What is a Safety Audit? A Practical Guide to the Process

A workplace safety audit is a structured review of an organization's safety program against defined requirements. That safety audit definition has two parts. The first is the requirements that come from safety regulations, contracts, and company policies. The second is the review that tests whether the safety program written on paper matches how work happens by comparing policies and records with what auditors observe in the workplace and what workers report.

Why are Safety Audits Important?

Safety audits are important because a written safety program is only a promise until someone checks whether the workplace keeps it. A safety audit is that check. It tests the program against evidence, so your team finds the gaps while there's still time to fix them.

U.S. figures show the scale of workplace injuries and the hazards OSHA cites most often:

• Private industry employers reported 2.5 million nonfatal workplace injuries and illnesses in 2024, according to the U.S. Bureau of Labor Statistics (BLS).
• BLS recorded 5,070 fatal work injuries in 2024, which works out to one worker death every 104 minutes.
• Fall protection, hazard communication, ladders, and lockout/tagout lead OSHA's most frequently cited standards for fiscal year 2025. OSHA publishes the list so employers can find and fix those hazards before an inspection.

A workplace safety audit also leaves a record. Findings, owners, due dates, and verification give an environment, health, and safety (EHS) lead something to show a regulator, an insurer, or a customer who asks how the program is managed.

What do Safety Auditors Examine?

Safety auditors evaluate evidence across three areas:

• Paperwork: Written safety policies, training logs, maintenance records, incident reports, and previous inspection results show what should happen.
• Workplace observations: Watching work in progress and checking physical conditions shows what is happening, including how safety procedures and controls are applied in daily practice.
• Worker accounts: Conversations with operators, technicians, and supervisors show what people experience, including whether they know the procedures, understand their responsibilities, and follow the required steps during everyday work.

Safety auditors compare multiple evidence sources because records alone can't show whether procedures are followed in practice. Complete training records, for example, show that training was documented, but they don't prove on their own that workers follow the procedure during the work. Observations and worker accounts help auditors test whether the documented process is actually being carried out.

Health and Safety Audits

A health and safety audit is the same kind of review under a different name. UK guidance uses the phrase health and safety. The Health and Safety Executive (HSE) says larger organizations should have formal procedures for auditing and reporting health and safety performance. OSHA's guidance uses the reverse order, as in its Recommended Practices for Safety and Health Programs.

Health hazards belong in an audit's scope alongside injury risks. OSHA's list of health hazards includes chemicals, noise, heat, infectious diseases, and repetitive motions.

Safety Audit vs. Safety Inspection

A safety audit evaluates a safety program or a defined part of it against established requirements, while a safety inspection examines workplace conditions or activities at a particular point in time. Inspection findings and records can be evidence in an audit. They let the team assess how the broader program is working.

The table compares the two by purpose, scope, evidence, and output.

Safety audits and safety inspections may use some of the same methods, but they answer different questions. Inspection results can become evidence in an audit, where the team can look across those findings to see whether the safety program is working as intended.

Types of Safety Audits

A practical way to sort the types of safety audit is by what the audit examines.

• Compliance-focused audits: These compare workplace practice with specific requirements, such as regulations, contracts, or company policies. A compliance-focused audit that uses OSHA standards as its criteria is often called an OSHA safety audit.
• Program-focused audits: These check whether one safety program or process is carried out as designed, such as a training program, a hazard-reporting process, or a lockout/tagout procedure, without reviewing the organization's entire safety system.
• Management-system reviews: These look at how the organization manages safety overall, including responsibilities, processes, measurement, and improvement.

Other audit names describe where the audit happens. A workplace safety audit, or site audit, applies these choices to one location. A construction site safety audit does the same for a job site. It draws on the frequent and regular site inspections that OSHA's construction standards require competent persons to carry out.

A food safety audit is a different discipline. It checks how a facility handles food against food safety standards. A food safety audit looks at whether food is safe for the people who eat it. A workplace safety audit looks at whether work is safe for the people who do it.

Safety audit categories describe what the audit examines, but who conducts it is a separate choice. An organization can run an internal review with its own team or bring in an external auditor.

How to Conduct a Safety Audit

To conduct a safety audit, define the scope and criteria, gather evidence, document findings, assign corrective actions, and verify that the actions worked. OSHA's program evaluation guidance similarly calls for evaluating how a safety program operates, correcting identified shortcomings, and monitoring the results of those changes.

