How to Survive a Health and Safety Audit (Without Losing Your Mind)

The words "health and safety audit" tend to produce one of two reactions: mild panic or total indifference. Neither is ideal. The panic leads to a frantic two-week scramble to get everything in order. The indifference leads to a very uncomfortable meeting when the auditor starts asking questions nobody can answer.

The good news is that surviving a health and safety audit is entirely achievable, and with the right preparation, it can actually be useful.

What Auditors Are Looking For

Health and safety audits — whether from a client, an accreditation body, your insurance company, or an internal review — follow a broadly similar pattern. The auditor wants to answer one fundamental question: does your health and safety management system work in practice, or does it just exist on paper?

They'll typically examine your health and safety policy (is it current, signed, relevant?), risk assessments (are they specific, current, and do they reflect actual activities?), training records (who's been trained on what, when, and is it up to date?), incident records (are incidents reported, investigated and actioned?), maintenance records (is safety-critical equipment being maintained?), inspection records (are workplace inspections happening?), management review evidence (does senior management actively review safety performance?), and consultation arrangements (are employees involved in health and safety?).

The common thread is evidence. Auditors don't just want to hear that you do these things — they want to see documented proof.

The Preparation Checklist

Start your audit preparation at least four weeks before the audit date. Begin by reviewing your health and safety documentation against the audit scope. Make sure policies are dated and signed by current senior management, risk assessments reflect current activities and have been reviewed within the last 12 months, training records are complete and up to date, incident records show investigation and follow-up actions, maintenance logs and inspection records are current, and any previous audit findings have been addressed.

Next, walk around your workplace with fresh eyes. Are fire exits clear? Are fire extinguishers serviced and accessible? Are safety signs in place? Is housekeeping acceptable? Are guards on machinery in place and functioning? Are first aid kits stocked? The auditor will conduct a site walk — make sure what they see matches what your documents say.

Finally, brief your team. Auditors often speak to employees and supervisors. Staff should know where to find emergency procedures, who their first aider and fire warden are, what the reporting procedure for incidents is, and what risk assessments apply to their work. They don't need to recite legislation — they need to demonstrate practical awareness.

During the Audit

Be honest. If you don't have something, say so. Trying to bluff your way through an audit is almost always detected and damages credibility. An honest admission of a gap, accompanied by a plan to address it, is far better received than an attempt to pretend the gap doesn't exist.

Be organised. Have documents ready and accessible. Nothing undermines confidence faster than spending twenty minutes searching for a risk assessment while the auditor waits. A well-organised filing system — whether physical or digital — makes a strong impression before the auditor reads a single document.

Be proactive. If you know there are issues, raise them yourself. "We're aware of this gap and here's our plan to address it" is significantly better than having the auditor discover it and ask why nothing's been done.

After the Audit

The audit report will typically include findings, observations and recommendations. Findings are things that need fixing — either non-conformances against the standard being audited or legal compliance gaps. Observations are areas for improvement that aren't necessarily failures. Recommendations are suggestions for enhancement.

Create an action plan with clear ownership, deadlines and tracking. Address findings first, then observations. Don't file the report and forget about it — the next audit will check whether you've acted on the previous findings, and "no progress since last audit" is one of the worst things an auditor can write.

Turning Audits Into Advantage

The smartest organisations treat audits as a free consultancy session. An experienced auditor will identify things you've missed, highlight best practices they've seen elsewhere, and provide a structured view of where your safety management stands.

Rather than dreading audits, use them as a regular health check for your safety management system. The businesses that perform best in audits aren't the ones with perfect systems — they're the ones that take safety management seriously, address issues promptly, and use the audit process as a tool for genuine improvement.

Need to strengthen your safety management system? Get an SMS Consultation →

York Green Safety Partners helps businesses build audit-ready safety management systems. Based in Cheshire, covering the whole of the UK.