ISO 19011 HSE Internal Audit Skills Training Course
| Course code | SD-HM-073 |
|---|---|
| Duration | 5 days |
| Level | Intermediate |
| Category | HSE Management |
| Delivery | Classroom or live online |
| Language | English |
| Certificate | Certificate of completion |
Course overview
HSE management systems often contain well-written procedures but uneven evidence that controls operate in the field. Internal auditors must test whether risk assessments, legal registers, incident investigations, operational controls, emergency arrangements and performance data are effective—not simply confirm that documents exist. This course equips HSE professionals to plan, conduct and report internal audits that provide management with defensible findings and practical improvement priorities aligned to ISO 19011 auditing guidance.
Participants learn the full ISO 19011 audit method, from defining audit objectives, scope and criteria through risk-based programme planning, document review, sampling, interviewing, evidence verification, finding classification, reporting and follow-up. The course applies these methods specifically to ISO 45001 occupational health and safety management systems and ISO 14001 environmental management systems. Participants practise tracing requirements into auditable controls, testing implementation across work areas, distinguishing nonconformities from observations, and writing findings that identify objective evidence, unmet criteria and risk implications.
Instructor-led modules, HSE audit scenarios, interview role plays and structured workshops are used throughout the five days. Participants work with an audit brief, process maps, risk registers, inspection records, incident data and environmental control documentation. They leave with a completed ISO 19011-aligned HSE internal audit pack: an audit plan, checklist, evidence record, nonconformity reports, audit report and corrective-action follow-up plan. A certificate of completion is awarded at the end of the course.
The programme is designed for professionals who already work with HSE controls and now need a consistent, credible method for auditing those controls internally. It also gives managers a repeatable approach for developing auditors who can generate reliable assurance before certification, surveillance or regulatory scrutiny.
Course objectives
By the end of this course, participants will be able to:
- Plan an ISO 19011-conformant HSE internal audit programme using risk, significance and prior audit results
- Define audit objectives, scope and criteria for ISO 45001 and ISO 14001 management system processes
- Prepare an auditable checklist that links HSE requirements to controls, records and field observations
- Conduct opening meetings, worker interviews and site inspections using evidence-based questioning techniques
- Apply sampling methods to test implementation of risk assessments, permits, training records and environmental controls
- Evaluate objective evidence and classify findings as conformity, nonconformity, observation or improvement opportunity
- Write nonconformity reports that state the requirement, evidence, condition and risk-based impact
- Produce an audit report and corrective-action follow-up plan suitable for management review
Benefits of attending
For you
- Gain a repeatable ISO 19011 method for leading or supporting HSE internal audits
- Build credibility when challenging weak safety or environmental controls with objective evidence
- Learn to write findings that management can act on rather than vague inspection comments
- Prepare for broader responsibilities in ISO 45001, ISO 14001 or integrated management system auditing
- Leave with an audit pack that can be adapted for audits at your own sites or functions
For your organisation
- Improve consistency of HSE audit planning, sampling, evidence records and reporting across locations
- Identify control failures before they contribute to incidents, environmental releases or certification findings
- Strengthen management review with audit reports that distinguish systemic issues from isolated defects
- Increase the quality and timeliness of corrective-action verification after internal audits
- Reduce reliance on external auditors by developing capable in-house HSE audit resources
Target competencies
Who should attend
- HSE Managers — who need a reliable internal audit approach for safety and environmental management systems
- Internal Auditors — who must assess HSE controls against ISO 19011, ISO 45001 and ISO 14001 criteria
- Health and Safety Advisers — who verify whether operational risk controls are implemented at site level
- Environmental Managers — who need to audit environmental aspects, compliance controls and operational procedures
- Quality and Integrated Management System Managers — who coordinate combined audits across QHSE systems
- Operations and Site Managers — who host audits and must close corrective actions with credible evidence
Requirements and prerequisites
Participants should have practical familiarity with their organisation’s health, safety or environmental management arrangements, such as risk assessments, incident reporting, inspections, legal compliance registers, training records or operational procedures. They should understand the purpose of ISO 45001 and/or ISO 14001, although detailed clause-by-clause knowledge is not assumed. Previous auditing experience is helpful but not required; the course teaches the ISO 19011 audit process from planning through follow-up. No lead auditor qualification, specialist auditing software or statistical expertise is required. Participants should be prepared to review sample documents, take structured notes and participate in interview role plays.
Training methodology
The programme combines instructor-led ISO 19011 interpretation with practical HSE audit work. Participants analyse an integrated safety and environmental case organisation, review procedures and records, build checklists, conduct simulated opening meetings and interview process owners. Small groups test evidence from risk assessments, permits, incident investigations and environmental monitoring records before calibrating findings against agreed criteria. Each day closes with a working audit artefact, culminating in an individual application plan for an audit in the participant’s own organisation.
