A safety audit is not an inspection. An inspection looks at the site on the day and lists what is unsafe; an audit looks at your safety management system and tests whether the arrangements you wrote down are the ones people actually follow. That difference decides everything about how you prepare. Walking the floor the week before and tidying it will not help you, because the auditor is going to ask for the training record of the person operating the machine, the risk assessment that machine sits under, and the evidence that the assessment was reviewed after the last near miss. This page sets out what a safety auditor samples, what the audited business gathers first, and where an outside firm earns its fee.
What the auditor actually samples
A safety audit works by tracing threads, not by reading your manual front to back. The auditor picks a hazard, finds the risk assessment that covers it, then follows it outward: who is exposed, what controls were chosen, whether those controls exist on the floor today, whether the people exposed were trained on them, and whether anyone checked. Three or four threads pulled properly tell an auditor more about a safety system than a hundred pages of policy. It is why a business with a thin manual and complete records passes, and a business with a beautiful manual and no training signatures does not.
The records that decide the result before anyone walks the floor
Risk assessments with a review date and a named assessor. Training records that tie a person to a task and a date. Maintenance and inspection records for anything with a statutory schedule, including lifting equipment, pressure systems and local exhaust ventilation. Incident and near-miss records with what was done afterwards. Contractor approvals and site inductions. Management review minutes showing safety was actually discussed and something changed. Almost every finding an auditor raises is a gap in one of these six, and every one of them is a filing problem you can fix before the audit rather than a hazard you have to engineer out.
How long the preparation really takes
The honest arithmetic is requirements in scope, multiplied by the evidence items each one needs, multiplied by the time it takes one person to find and file an item. For a site with a moderate scope that lands in the tens of hours, and it is spread across whoever owns each record rather than falling on one coordinator. The free audit preparation checklist on this site does that arithmetic from your own scope so you can see the hours before you commit to a date, and it splits them per evidence owner and per week, which is the number that tells you whether the date is realistic.
When a safety audit company is worth paying for, and when it is not
An outside firm buys you two things: independence, which some certification schemes and some customers require outright, and a second pair of eyes that has seen how other businesses solved the same problem. It does not buy you readiness. A firm arriving to a site with no training matrix will spend its day building your training matrix at consultancy rates and then charge you again to audit it. The sequence that saves money is to do your own internal audit first, close what you find, and bring the external auditor to a system that is already running. If you are being audited by a customer or a certification body rather than choosing an auditor, the same order applies.
Questions people ask about safety audit
What is the difference between a safety audit and a safety inspection?
An inspection judges conditions on the day. An audit judges the system that is supposed to keep those conditions right every day, by sampling records and tracing them to what is happening on the floor. A site can pass an inspection and fail an audit, and the reverse happens too.
How far back does a safety auditor look?
Usually one cycle, which for most schemes is the twelve months since the last audit, plus anything still open from before that. Corrective actions raised at the previous audit and never closed are the first thing checked and the most common repeat finding.
Do we need a safety audit company or can we audit ourselves?
Internal audits can be done by your own people as long as they do not audit their own work. Certification and most customer audits require an auditor independent of the area being audited, which for a small business usually means someone external.
What happens if the audit finds something serious?
You get a finding with a category and a deadline. A major nonconformity normally has to be closed with evidence before a certificate is issued or renewed; a minor one is closed at the next visit. Neither is a fine. An auditor is not a regulator and does not report you.