Integrated Management System Audit Checklist Guide

An Integrated Management System (IMS) helps a business manage quality, health and safety, and environmental duties in one clear system. Instead of running separate audits for every standard, teams can bring common checks together. As a result, they can save time, reduce repeated work, and spot risks sooner. However, an integrated system needs regular checks. An Integrated Management System Audit Checklist helps teams review policies, processes, records, and controls in a consistent way. It also helps auditors find gaps, record evidence, and follow up on issues.

With eAuditor Audits & Inspections, teams can digitize these checks, record findings on site, and assign corrective actions. Therefore, the audit becomes more than a routine task. It becomes a practical way to improve how the business works.

What Is an Integrated Management System Audit Checklist?

An Integrated Management System Audit Checklist is a set of questions used to assess how well an organization manages several systems through one audit process.

For example, a business may combine these standards:

• ISO 9001: Quality management.
• ISO 14001: Environmental management.
• ISO 45001: Occupational health and safety management.
• ISO 50001: Energy management, where relevant.
• ISO/IEC 27001: Information security management, where relevant.

The exact scope depends on the business, its risks, and the standards it follows. Therefore, not every organization needs to include every standard.

An integrated audit checks shared requirements, such as leadership, training, document control, risk management, internal audits, and continual improvement. It also checks the specific controls that each system needs.

For instance, document control may support quality procedures, environmental records, and safety instructions at the same time. However, a check on waste disposal needs its own environmental criteria. Likewise, a check on machine guarding needs clear safety criteria.

Why Is an Integrated Management System Audit Important?

An integrated audit helps teams see how different parts of the business work together. It also reduces the chance of missing a key requirement.

1. Reduce repeated work

Separate audits may ask similar questions about training, records, and management reviews. An integrated checklist can cover shared controls once where the audit scope allows it. As a result, auditors can spend more time on risks that need closer attention.

2. Improve compliance

The checklist helps teams compare current practices with approved procedures, legal duties, customer needs, and relevant standards. However, the team must keep the checklist up to date as requirements change.

3. Find risks earlier

Auditors can review work areas, speak with staff, and check records. Therefore, they can spot weak controls before those gaps lead to poor quality, pollution, injuries, or service delays.

4. Support clear decisions

A well-recorded audit gives managers evidence about what works and what needs attention. In turn, they can set priorities, assign resources, and review progress.

5. Build a culture of improvement

Audits should not focus only on mistakes. They should also identify good practices and useful ideas. Over time, teams can use audit results to improve processes and prevent repeat issues.

Who Should Use an Integrated Management System Audit Checklist?

Many organizations can benefit from an integrated audit. The checklist is especially useful when several management systems share the same sites, teams, or processes.

Typical users include:

• Quality managers who review process controls and product or service quality.
• Health and safety teams that check hazards, training, and safe work practices.
• Environmental managers who assess waste, emissions, resource use, and environmental controls.
• Compliance officers who review legal and other obligations.
• Internal auditors who assess whether systems work as planned.
• Operations managers who oversee daily processes and corrective actions.
• Senior leaders who review performance and set improvement priorities.
• Consultants who support internal audits and readiness reviews.

For example, a manufacturing site may use one audit plan to review document control, production quality, chemical storage, waste handling, worker safety, and emergency readiness. However, the auditor should still apply the right criteria to each area.

When Should You Conduct an Integrated Management System Audit?

The audit schedule should reflect the organization’s risks, obligations, and management system requirements.

Common times to conduct an audit include:

• At planned intervals: Follow an approved internal audit schedule.
• Before a certification audit: Check readiness and identify gaps that need attention.
• After a major change: Review new equipment, processes, sites, suppliers, or responsibilities.
• After an incident: Check whether existing controls worked and whether they need improvement.
• When performance drops: Investigate repeated defects, safety issues, environmental problems, or missed targets.
• After corrective actions: Confirm that fixes work and that the issue does not return.
• During management reviews: Provide reliable audit results to support decisions.

The audit frequency should not be the same for every process by default. Instead, prioritize high-risk and poorly performing areas. Also, follow any specific audit frequency required by the relevant standard, law, contract, or internal procedure.

