Safety Audit: What It Is, Types & How to Conduct One

A safety audit is a systematic, documented review of a workplace's safety program, conditions, and work practices against a standard — OSHA, company policy, or API — to find and close gaps before they cause an incident or a citation.

What is a safety audit?

A safety audit measures your safety program against a defined standard and documents where reality falls short. Unlike a quick walkaround, it is structured: a defined scope, a checklist tied to the standard, evidence collected for each finding, and a written record of what was reviewed.

The goal is not paperwork — it is proof. A completed audit shows a regulator, an operator's prequalification reviewer, or your own leadership that hazards were identified, ranked, and assigned for correction. For field crews working remote sites under operator metrics, that documented trail is often the difference between winning the next contract and losing it.

Safety audit vs. safety inspection

The terms get used interchangeably, but they are not the same thing. An inspection is a point-in-time check of conditions and equipment. An audit is a systematic review of the program and system behind those conditions. Put simply: inspections check things; audits check the system.

 Safety auditSafety inspection
FocusThe program and management systemPhysical conditions and equipment
Core questionAre procedures written, followed, and verified?Is this specific hazard controlled right now?
ScopeBroad and systematicNarrow and point-in-time
Typical frequencyUsually annualFrequent — weekly to monthly
Performed byIndependent, qualified auditorAnyone familiar with the area

Types of safety audits

Safety audits generally fall into three types, increasing in scope. Most programs use all three at different intervals.

Compliance audit

Checks your operation against specific regulations and standards — OSHA 1910/1926, API, or company policy. It answers one question: are we meeting our legal obligations?

Program audit

Evaluates whether a specific safety program — lockout/tagout, hot work, fall protection — is well-designed and actually working as intended on the ground.

Management system audit

The broadest type. Combines compliance and program reviews with interviews and field observation to judge whether the whole safety system performs and controls risk.

How to conduct a safety audit

A safety audit follows five steps. Skipping the last one — follow-up — is the most common reason audits fail to reduce risk.

  1. Plan and scope the audit

    Define what the audit covers — a single site, one program, or the whole management system — the standard you are auditing against, the timeframe, and who performs it. Schedule it and notify the crews involved.

  2. Review records and documents

    Pull written programs, training records, prior audit findings, incident reports, permits, JSAs, and inspection logs. Confirm the documentation exists, is current, and matches what the standard requires.

  3. Walk the site and interview

    Observe actual work practices and conditions in the field, then interview supervisors and workers to verify that procedures are understood and followed — not just written down.

  4. Document findings and rank them

    Record each gap with evidence — photos and a reference to the standard — and rank it by risk so the most serious exposures get attention first.

  5. Assign corrective actions and follow up

    Turn each finding into a corrective action with an owner and a due date, then verify closure. An audit that does not drive follow-up changes nothing.

What's on a safety audit checklist

The exact items depend on your standard and the work being audited, but most safety audit checklists cover these areas:

  • Written safety programs and policies — current and accessible
  • Hazard identification and JSAs for high-risk tasks
  • Training and certification records
  • PPE requirements and availability
  • Equipment inspection and maintenance logs
  • Permits for hot work, confined space, and other high-risk work
  • Incident reports and corrective-action history
  • Emergency response and evacuation procedures
  • Recordkeeping — including OSHA 300/300A logs

Frequently asked questions

What is a safety audit?
A safety audit is a systematic, documented review of a workplace's safety program, conditions, and work practices against a defined standard — OSHA regulations, company policy, or an industry standard like API. Its purpose is to find gaps and close them before they cause an incident or a citation.
What is the difference between a safety audit and an inspection?
An inspection is a point-in-time check of physical conditions and equipment — is this guardrail in place, is this extinguisher charged. An audit is a broader, systematic review of the safety program and management system: are the right procedures written, followed, documented, and verified. Inspections check things; audits check the system.
How often should you do a safety audit?
Most organizations run a comprehensive safety audit at least once a year, with smaller program or department audits more often. OSHA does not mandate a fixed audit frequency, but treats regular audits as part of an effective safety program. Field operations with rotating crews and changing sites often audit quarterly.
Who performs a safety audit?
A qualified auditor who is independent of the area being reviewed — an internal safety manager auditing another crew, a corporate EHS team, or an outside consultant. Independence matters: the auditor should be able to flag gaps without a conflict of interest.

Run your safety audits without the paperwork

BasinCheck turns safety audits into digital checklists your crews complete from the field — offline if they have to. Failed items become tracked corrective actions automatically, and every finding keeps a timestamped, audit-ready record.