Occupational Health and Safety Auditing Training Course

Duration 10 days 22 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Health and Safety Managers, Internal Auditors and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-OHS-071

Before you join: Participants should understand common workplace hazards, risk assessment controls and basic occupational health and safety responsibilities.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Occupational health and safety audits can reveal uncontrolled risks, weak legal compliance, ineffective controls and incomplete corrective actions before they lead to injury, enforcement action, operational disruption or reputational damage. Yet many internal audits become document checks that fail to test whether controls work at the point of work. External audit preparation can also become reactive when organisations cannot demonstrate objective evidence, management oversight or sustained corrective action.

This course develops the practical auditing capability needed to plan, conduct, report and follow up occupational health and safety audits. Participants work with ISO 45001 and ISO 19011 principles, risk-based audit planning, legal and other requirements registers, audit criteria, sampling methods, interview techniques, evidence evaluation, nonconformity grading and corrective-action verification. The course addresses first-party internal audits, supplier and contractor audits, readiness reviews for certification audits, and management-system performance reviews.

Participants use realistic cases from construction, manufacturing, energy, logistics, healthcare and office-based operations to build audit workpapers from the first week. Teaching combines focused briefings, document review, site-scenario analysis, interviews, evidence testing, audit-team discussions and reporting simulations. Each participant leaves with a reusable occupational health and safety audit pack, including an audit programme, audit plan, checklists, evidence records, findings log and corrective-action follow-up model.

The course is suited to professionals who already work with occupational health and safety controls, management systems or compliance responsibilities and now need to perform or manage credible audits. It is particularly relevant where organisations must demonstrate assurance to senior leaders, regulators, customers, certification bodies, contractors or insurers.

What you will be able to do

  • Plan risk-based occupational health and safety audit programmes using ISO 45001 and ISO 19011
  • Define audit scope, criteria, objectives and sampling methods for internal and external audits
  • Prepare audit checklists that test operational controls, legal requirements and management-system processes
  • Conduct opening meetings, worker interviews, document reviews and site inspections professionally
  • Evaluate objective evidence and distinguish observations, nonconformities and improvement opportunities
  • Write evidence-based audit findings with clear requirement statements and risk implications
  • Assess root causes and verify corrective-action effectiveness using structured follow-up methods
  • Present a complete occupational health and safety audit report and management action plan

Benefits of attending

For you

  • Conduct structured audits beyond routine workplace inspections
  • Build confidence interviewing workers, supervisors and senior managers
  • Produce findings that withstand management and certification-body scrutiny
  • Apply ISO 45001 audit principles to internal, contractor and supplier reviews
  • Create a professional audit portfolio for expanded assurance responsibilities

For your organisation

  • Identify weak controls before incidents, claims or regulatory intervention
  • Improve consistency of internal occupational health and safety audit evidence
  • Strengthen corrective-action ownership, due dates and effectiveness verification
  • Provide senior management with clearer assurance on management-system performance
  • Prepare sites and functions for customer, regulator and certification audits

Course modules

22 modules over 10 days

Participants can explain how occupational health and safety audits provide assurance on control effectiveness and compliance.

  • Audit, inspection and assurance activities distinguished by purpose and evidence
  • Three lines model applied to occupational health and safety assurance
  • ISO 45001 management-system intent and auditable process requirements
  • Due diligence demonstrated through planned monitoring, review and improvement
  • Audit value linked to injury prevention, compliance and governance
  • First-party, second-party and third-party audit roles compared

Participants can apply ISO 19011 principles to impartial, ethical and evidence-based audit work.

  • ISO 19011 principles: integrity, fair presentation and due professional care
  • Confidentiality requirements when handling health records and incident evidence
  • Independence threats identified for internal auditors reviewing familiar operations
  • Risk-based thinking applied to audit planning and evidence evaluation
  • Auditor competence, technical knowledge and behavioural skills requirements
  • Conflicts of interest declared and managed before fieldwork begins

Participants can define clear audit objectives, criteria, scope and boundaries for an audit assignment.