Key Areas to Include in an Integrated Management System Audit Checklist

A useful checklist covers shared management system requirements and the controls specific to each included standard.

1. Organizational Context and Scope

First, check whether the organization understands the issues that may affect its management systems.

Ask questions such as:

• Has the organization identified relevant internal and external issues?
• Have relevant interested parties and their needs been identified?
• Is the scope of each management system clear?
• Does the scope cover the right sites, activities, and processes?
• Have the systems and their shared processes been mapped?
• Have changes that may affect the systems been reviewed?

Then, record any gaps between the documented scope and actual operations.

2. Leadership and Responsibilities

Strong management support helps an IMS work in practice. Therefore, check whether leaders set clear goals and provide suitable resources.

Review whether:

• Policies are approved, current, and communicated.
• Roles, duties, and authorities are clearly assigned.
• Managers support quality, environmental, and safety goals.
• Workers can raise concerns and share improvement ideas.
• Teams understand how their work affects system performance.
• Management reviews cover relevant results and required actions.

Also, verify that leaders follow up on decisions rather than leaving actions open.

3. Risk and Opportunity Management

Risk management helps teams focus on issues that could affect people, customers, the environment, or business results.

Check whether the organization:

• Identifies risks and opportunities across its systems.
• Assesses risks using a defined method.
• Considers environmental aspects and impacts where relevant.
• Identifies workplace hazards and assesses safety risks.
• Reviews quality risks that may affect products or services.
• Selects suitable controls and assigns responsibility.
• Updates assessments after significant changes.
• Checks whether controls remain effective.

For example, poor chemical storage may create a worker safety risk and an environmental risk. An integrated audit can review both concerns during the same visit while recording the right evidence for each.

4. Legal and Other Compliance Requirements

Next, confirm that the organization understands and manages the requirements that apply to its activities.

Ask:

• Is there a current list of relevant legal and other obligations?
• Are responsible people assigned to track these requirements?
• Do teams understand the duties that affect their work?
• Are required permits, licences, and records current?
• Does the organization check compliance at planned intervals?
• Are gaps recorded and addressed?
• Are changes in applicable requirements reviewed?

Do not assume that an audit checklist alone proves legal compliance. Auditors must check the actual requirements, evidence, and conditions that apply to the site.

5. Documented Information and Record Control

Good records help teams prove that processes are planned and carried out as intended.

Review whether:

• Policies and procedures are approved and current.
• Staff can access the right instructions when needed.
• Old or unapproved documents are controlled.
• Records are legible, traceable, and protected.
• Training and competence records are available.
• Audit reports and corrective action records are retained.
• Changes to documents are reviewed and approved.

Also, check that teams use the correct version of each procedure. Outdated instructions can lead to errors, unsafe work, and inconsistent results.

6. Competence, Awareness, and Communication

People need the right skills and information to follow an integrated system.

Check whether:

• Job roles have clear competence requirements.
• Staff receive training for their assigned tasks.
• Training records are maintained.
• Workers understand relevant policies and risks.
• Contractors receive suitable instructions.
• Changes are communicated to affected teams.
• The organization checks whether training works in practice.

For example, a signed attendance sheet shows that someone attended training. However, it does not prove that the person can carry out the task correctly. Therefore, observe the work or ask suitable questions when needed.

7. Operational Controls

Operational controls help the business turn its procedures into daily practice. The exact checks depend on the processes and standards in scope.

Quality controls may include:

• Approved work instructions.
• Product or service inspection records.
• Control of nonconforming outputs.
• Equipment maintenance and calibration records.
• Supplier checks and purchasing controls.
• Customer feedback and complaint handling.

Environmental controls may include:

• Waste storage and disposal.
• Chemical handling and spill prevention.
• Water and energy use.
• Emissions and discharge controls.
• Environmental monitoring records.
• Emergency response arrangements for environmental incidents.

Health and safety controls may include:

• Hazard identification and risk assessments.
• Safe work procedures.
• Personal protective equipment where required.
• Machine guarding and equipment checks.
• Contractor and visitor safety.
• Incident reporting and investigation.
• Emergency plans and drills.

