Environmental auditing has an unusually clean structure, because most of what it tests is either permitted or it is not, monitored or it is not, and evidenced by a piece of paper with a date on it. That makes it one of the easier audits to prepare for and one of the harder ones to bluff. The auditor works from the site outward: what comes in, what is stored, what is emitted to air, water and land, what leaves as waste and who took it. At each point there is a permit or an exemption, a control, a monitoring record and a legal requirement, and a gap in any of the four is a finding.
The legal register is the spine of the audit
Every environmental management system rests on a register of the legal and other requirements that apply to the site, and almost every serious finding traces back to it. The tests are whether it is complete for the activities actually carried out, whether it is current, and whether each entry connects to something the site does in response. A register listing regulations with no link to a control, a monitoring point or a record is a list, not a register, and an auditor will find that out by picking one entry and asking how the site complies with it.
Waste, and the paperwork that follows it off site
Waste is where documentation failures concentrate, because the records are generated by other people. The chain to test is classification, storage, the carrier's authorisation, the transfer or manifest documentation, and the destination's authorisation to receive it. Sample transfers from the whole period rather than the recent ones, check that the description on the paperwork matches what is actually in the skip, and check the retention. The classic finding is not illegal disposal, it is a duty-of-care chain where one link cannot be evidenced years later.
Monitoring, calibration and the readings nobody looked at
Where a permit or a procedure requires monitoring, the audit tests four things: that it happened at the required frequency, that the instrument was calibrated, that the result was compared against a limit, and that somebody acted when it was out. The fourth is the one that fails. Sites collect readings diligently and file them without review, so an exceedance can sit in a folder for a year. An auditor will look for the record of the review, not the readings, because the readings alone prove only that a meter was read.
Emergency preparedness, tested rather than described
Spill response, containment, drainage plans and incident procedures are the part of environmental auditing most often documented and least often exercised. The evidence chain is a plan, the equipment the plan relies on, the training of the people who would use it, a test or drill with a date and an outcome, and the changes made afterwards. Asking to see the drainage plan and then asking someone on shift where the nearest spill kit is takes two minutes and tests the whole chain at once.
Questions people ask about environmental audit
What is the difference between an environmental audit and a compliance inspection?
An inspection is usually a regulator checking conditions and permits on the day. An audit is a systematic examination of the management system, including whether the site would notice a problem itself. An audit can be voluntary; an inspection is not.
Does an environmental audit cover carbon and energy reporting?
It does if those requirements are in your legal register or your certificate scope. Reporting obligations vary by jurisdiction and size, so the register decides. Auditing them without a register entry means auditing against a criterion nobody agreed.
How far back should waste records be sampled?
Across the whole retention period rather than the recent months, because the risk is that older records were never obtained or have been lost. Sampling only the recent period tests your current filing, not your duty of care.
Who can carry out an environmental audit?
Internally, anyone competent and independent of the area audited. For certification, an accredited body. For anything with legal exposure, take advice on how the audit is scoped and reported before it starts rather than afterwards.