, if the manual says daily forklift inspections are required, and the operator says they do them, but the inspection logs are completely blank, a systemic failure exists.

Corrective and Preventive Action (CAPA)

Finding problems is only half the battle; fixing them permanently is the goal. When an audit, inspection, or incident investigation identifies a nonconformance, it enters the CAPA system.

• Corrective Action: Action taken to eliminate the root cause of an existing nonconformity or incident to prevent recurrence.
• Preventive Action: Action taken to eliminate the root cause of a potential nonconformity or incident before it occurs.

Root Cause Analysis (RCA) Integration

To ensure CAPAs are effective, they must be based on a thorough Root Cause Analysis. If an inspection finds a puddle of oil on the floor, the immediate correction is to wipe it up. However, the true corrective action requires asking 'Why?' (e.g., using the 5 Whys technique or an Ishikawa diagram).

Perhaps the oil leaked because a seal failed. Why did the seal fail? Because maintenance was deferred. Why was maintenance deferred? Because the purchasing department delayed the parts order. The systemic CAPA must address the purchasing delay, not just the puddle.

Applying the Hierarchy of Controls to CAPA

When developing action plans, the SMP must ensure that solutions prioritize higher-level controls.

• Elimination/Substitution: Can we design the hazard out completely?
• Engineering Controls: Can we isolate people from the hazard (e.g., install a physical guard over the leaking machine)?
• Administrative Controls/PPE: Relying on new procedures, retraining, or warning signs should be the last resort for a CAPA, as these are highly dependent on human behavior and prone to failure.

Creating SMART CAPAs and Tracking Closure

A robust CAPA tracking system is essential. Action items should follow the SMART criteria: Specific, Measurable, Achievable, Relevant, and Time-bound. Vague action items like "improve safety culture" cannot be effectively tracked or closed.

The system must assign a specific owner and a firm deadline for every action item. Furthermore, dealing with recurring findings is critical. If the same issue appears in multiple audits, the previous CAPAs were ineffective, and a deeper RCA is required.

The SMP should monitor leading metrics related to CAPA, such as the number of open items, the average time to closure, and the percentage of overdue items. An organization with a high number of overdue, aging CAPAs is demonstrating a lack of management commitment to safety, leaving systemic risks unaddressed.