Set the Scope and Audit Criteria

Safety audits need a clear scope and criteria before evidence collection begins, so the team knows what to examine (scope) and what standards to use (criteria) when evaluating the evidence.

A narrow scope can keep the audit manageable by focusing the team's time and evidence collection on the issue they need to evaluate. For example, a team investigating recurring issues with one safety process may not need to audit every part of the organization's safety program.

The audit team sets the audit criteria by identifying which regulations, company policies, written procedures, contracts, or other requirements apply to the work being audited. Those criteria give the team a consistent standard for deciding whether the evidence meets the applicable requirements.

Gather Evidence Against Each Requirement

For each audit requirement, the team gathers evidence that shows whether the workplace meets the relevant criteria. The evidence should relate directly to the work covered by the requirement and reflect what happened during the period being audited.

Auditors decide how much evidence to gather based on the scope of the audit and the issue they're investigating. A broader or more significant issue may require a larger sample or additional evidence before the team can support a clear finding.

An audit evidence worksheet helps your audit team document how the evidence supports each finding and what happens next. You can use the one below as a starting point, then adapt it to the requirements and audit process your organization uses.

Once the audit team documents a finding, a corrective action and follow-up worksheet can track who owns the response and how the team will verify that the corrective action addressed the original finding.

Using a tool like FastField, Quickbase's mobile field data collection platform, gives teams a consistent way to capture field information, including photo evidence. Teams can configure routing to send completed submissions to the right place for review.

Turn the Evidence Into a Finding

To turn audit evidence into a finding, compare what the audit requirement calls for and what the evidence shows. The finding should state whether the workplace meets that requirement and identify any gap the evidence supports. Auditors separate what they observed from conclusions about why it happened, since a repeated problem may suggest an underlying issue without proving its cause.

A clearly stated audit finding gives your team a specific basis for corrective action by showing where workplace practice falls short of the requirement.

Assign and Track Corrective Action

After your audit team documents its findings, corrective actions should address the specific gaps it identified. Assign someone to own the corrections and set a realistic due date, then track each correction alongside the audit finding until it's completed.

For recurring issues, fixing the immediate problem may only be the first step. When the audit identifies what's causing the problem to keep happening, the corrective action can address that cause instead of repeatedly fixing the same condition.

Verify Whether the Corrective Action Worked

Verify the results of your corrective actions to confirm they fixed the original problem.

How you verify the fix depends on the nature of the finding. If the issue involves floor procedures, observe the work again after the change. If it involves paperwork, review newer records to confirm the process now meets the standard.

Log the verification details and what the follow-up showed so the audit record is complete.

Safety Audit Example: Recurring Blocked Walkways

Consider a facility where routine inspections repeatedly log a blocked walkway. Workers clear the obstruction, and the inspection logs show the hazard was resolved, but the same pallet blocks the walkway again the following week.

An audit can investigate why the walkway keeps getting blocked. In this case, the team might review inspection reports and look more closely at how materials are stored during active shifts. Worker interviews and floor observations may reveal that designated storage bays fill up during peak hours, leaving material handlers nowhere else to stage incoming loads.

In this example, the evidence points to a capacity bottleneck, so the team logs the finding and assigns a targeted corrective action, such as reallocating floor space or adjusting material flow. After the corrective action has had a few weeks to work, the audit team returns during peak shift hours to check whether the walkways remain clear. The follow-up provides evidence that the adjustments addressed the cause of the recurring problem instead of just clearing another temporary obstruction.

How to Prepare for a Safety Audit

To prepare for a safety audit, use the two weeks before it to confirm the scope, close out old findings, sort your records, brief your team, and walk the site. The goal is to show the auditor how your safety program works on an ordinary day.

• Confirm the scope and criteria: Ask the auditor which sites, processes, and time period the audit covers, and which requirements it tests against. Everything else you prepare depends on that answer. If the scope is one program, such as lockout/tagout, you only need the records and people tied to that program.
• Close out previous findings: Pull the report from your last audit and check every corrective action. Finish the open ones, or record why they're still open and who owns them. For closed actions, keep the proof next to the finding, such as the updated procedure, the training record, or a photo of the fix.
• Get records in order: Gather training logs, inspection reports, maintenance records, and incident reports for the period the audit covers. Put them where the auditor can reach them without a search. Note any gaps now, such as a training log with missing dates, so they don't surprise you during the audit. Don't recreate or backdate a missing record.
• Brief the team: Tell supervisors and workers when the audit happens, what it covers, and that the auditor may ask how they do their jobs. Ask them to answer plainly and describe the work as they do it. Name one person the auditor can go to for records and access, so questions don't stall.
• Walk the site yourself: Walk the areas in scope during a normal shift with the audit criteria in hand. Compare what the procedure says with what you see. Fix what you can, such as a blocked walkway, and log what you can't with an owner and a date.

