The Definition of Audit (EHS Audit)

Definition of Audit (EHS Audit)

An EHS audit is a systematic, documented and objective evaluation of how well a site or organization meets environmental, health and safety requirements. It compares actual conditions, records and practices against defined criteria, such as OSHA and EPA regulations, permit conditions, consensus standards like ISO 45001 and ISO 14001, and internal policies, and reports findings so they can be corrected. Unlike a routine workplace inspection, which checks physical conditions, an audit also tests whether programs, training, documentation and management systems are working as intended.

Key Facts About EHS Audits

• Common types: regulatory compliance audits, management system audits, contractor and supplier audits, and pre-acquisition due diligence audits.
• Audit parties: first-party audits are internal, second-party audits are done by a customer or client, and third-party audits are done by an independent body, such as a certification registrar.
• ISO 45001 clause 9.2 requires organizations to conduct internal audits of their OH&S management system at planned intervals.
• EPA's Audit Policy can reduce penalties for violations an organization discovers through audits, promptly discloses and corrects, when conditions are met.
• Findings are ranked by risk and tracked to closure through a corrective action plan.

Example of an EHS Audit

A corporate EHS team audits a distribution center against OSHA requirements and company standards. Auditors review training records, written programs and the OSHA 300 Log, walk the site, and interview forklift operators and supervisors. They find that two operators' evaluations are overdue and that the hazard communication inventory is outdated, and both findings are assigned owners and due dates.

How to Conduct an EHS Audit

1. Define the scope, criteria and audit team, keeping auditors independent of the area audited.
2. Review documents, permits, records and prior findings before the site visit.
3. Walk the site, observe work and interview workers at all levels.
4. Verify a sample of records against what you observed.
5. Rank findings by risk and report them clearly with evidence.
6. Assign corrective actions, then verify they are completed and effective.

See SafetyIQ's EHS audit checklist and audits and inspections software.

Related Terms

• Inspection (Workplace Inspection)
• ANSI Z10 (OHS Management Systems)
• Non-Compliance
• Leading Indicator

Frequently Asked Questions: EHS Audit

What is the difference between an audit and an inspection?

An inspection looks for hazards and unsafe conditions in a work area at a point in time. An audit is broader, checking whether the systems that should prevent those hazards, such as training, procedures, records and management review, are in place and effective.

How often should EHS audits be done?

Many organizations audit each site at least annually and use a risk-based schedule, auditing high-hazard sites or sites with poor results more often. Management system standards require audits at planned intervals.

Who should perform an EHS audit?

Auditors should be competent in the requirements being audited and independent of the work they are evaluating. Organizations often combine internal auditors from other sites with periodic third-party audits.