Safety Matters: What Are Safety Audits?

May 15, 2009
What Are Safety Audits? And why are they important?

By Paul A. Esposito

Safety audits (assessments) can rate an organization’s total safety and health program, identify its strengths and weaknesses, show where improvements are needed and create a process and procedure by which problems can be corrected. In addition to assessing safety violations and work conditions, some audits assess senior management’s philosophy and attitude toward safety.
The three types of safety audits that evaluate these practices are referred to as compliance, programs, and management system audits.

Compliance audit
The most basic audit is a compliance or condition inspection. OSHA does not specifically require that companies conduct safety and health audits but OSHA regulations are written such that employers must furnish their employees with a place of employment free from recognized hazards and comply with certain standards. Management then develops programs to comply with certain standards, rules, and regulations. In addition, compliance requirements dictate certain record-keeping, programs, and training requirements. A true compliance audit will look at all three factors — conformance, record-keeping, and training.

A safety audit based on OSHA compliance will determine whether the company can provide a safe and healthful workplace. But this audit on its own tends to focus more on unsafe conditions rather than unsafe acts and behaviors. However, the majority of accidents occur from unsafe acts, i.e., you can have a wet floor (unsafe condition), but an injury may not occur until someone walks on the wet floor and slips (unsafe act). It is impossible to have a workplace free from unsafe conditions all of the time, because conditions and people change and the potential that someone will create unsafe conditions is always present.

Program audit
To achieve a goal of reducing accidents and incidents as well as unsafe acts and conditions which result in accidents, you must have programs in place that dictate how to implement safety rules or requirements. An example of a regulatory requirement is to record accidents on an OSHA 300 log and to do so within six days. A program requirement would describe the method one would use to investigate the accident.  OSHA, while providing suggestions for investigating an accident, does not regulate how to investigate. So it is up to the company to define and write down the procedure for investigating the accident in order to implement the safety rule or requirement and to make it meaningful. Having done so, the company now has a safety program in place for the procedure.

A program audit is an analysis that gauges the implementation and strategy of these safety programs. Is the company following its own procedures and programs?

One drawback to a program audit is determining what to use as a standard. There is plenty of guidance but not much consistency in professional practice when it comes to what should be included. There are some fundamentals, however. For one, it is essential that all procedures are written down. This documents the communication of the hazard as well as the procedures for minimizing exposure and allows the procedure to be checked, measured, and or audited. If unsafe acts create unsafe conditions, you need a program to communicate how to stop doing those things.

One challenge is that keeping safety programs current requires being able to manage change. New facilities, equipment, and personnel (i.e., change in shift hours if it means an increase in workers’ exposure time) require changes in safety programs.

Both the compliance and program audits are useful snapshots to indicate potential exposures and risks. The value of these audits is to find the safety gaps so they can be closed. Another value is to verify if people are really following established safety guidelines. But an audit that is conducted only once a year is limited if there is no ongoing process by which to measure how often and how well employees are using and following safety programs.

Management systems audit
The final step in a comprehensive safety audit is to evaluate and validate the effectiveness of, and management’s commitment to, safety compliance and programs, employee involvement, and risk control procedures. The management systems audit examines accountability, effectiveness of this implementation, and how well the company’s health and safety program is integrated into the overall culture. It integrates all three audit techniques, document review, interviews, and workplace observation, to make these determinations. Finally, to make safety programs sustainable, they must be integrated into the company’s existing business practices.

The basics of a safety audit
First, determine your safety requirements and expectations, be they regulatory, program, organizational, or cultural. This information can be obtained from industry publications, OSHA, other businesses benchmarks, industry associations, professional conferences, or by hiring a consultant.  

The process by which the audit is conducted is best written down so it can be duplicated. Create a checklist — if the methodology is different each time, how will you know if your safety standards and practices are improving?

There are many different ways to measure audit outcomes. Some type of scoring process is typically developed to compare status and evaluate progress. Remember, auditing is not a one-time process. Each type of audit should be conducted at least annually but it helps to know what’s going on between the audits.

Given that there are more than 100 different OSHA regulations, different items within those regulations, and 20 to 30 programs to implement the regulations, it takes time to conduct an audit. An audit will probably take a minimum of two to three days if a company employs less than 100 people, longer if it’s the first audit. And if it is the first audit and the company is starting from scratch, it will probably take longer to develop the methodology for conducting the audit than to conduct the actual audit.

Why conduct a safety audit?
It can take a significant investment to make an assessment of your safety programs and the payoff or return on investment is determined by management’s commitment to address the findings. If you do not establish a method to analyze trend data, track recommendations, and follow-through, then a safety audit will not be as good a return on investment. Companies who buy in wanting to know where there are gaps and weaknesses will find audits a valuable exercise worth the investment.

The type of audit you choose may depend on your corporate culture and what the company is most worried about. If it is liability, do a compliance audit. If the company is more worried about implementation gaps, do a program assessment. If the company wants to know about effectiveness gaps, a management systems audit is in order.

There are pros and cons to all three types. A compliance audit alone may uncover a potential liability or OSHA citation but it won’t necessarily help you learn how to avoid the problem in the future. A management systems audit identifies these gaps as symptoms of deeper seated organizational or cultural shortcomings rather than listing the specific findings. It may not inventory all of your risks as a program or compliance audit will, but rather it gives you a better picture of how to prevent them.

For this reason, many companies do all three types in various stages and mixes. There are as many different implementation strategies as there are companies.

Once this strategy has been determined and a company is able to progress from one type to the other, the more basic audits, compliance, and then program audits, require less effort and eventually a company can wean down the compliance and program audits until they are far less intensive. But, when all is said and done, an organization should never stop assessing its total safety and health efforts. 

Paul A. Esposito, CIH, CSP, CPEA, is vice president at ESIS Global Risk Control Services, ACE INA Insurance Co.

Anticipating health and safety issues and taking action to prevent them is a long-term and profitable investment for companies. For more information on industrial hygiene and methods for promoting health and safety in the workplace, as well as a listing of industrial hygiene consultants, please visit the American Industrial Hygiene Association website at www.aiha.org.