  • Audit objectives framed around conformance, effectiveness and legal compliance
  • Criteria selected from standards, procedures, permits and contractual requirements
  • Scope boundaries set by locations, activities, shifts and organisational units
  • Process interfaces mapped between operations, maintenance, contractors and leadership
  • Audit questions aligned with stated objectives and risk priorities
  • Exclusions tested for justification, authority and unintended control gaps

Participants can audit processes for identifying, applying and evaluating occupational health and safety obligations.

  • Legal register structure linked to activities, hazards and responsible owners
  • Applicable legislation verified against site operations and workforce arrangements
  • Permits, licences and statutory inspections sampled for current status
  • Other requirements include client rules, insurer standards and collective agreements
  • Compliance evaluation evidence tested against defined frequency and methodology
  • Noncompliance escalated using documented reporting and remediation routes

Participants can build an annual audit programme based on risk, performance and organisational change.

  • Annual audit programmes prioritised using hazard severity, exposure and performance
  • Risk matrices calibrated to distinguish audit priority from operational risk
  • Incident trends, complaints and near misses used for targeting
  • Organisational change triggers additional audits after process or workforce changes
  • Audit frequency justified for high-risk activities and critical controls
  • Programme resources assigned by auditor competence, independence and availability

Participants can prepare an audit plan, agenda, document request and working-paper structure.

  • Audit plans specify objectives, criteria, scope, methods and timetable
  • Opening meeting agendas establish access, communication and safety arrangements
  • Pre-audit document requests target relevant procedures, records and performance data
  • Working papers organise questions, samples, evidence references and findings
  • Audit team roles allocated for interviews, inspection and evidence review
  • Contingency arrangements address access restrictions, emergencies and schedule changes

Participants can map operational processes and identify the controls that an audit must test.

  • SIPOC diagrams define suppliers, inputs, processes, outputs and customers
  • Process maps identify handoffs, decisions, records and control owners
  • Critical controls distinguished from supporting administrative control activities
  • Bow-tie analysis links threats, preventive barriers and recovery controls
  • Field verification tests whether documented controls match actual work
  • Control failures traced through people, equipment, procedures and supervision

Participants can select defensible samples for documents, locations, workers and operational activities.

  • Judgemental sampling targets high-risk tasks, changes and recurring failures
  • Random sampling reduces selection bias within defined audit populations
  • Sample sizes adjusted for risk, population size and evidence consistency
  • Shift patterns included when sampling supervision and permit controls
  • Triangulation compares records, interviews, observations and physical conditions
  • Sampling limitations recorded to prevent unsupported audit conclusions

Participants can test documented information for adequacy, implementation and control.

  • Document control tested through approvals, revision status and point-of-use access
  • Risk assessments checked for task specificity, review triggers and controls
  • Training records sampled against role competence and refresher requirements
  • Permit-to-work records examined for authorisation, isolation and close-out
  • Inspection and maintenance records traced to identified equipment risks
  • Incident records compared with corrective actions and trend analysis

Participants can obtain reliable audit evidence through structured and respectful interviews.

  • Open questions elicit task knowledge, control use and concerns
  • Funnel questioning moves from broad descriptions to specific evidence
  • Interview plans separate worker, supervisor and management evidence needs
  • Active listening identifies inconsistencies, assumptions and untested control claims
  • Psychological safety protected when discussing incidents, hazards and reporting
  • Interview notes capture facts, quotations, records and follow-up questions

Participants can conduct safe, systematic site inspections that test work as performed.

  • Observation protocols focus on task conditions, behaviours and control barriers
  • Safe access arrangements agreed before entering operational and restricted areas
  • Photographic evidence managed under site rules and confidentiality controls
  • Work-as-imagined compared with work-as-done during live observations
  • Housekeeping, access, guarding and signage assessed against stated requirements
  • Stop-work escalation applied where imminent danger is observed

Participants can audit whether hazard controls are selected, implemented and maintained effectively.

