A lot of business owners picture a WHS audit as someone turning up unannounced with a clipboard, but a properly run audit is a structured process with distinct stages, and knowing what to expect makes it far less daunting.
Before the audit
A genuine audit starts before anyone sets foot on site. That means agreeing the scope, whether it's a full system audit or focused on a specific area like a particular hazard category or a single site, and gathering existing documentation in advance, policies, procedures, risk assessments, training records and incident history, so the auditor isn't starting from nothing on the day.
The audit criteria should also be established upfront. Depending on the purpose of the audit, this may include WHS legislation and Codes of Practice, the organisation's own procedures, client or contractual requirements, or management system standards such as ISO 45001.
What happens on the day
The on-site component typically covers a document review against what's actually happening in practice, not just whether the paperwork exists, direct observation of work being carried out, checking whether controls described in documentation are actually being followed, and conversations with workers and supervisors, since what people say about how things actually work often reveals more than the documentation does.
A good auditor isn't looking to catch people out. They're looking for the gap between what the system says should happen and what actually happens, because that gap is where incidents come from.
A good audit is also evidence-based. Where something can't be verified from the records, observations or discussions available during the audit, that should be clearly identified rather than assumptions being made either way.
After the audit
A proper audit doesn't end with a checklist of ticks and crosses. It should produce clear, evidence-based findings, identify any nonconformities or areas requiring improvement, set out practical corrective actions where appropriate, and identify anything requiring further verification, with a plan to confirm those actions actually get closed out, rather than sitting in a report nobody revisits.
Audit findings commonly arise where documented controls haven't kept pace with changes in equipment, tasks, personnel, or the way work is actually performed. If your business operates plant, machinery or higher-risk activities, it's worth reviewing whether your risk assessments reflect how those tasks are actually carried out today.
Frequently asked questions
Does a WHS audit mean my business is non-compliant?
No. An audit is a structured assessment against defined criteria. It may identify conforming practices as well as gaps, opportunities for improvement, or areas requiring further evidence.
How should I prepare for a WHS audit?
Have current policies, risk assessments, training records, incident records, inspection records and other relevant evidence accessible, but don't manufacture or backfill documents simply because an audit is coming. An audit that reflects how the business genuinely operates is far more useful than one dressed up for the day.
How long does a WHS audit take?
It depends on the number of sites, workforce, risk profile, audit criteria and scope, there's no fixed timeframe that applies to every business.
Getting audit-ready
Need an independent view of where your WHS system actually stands? Overwatch Safety Solutions conducts WHS compliance audits and workplace inspections across Queensland, with findings focused on practical corrective action rather than paperwork for paperwork's sake.