During the audit, look at both the written procedure and the work itself. This helps show whether the controls are understood, available, and effective.

8. Emergency Preparedness and Response

An organization should prepare for emergencies that could affect its people, operations, or the environment.

Check whether:

• Relevant emergency scenarios have been identified.
• Emergency plans are current and available.
• Workers know their roles during an emergency.
• Emergency equipment is inspected and maintained.
• Evacuation routes and exits remain accessible.
• Drills take place where required or planned.
• Drill results and real incidents are reviewed.
• Lessons learned lead to suitable improvements.

Also, consider combined events. For example, a chemical spill may require worker evacuation, environmental containment, and communication with emergency services.

9. Monitoring, Measurement, and Performance

An IMS needs reliable data to show whether it achieves its goals.

Review whether the organization monitors suitable measures, such as:

• Customer complaints and product defects.
• Process performance and service quality.
• Injuries, near misses, and safety observations.
• Waste, emissions, water use, and energy use.
• Training completion and competence.
• Legal compliance checks.
• Corrective action completion and repeat findings.
• Progress against management system objectives.

Then, confirm that teams review the results and act when performance falls below expectations. Collecting data has little value if nobody uses it.

10. Internal Audit and Management Review

Internal audits help the organization check whether its management systems meet planned arrangements and applicable requirements. Management reviews then help leaders evaluate overall performance and decide what to improve.

Check whether:

• An internal audit programme is in place.
• Audit plans consider risk, importance, and past results.
• Auditors are competent and objective.
• Audit criteria and scope are clear.
• Findings are supported by evidence.
• Reports reach the right people.
• Corrective actions have owners and due dates.
• Management reviews cover relevant performance and outstanding actions.
• Decisions and follow-up tasks are recorded.

Where practical, integrate audits that share criteria and processes. However, do not combine them in a way that hides standard-specific requirements.

11. Nonconformities and Corrective Actions

A nonconformity occurs when a requirement is not met. A corrective action addresses its cause to help prevent the issue from happening again.

Check whether:

• Staff know how to report nonconformities.
• Findings are recorded clearly.
• The organization responds to the immediate issue.
• The cause is investigated when needed.
• Corrective actions address the cause, not only the symptom.
• A responsible person and due date are assigned.
• Completion is verified.
• The organization checks whether the action was effective.
• Repeat issues are reviewed for wider system weaknesses.

For example, if staff repeatedly use an outdated procedure, simply reminding them may not solve the problem. The audit team should also check document access, version control, training, and communication.

How to Conduct an Integrated Management System Audit

A clear process helps auditors work consistently and makes findings easier to act on.

Step 1: Define the Audit Scope

Decide which sites, departments, processes, standards, and requirements the audit will cover. Also, state what the audit aims to achieve.

Step 2: Review Previous Results

Check earlier audit reports, open corrective actions, complaints, incidents, and performance trends. This helps you focus on areas with known problems.

Step 3: Prepare the Checklist

Group shared requirements together, then add separate questions for quality, environmental, safety, or other systems in scope. Use clear questions that can be checked against evidence.

Step 4: Collect Evidence

Review documents, observe work, inspect relevant areas, and speak with staff. Record facts rather than assumptions. Where useful, attach photographs or supporting files.

Step 5: Record Findings

Classify findings according to your audit procedure. For example, record conformities, nonconformities, observations, and opportunities for improvement. Use clear descriptions and link each finding to its requirement and evidence.

Step 6: Agree on Actions

Discuss findings with the relevant process owners. Assign corrective actions, owners, and realistic due dates based on the level of risk.

Step 7: Issue the Audit Report

Summarize the scope, criteria, evidence, findings, and required actions. Keep the report clear so managers can understand what needs attention.

Step 8: Verify and Close Actions

Follow up on each action. Confirm that the fix is in place and check whether it worked. Finally, use recurring findings and performance data to improve future audits.

Sample Integrated Management System Audit Checklist Questions

Use these questions as a starting point. Adapt them to your organization’s scope, risks, and applicable requirements.