Don't stage the site for the audit. Findings are only useful if they describe the workplace your team works in every week.

Who Should Conduct a Safety Audit, and How Often?

A safety audit should be conducted by someone with relevant knowledge of the work and enough objectivity to evaluate it fairly. An internal auditor may be a good fit when the review depends heavily on knowledge of your operations, while an external auditor may make more sense when the audit requires specialized expertise or greater independence.

How often you conduct a safety audit depends on the risks in your workplace and any requirements your organization needs to follow. In the U.S., OSHA recommends evaluating safety and health programs when they're first established and at least once a year after that. OSHA also recommends another evaluation after a safety incident or a significant change in workplace conditions or operations.

These are program recommendations rather than a required schedule for every safety audit. Regulations, contracts, or certification requirements may set different requirements.

What a Safety Audit Checklist Covers

A safety audit checklist lists what the audit team needs to check, record, and follow up on, so no stage gets skipped. A useful one covers:

• Scope and criteria: What the audit covers and the requirements it tests against
• Records to sample: Which records to review and the period they cover
• Observations: The tasks and areas to watch, including shift changes and peak hours
• Worker input: Who to talk to and what to ask about how the work is done
• Findings: For each requirement, what the evidence shows and where the gap is
• Corrective actions: The owner, due date, and verification for each finding

Keep Safety Audit Evidence Usable With FastField

FastField can help teams keep the evidence collected during a safety audit connected to the findings and follow-up that come from it. That gives your audit team a record of what it found and what happened next.

FastField also supports evidence collection when teams work without a connection. Forms need to be loaded before going offline, and completed submissions sync after the device reconnects. The audit team still determines what evidence is sufficient and what conclusions it supports.

Explore FastField safety and compliance forms to see how your team can collect audit evidence and support a defined follow-up process.

FAQs

What is a safety audit?

A safety audit is a structured review of whether a safety program works as intended. Auditors check documents, training records, equipment, and the way work is done, then compare what they find with the requirements the program is meant to meet.

What is the difference between a safety audit and a safety inspection?

Use a safety inspection when you need to know whether conditions in a place meet requirements today. Use a safety audit when you need to know whether the program that keeps it safe is working. For a longer comparison, read our guide to safety audit vs. inspection.

How do you prepare for a safety audit?

To prepare for a safety audit, start with the corrective actions still open from your last audit. Then gather the records for the audit period, tell your team what the auditor may ask, and walk the site with the audit criteria in hand. Starting two weeks ahead leaves time to close what you find before the audit.

How often should safety audits happen?

How often safety audits happen depends on the level of risk, how much the work has changed, and any schedule set by a regulation, contract, or certification. Higher-risk work usually justifies more frequent audits than a low-risk office. Bring an audit forward after a serious incident or a major change in operations.

Who conducts a safety audit?

Your own safety team, a corporate EHS group, or an external auditor conducts a safety audit, depending on how much independence and specialist knowledge the scope needs. OSHA compliance officers conduct inspections, and the results of an OSHA inspection can become evidence in your next audit.

How much does a safety audit cost?

The cost of a safety audit depends on the scope, the number of sites, and whether your own team or an external auditor does the work. An internal audit mostly costs staff time. An external audit adds the auditor's fee, plus travel if the auditor visits several sites. Ask for a quote based on a written scope so you can compare quotes.

What are the three main types of safety audits?

A practical way to sort safety audits gives three main types: compliance-focused audits, program-focused audits, and management-system reviews. Choose a compliance-focused audit to test specific rules, a program-focused audit to test one process, and a management-system review to test how safety is run overall. Industry labels, such as construction site safety audit, fit inside these three.

Does OSHA require safety audits?

It depends on which OSHA standards apply to your work. OSHA requires an audit or a similar recurring check under some standards, and recommends a yearly program evaluation for employers generally. The process safety management standard requires the employers it covers to certify a compliance audit at least every three years. The lockout/tagout standard requires a periodic inspection of each energy control procedure at least once a year.