  • Hierarchy of controls tested before reliance on administrative measures
  • Operational planning audited for routine, non-routine and emergency work
  • Job safety analysis reviewed for sequencing, hazards and control ownership
  • Critical control verification examines barriers protecting against major hazards
  • Personal protective equipment controls tested for selection, issue and use
  • Change management records checked for new hazards and revised controls

Participants can assess contractor and supplier occupational health and safety arrangements using proportionate criteria.

  • Prequalification criteria assess competence, incident history and legal compliance
  • Contractor induction records sampled against site-specific hazard information
  • Interface risks examined where contractor and host activities overlap
  • Permit coordination tested for simultaneous operations and shared isolations
  • Supplier controls reviewed for hazardous materials, equipment and services
  • Contract performance meetings checked for safety indicators and actions

Participants can audit incident investigation processes for evidence quality, learning and action completion.

  • Incident classifications tested against reporting thresholds and legal duties
  • Five Whys analysis assessed for superficial causes and unsupported conclusions
  • ICAM and causal-factor methods compared for investigation depth
  • Corrective actions reviewed for control strength, ownership and due dates
  • Lessons learned communications tested for relevance to affected workgroups
  • Repeat incidents analysed for failed learning and ineffective verification

Participants can audit occupational health arrangements while handling sensitive information appropriately.

  • Health surveillance programmes tested against exposure assessments and medical confidentiality
  • Ergonomic risk controls reviewed for assessment, adjustment and follow-up
  • Psychosocial risk arrangements examined through workload, reporting and support evidence
  • Exposure monitoring records sampled for frequency, results and action
  • Fitness-for-work processes checked for privacy, restrictions and management actions
  • Occupational health data aggregated without disclosing personal medical details

Participants can audit occupational health and safety interfaces with emergency and environmental controls.

  • Emergency plans tested for alarms, evacuation, rescue and communication
  • Drill records reviewed for participation, observations and improvement actions
  • Fire safety controls sampled for inspections, maintenance and access
  • Chemical spill arrangements assessed alongside exposure and environmental controls
  • Business continuity links examined after serious incidents and site shutdowns
  • Emergency contractor roles verified through callout arrangements and competence

Participants can reach defensible audit conclusions and classify findings consistently.

  • Objective evidence assessed for relevance, reliability, sufficiency and traceability
  • Conformance conclusions linked directly to criteria and verified facts
  • Nonconformities distinguished from observations and improvement opportunities
  • Major and minor findings graded using defined consequence and system criteria
  • Evidence chains connect requirement, condition, proof and risk implication
  • Contradictory evidence resolved through further sampling and corroboration

Participants can write concise findings and reports that support accountable management decisions.

  • Finding statements separate requirement, evidence, gap and risk consequence
  • Report summaries communicate significant issues without overstating certainty
  • Audit reports structure scope, criteria, methods, findings and conclusions
  • Positive practices recorded where controls demonstrate repeatable effectiveness
  • Evidence references enable management review and independent follow-up
  • Plain language reduces ambiguity in corrective-action expectations

Participants can lead closing meetings that communicate findings fairly and obtain clear next steps.

  • Closing meeting agendas confirm scope, findings, caveats and next actions
  • Findings presented with factual language and supporting evidence references
  • Management challenges handled through criteria, evidence and respectful discussion
  • Disputed findings documented without compromising auditor independence or accuracy
  • Action owners agree responsibilities, target dates and escalation routes
  • Senior leadership messages focus on risk exposure and control performance

Participants can evaluate corrective-action plans and verify whether actions have removed or reduced the identified problem.

  • Corrective-action plans specify containment, correction, cause and preventive measures
  • Root cause methods selected according to complexity and available evidence
  • Fishbone diagrams structure people, process, equipment and environment causes
  • SMART actions tested for ownership, resources, deadlines and measurable outcomes
  • Effectiveness verification confirms changed conditions rather than completed paperwork
  • Overdue actions escalated using risk-based governance and management review

Participants can use audit results to support management review, performance decisions and continual improvement.