Management and Planning

• Are IMS policies current, approved, and communicated?
• Are roles and responsibilities clear?
• Are relevant risks and opportunities assessed?
• Are objectives measurable and reviewed?
• Are required resources available?

Document and Training Control

• Are current procedures available to staff?
• Are records controlled and retained?
• Are workers competent for their assigned tasks?
• Is required training documented?
• Do employees understand the controls relevant to their work?

Quality Management

• Are process requirements defined?
• Are inspection and testing records complete?
• Are nonconforming products or services controlled?
• Are customer complaints reviewed?
• Are suppliers assessed where required?

Environmental Management

• Are relevant environmental aspects and impacts assessed?
• Are waste and hazardous materials managed correctly?
• Are permits and compliance records current?
• Are environmental controls followed?
• Are environmental incidents reported and reviewed?

Occupational Health and Safety

• Are workplace hazards identified and assessed?
• Are risk controls in place and effective?
• Are workers involved in safety discussions?
• Are equipment and emergency controls checked?
• Are incidents investigated and actions tracked?

Performance and Improvement

• Are internal audits completed as planned?
• Are results reviewed by responsible managers?
• Are corrective actions assigned and tracked?
• Is action effectiveness checked?
• Are recurring problems used to improve the system?

How eAuditor Audits & Inspections Handles Integrated Management System Audits

eAuditor Audits & Inspections can help teams move away from paper forms and disconnected spreadsheets. With digital checklists and structured records, auditors can use a consistent process across sites and departments.

1. Build a Checklist That Fits Your IMS

Start with a relevant template or create a checklist for your audit scope. Group shared requirements together, then add questions for the standards and processes your organization follows.

For example, a checklist can cover document control, training, risk management, environmental controls, workplace safety, and quality checks. However, the checklist should reflect your approved audit criteria rather than assume every organization has the same needs.

2. Record Findings During the Audit

Auditors can complete digital forms and record their findings as they inspect a site or process. They can add comments and supporting evidence where the checklist setup allows it.

As a result, teams can keep observations with the relevant audit item instead of relying on separate notes that may be hard to trace later.

3. Support Evidence-Based Reporting

A useful audit record explains what the auditor checked and what the evidence showed. Digital checklists help organize these details and make findings easier to review.

Therefore, managers can better understand the issue, its location, and the action required.

4. Assign and Track Corrective Actions

When a checklist identifies a gap, teams can use the corrective action process to assign responsibility and set a due date. They can then monitor progress and follow up on outstanding work.

This matters because an audit does not deliver lasting value when findings remain open. Instead, clear ownership helps teams turn results into action.

5. Improve Visibility Across Sites and Teams

Organizations with several locations can use a consistent audit structure to compare results and identify common problems. For instance, recurring training gaps or document control issues may point to a wider system weakness.

Teams should still review results in context. Differences in risk, operations, and legal duties can affect how sites perform.

6. Keep Audit Records Organized

Digital records can help teams maintain audit history, review previous findings, and prepare for future audits. When the right information is available, auditors can follow up on earlier issues and check whether corrective actions worked.

7. Support Continual Improvement

Audit findings can reveal patterns that a single site visit may not show. By reviewing repeated issues, action status, and performance results, managers can decide where to focus training, resources, and process changes.

Keep in mind that using eAuditor does not automatically establish compliance or guarantee certification. Your organization must still define the right audit criteria, conduct competent audits, maintain suitable evidence, and meet applicable requirements.

Benefits of Using a Digital IMS Audit Checklist

A well-designed digital checklist can help an organization:

• Use a more consistent audit process.
• Reduce duplicate checks where requirements overlap.
• Record findings while the audit is taking place.
• Keep evidence linked to the right questions.
• Assign actions and monitor deadlines.
• Review repeat findings and common risks.
• Improve communication between auditors and process owners.
• Prepare more organized audit reports.
• Support improvement across multiple locations.

The benefits depend on the quality of the checklist and how well the organization follows up on findings.

Common Mistakes to Avoid

Even a detailed checklist can fail if the audit team uses it poorly.