Course outline
Day 1: ISO 19011 foundations and HSE audit planning
- ISO 19011 principles of integrity, fair presentation, due professional care, confidentiality and independence
- First-party, second-party and third-party HSE audit purposes
- Audit programme objectives, responsibilities, resources and competence requirements
- Risk-based prioritisation using incident trends, significant aspects and legal compliance exposure
- Defining audit objectives, scope, criteria and audit boundaries
- ISO 45001 and ISO 14001 process-based audit trails
- Audit plan structure, timetable, audit team roles and communication protocols
Workshop: Participants create a risk-based annual HSE audit programme and a detailed audit plan for a selected operational area.
Day 2: Preparing audit trails and evidence tools
- Document review techniques for HSE policies, procedures and process maps
- Translating ISO 45001 requirements into auditable questions
- Translating ISO 14001 requirements into auditable questions
- Auditing hazard identification, risk assessment and operational planning controls
- Auditing environmental aspects, impacts and operational control measures
- Checklist design using requirement, control, evidence and sample fields
- Sampling plans for records, sites, shifts, contractors and work activities
Workshop: Participants build a process-based audit checklist and sampling plan for contractor control and hazardous-waste management.
Day 3: Conducting fieldwork and gathering objective evidence
- Opening meeting agenda, auditor introductions and audit protocol
- Interview planning and open, probing and confirmatory questioning techniques
- Interviewing managers, supervisors, workers and contractors
- Site observation methods for verifying operational HSE controls
- Triangulating documents, interview statements and physical observations
- Recording objective evidence, audit notes and evidence references
- Managing resistance, conflicting evidence and audit scope changes
Workshop: In a role-play audit, participants interview a site supervisor and produce evidence notes supported by records and observations.
Day 4: Evaluating findings and reporting HSE audit results
- Testing conformity against stated audit criteria
- Distinguishing nonconformities, observations and opportunities for improvement
- Writing finding statements using criterion, condition, evidence and consequence
- Classifying findings by risk, systemic significance and recurrence
- Linking findings to incident investigation, legal compliance and performance trends
- Closing meeting techniques for presenting balanced audit conclusions
- Audit report structure, executive summary and management-level recommendations
Workshop: Participants assess a set of HSE evidence files, classify findings and draft nonconformity reports for a closing meeting.
Day 5: Corrective action follow-up and audit application
- Root cause analysis using the 5 Whys and cause-and-effect categories
- Corrective action plans with owners, due dates, controls and verification evidence
- Verifying correction, corrective action effectiveness and residual risk
- Follow-up audit planning and closure decision criteria
- Reporting audit trends to management review
- Auditor competence evaluation and continual professional development
- Building an organisation-specific HSE internal audit improvement plan
Workshop: Participants complete an end-to-end HSE audit pack and present a 90-day plan for applying the method in their own organisation.
Tools & standards covered
ISO 19011:2018, ISO 45001:2018, ISO 14001:2015, Microsoft Excel
A typical training day
| 08:30 – 10:30 | First session |
| 10:30 – 10:45 | Refreshment break |
| 10:45 – 12:30 | Second session |
| 12:30 – 13:30 | Lunch and networking |
| 13:30 – 15:00 | Third session |
| 15:00 – 15:15 | Refreshment break |
| 15:15 – 16:30 | Workshop and daily review |
Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.
What the fee includes
- Instruction by a practitioner facilitator
- Full course workbook and materials
- Exercise files, templates and case studies
- Certificate of completion
- Refreshments and lunch (classroom deliveries)
- Post-course application plan
- Facilitator follow-up on request
- Group rates from five participants
How you can take this course
Classroom
Scheduled sessions in Nairobi, Mombasa, Kigali, Dar es Salaam, Dubai and Cape Town.
Live online
The same facilitator and materials, delivered live for distributed teams and individuals.
In-house
Delivered privately for your team, at your offices or a venue of your choice, tailored to your context. Request a proposal.
Certification
Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.
Frequently asked questions
Upcoming sessions
New dates are being scheduled. Ask us about the next session or an in-house delivery for your team.
Ask about datesGroup of 5+?
Request in-house delivery or group rates →Related courses in HSE Management
Bowtie HSE Risk Management and Barrier Assurance Training Course
Major incident investigations repeatedly show that controls existed on paper but were ineffective, bypassed, degraded, poorly maintained or …
SpheraCloud HSE Incident Management Configuration Training Course
HSE teams depend on incident data to identify recurring hazards, meet reporting obligations, and prevent serious events. Yet many organisati…
HSE Management for Operations Managers Training Course
Operations managers are accountable for production, maintenance, logistics and contractor activity, yet many HSE failures originate in routi…
Enablon HSE Management Software Administration Training Course
HSE teams depend on Enablon records to demonstrate that incidents, observations, audits, actions, permits, risks and environmental data are …