  • Audit dashboards track completion, finding trends, overdue actions and recurrence
  • Leading and lagging indicators interpreted without misleading performance conclusions
  • Management review inputs aligned with ISO 45001 performance requirements
  • Systemic themes analysed across sites, functions, contractors and activities
  • Audit programme effectiveness evaluated through closure quality and repeat findings
  • Annual plans revised using performance results, change and emerging risk

Participants can build, review and present a complete risk-based occupational health and safety audit package for a defined operation.

  • Audit scenario analysed to establish objectives, scope, criteria and priorities
  • Risk-based audit programme and detailed audit plan prepared
  • Checklists, sampling plan and interview questions assembled from evidence needs
  • Simulated evidence evaluated against ISO 45001 and operational requirements
  • Findings, corrective actions and verification arrangements documented clearly
  • Closing presentation delivers conclusions, risk priorities and management recommendations

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Risk-based occupational health and safety audit programme template
  2. ISO 45001 audit plan and checklist pack
  3. Audit evidence and sampling workpaper set
  4. Nonconformity finding and audit report template
  5. Corrective-action and effectiveness-verification tracker
  6. Management review audit dashboard model

Who should attend

  • Health and Safety Managers — need reliable assurance over workplace controls and legal compliance
  • Internal Auditors — need occupational health and safety criteria, evidence and interviewing methods
  • HSE Officers and Advisers — need to turn inspections into structured management-system audits
  • Quality and Integrated Management System Managers — need to audit ISO 45001 alongside other standards
  • Operations and Site Managers — need to prepare for audits and close findings effectively
  • Contractor and Supplier Managers — need to assess third-party occupational health and safety arrangements

Skills and tools covered

Audit programme planningEvidence-based interviewingISO 45001 auditingNonconformity reportingCorrective-action verificationRisk-based sampling

Tools and standards

ISO 45001:2018, ISO 19011:2018, Bow-tie analysis, ICAM

How the course runs

Training methodology

The course uses short instructor briefings followed by case-based audit work. Participants examine policies, risk assessments, permits, training records, incident data and contractor files; prepare audit plans and checklists; and test evidence against stated criteria. Group exercises include opening meetings, worker and manager interviews, site-inspection scenarios, finding classification and closing-meeting discussions. Simulations mirror internal, supplier and certification-readiness audits. Individual application planning connects the audit tools to participants’ own sites, functions and management systems.

Requirements and prerequisites

Participants should understand common workplace hazards, risk assessment controls and basic occupational health and safety responsibilities. Experience in health and safety, operations, facilities, quality, maintenance, human resources or compliance is useful. Participants should be able to read procedures, incident reports, risk assessments and records, and discuss working practices with operational staff. Prior experience as an auditor is not required. Formal ISO 45001 training, lead auditor certification, legal qualifications and statistical expertise are not required. The course explains audit terminology before applying it to realistic audit assignments.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand basic workplace hazards, risk controls and occupational health and safety responsibilities. You do not need prior audit experience, ISO 45001 certification or legal training.

Bring a laptop or tablet if possible, plus examples of non-confidential procedures, risk assessments, inspection forms or audit reports from your workplace. Course materials and case documents are provided.

It suits health and safety professionals, internal auditors, integrated management system staff, operations leaders and contractor managers. Participants should have enough workplace experience to assess how controls operate during normal work.

An implementation course focuses on designing or maintaining an occupational health and safety management system. This course focuses on independently testing whether that system and its operational controls meet requirements and work effectively.

You can use the audit programme, plan, checklists, evidence records and corrective-action tracker for internal audits, contractor reviews or certification-readiness work. The templates can be adapted to a site, department, process or project.

Training runs from 08:30 to 16:30 each day, providing about 6.5 contact hours daily. The first week builds audit planning and evidence-gathering skills; the second week covers reporting, corrective action, governance and the final audit capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.