Combining standards without checking their differences

Shared requirements can be audited together. However, each standard may include unique obligations. Make sure the checklist covers all applicable requirements.

Using vague questions

Questions such as “Is everything compliant?” are hard to verify. Instead, ask clear questions that point to a procedure, record, activity, or control.

Relying only on documents

A procedure may look correct on paper while staff follow a different process. Therefore, review records, observe work, and speak with relevant people.

Ignoring repeated findings

A recurring problem may show that an earlier action did not work. Check the cause and effectiveness of past actions before closing a new finding.

Failing to assign ownership

A finding without a responsible person or due date can remain unresolved. Assign clear responsibility and monitor progress.

Treating the checklist as proof of certification

A completed checklist alone does not prove that a management system meets every applicable requirement. The organization must assess the full scope and use reliable evidence.

Best Practices for a Successful IMS Audit

Follow these practices to make your audit process more useful:

• Set a clear scope and audit objective.
• Base the audit programme on risk and past performance.
• Use trained and objective auditors.
• Combine shared checks while retaining standard-specific questions.
• Keep questions clear, measurable, and relevant.
• Gather evidence from records, interviews, and observations.
• Record findings in plain language.
• Address urgent risks promptly.
• Assign corrective actions to suitable owners.
• Verify that corrective actions work.
• Review trends during management meetings.
• Update the checklist when processes or requirements change.

Most importantly, treat the audit as a way to learn and improve. A strong audit helps teams understand what is working, where the gaps are, and what they should do next.

Frequently Asked Questions

1. What is an Integrated Management System Audit Checklist?

It is a structured list of questions used to review several management systems in one audit process. It may cover quality, environmental management, health and safety, and other systems relevant to the organization.

2. Which standards can an integrated audit cover?

An integrated audit may cover ISO 9001, ISO 14001, ISO 45001, ISO 50001, ISO/IEC 27001, or other applicable frameworks. The organization should choose standards based on its activities, risks, and obligations.

3. How often should an IMS audit take place?

The organization should set its audit frequency based on risk, previous results, changes, and applicable requirements. High-risk or poorly performing processes may need more frequent review.

4. Can one checklist cover multiple ISO standards?

Yes. One checklist can cover shared requirements and include separate sections for standard-specific controls. However, it must not leave out any applicable requirement within the audit scope.

5. Who can conduct an integrated management system audit?

A competent auditor who understands the audit criteria, processes, and relevant requirements can conduct the audit. The organization should also protect the auditor’s objectivity and independence as appropriate.

6. What evidence should an auditor collect?

Evidence may include policies, procedures, training records, inspection results, risk assessments, permits, monitoring data, interviews, and direct observations. Photographs or attachments may also support findings when appropriate.

7. What is the difference between an integrated audit and separate audits?

An integrated audit reviews shared processes and multiple management systems within a coordinated audit. Separate audits focus on individual systems. An integrated approach can reduce duplication, provided it still covers every applicable requirement.

8. How should auditors record a nonconformity?

They should state the requirement, describe the evidence, and explain the gap clearly. The organization should then address the issue, investigate its cause where needed, assign corrective action, and verify effectiveness.

9. Can eAuditor help manage IMS audit findings?

eAuditor Audits & Inspections can support digital checklists, evidence capture, audit records, and corrective action workflows. Teams should configure their process to match the organization’s audit criteria and confirm which features fit their needs.

10. Does using a digital IMS checklist guarantee ISO certification?

No. A digital checklist can support audit planning and recordkeeping, but it does not guarantee certification. The organization must meet all applicable requirements and complete the relevant certification process with an appropriate certification body.

Final Thoughts

An Integrated Management System Audit Checklist helps organizations review shared controls, check standard-specific requirements, and find opportunities to improve. When teams plan the audit well, collect clear evidence, and follow up on findings, they can make their management systems more consistent and effective.

eAuditor Audits & Inspections can support this work with digital checklists, organized findings, and corrective action tracking. Start with a clear audit scope, tailor the checklist to your needs, and use every audit to help your team improve.