HSE Internal Audit Checklist 2: A Complete Guide

Health, Safety, and Environment (HSE) management plays a major role in keeping workplaces safe, compliant, and responsible. However, policies alone do not prove that an HSE system works. Organizations need regular internal audits to check whether safety controls work in practice, employees follow procedures, environmental controls remain effective, and management addresses problems on time. An HSE Internal Audit Checklist provides a clear way to review these areas. It helps auditors examine workplace conditions, risk assessments, legal requirements, emergency plans, training, PPE, environmental controls, incident management, and corrective actions.

A good internal audit also looks beyond obvious hazards. For example, an organization may have a strong safety policy but still have outdated risk assessments, weak contractor controls, poor housekeeping, or overdue corrective actions.

With eAuditor Audits & Inspections, organizations can digitize this entire audit process. Auditors can complete inspections on mobile devices, capture photos and notes, record non-conformities, assign corrective actions, and generate reports. eAuditor’s current HSE and EHS resources cover areas such as hazard identification, risk control, emergency preparedness, PPE, environmental management, waste, chemicals, and workplace safety.

What Is an HSE Internal Audit Checklist?

An HSE Internal Audit Checklist is a structured set of questions used to evaluate an organization’s health, safety, and environmental management practices.

It helps auditors compare actual workplace practices against:

• Company policies.
• Internal procedures.
• Risk assessments.
• Legal requirements.
• Applicable standards.
• Safety objectives.
• Environmental controls.
• Previous audit findings.

Unlike a simple workplace inspection, an internal HSE audit looks at both conditions and management systems.

For example, an auditor may not only check whether PPE is available. The audit may also ask whether:

• PPE requirements are defined.
• Employees receive suitable PPE.
• Employees receive training.
• PPE is inspected.
• Damaged PPE is replaced.
• Supervisors monitor PPE use.
• Records are maintained.

Therefore, an HSE internal audit helps identify system weaknesses as well as physical hazards.

Why Is an HSE Internal Audit Important?

A workplace can change quickly.

New equipment may introduce new hazards. A process may change. Employees may join or leave. Contractors may arrive. Chemicals may change. Environmental requirements may be updated.

As a result, an HSE system that worked well last year may no longer provide enough control.

Regular internal audits help organizations:

• Identify hazards.
• Check compliance.
• Review risk assessments.
• Verify safety controls.
• Check employee awareness.
• Review emergency preparedness.
• Assess environmental controls.
• Find repeated problems.
• Track corrective actions.
• Improve safety performance.
• Support continual improvement.

eAuditor’s Health and Safety Audit Checklist emphasizes identifying hazards early, checking safety controls, documenting findings, assigning actions, and tracking results.

Key Areas of an HSE Internal Audit

A strong HSE audit should reflect the organization’s actual risks. However, several areas should normally be considered.

1. HSE Policy and Leadership

Start by reviewing management commitment.

Check:

• HSE policy is documented.
• Management approves the policy.
• Employees know the policy.
• HSE responsibilities are defined.
• HSE objectives are established.
• Resources are available.
• Management reviews HSE performance.
• Leaders participate in safety activities.

The eAuditor ISO 45001 OHSMS audit template includes management commitment, leadership, defined responsibilities, worker participation, objectives, incident reporting, resources, and management review.

2. Legal and Regulatory Compliance

Review the organization’s legal requirements.

Check:

• Applicable laws are identified.
• Licenses are current.
• Permits are available.
• Regulatory inspections are tracked.
• Compliance obligations are documented.
• Required records are maintained.
• Non-compliance issues are addressed.

Do not assume that compliance remains unchanged. Requirements and operations can change over time.

3. Hazard Identification

Check whether the organization identifies hazards systematically.

Review:

• Hazard registers.
• Workplace inspections.
• Job Safety Analyses.
• Task risk assessments.
• Process risk assessments.
• Chemical hazards.
• Equipment hazards.
• Ergonomic hazards.
• Environmental hazards.

The eAuditor HSE Site Audit Checklist includes hazard identification, risk assessment, hazard registers, and control measures as core audit areas.

4. Risk Assessment and Controls

Finding hazards is only the first step.

Check whether the organization:

• Assesses risk.
• Prioritizes high-risk hazards.
• Implements controls.
• Reviews control effectiveness.
• Updates assessments after changes.
• Communicates controls to employees.
• Monitors residual risk.

The eAuditor ISO 45001 audit template specifically checks whether risks are assessed regularly, controls are implemented, their effectiveness is monitored, and risk assessments are reviewed and updated.

5. Workplace Conditions

Walk through the workplace and check actual conditions.

Inspect:

• Floors.
• Walkways.
• Stairs.
• Lighting.
• Ventilation.
• Housekeeping.
• Storage.
• Access routes.
• Signs.
• Emergency exits.
• Work areas.

The eAuditor EHS checklist includes checks for aisles, exits, egress routes, emergency lighting, floors, doorways, and workplace access.

6. Personal Protective Equipment

Review the PPE system.

Check:

• PPE requirements are defined.
• Suitable PPE is available.
• PPE is correctly selected.
• PPE fits workers.
• PPE is maintained.
• Damaged PPE is replaced.
• Employees receive training.
• Supervisors monitor PPE use.

PPE should support other controls rather than replace stronger controls where those are reasonably available.

7. Machinery and Equipment Safety

Inspect equipment and safety devices.

Check:

• Machine guards.
• Emergency stops.
• Safety interlocks.
• Warning systems.
• Maintenance records.
• Inspection records.
• Safe operating procedures.
• Lockout/Tagout controls.
• Operator training.

The eAuditor ISO 45001 template includes safe handling and storage of hazardous materials, contractor safety, change management, and internal audit processes, while HSE maintenance resources include equipment guards, emergency stops, alarms, and lockout/tagout controls.

8. Electrical Safety

Review electrical safety controls.

Check:

• Electrical panels.
• Wiring.
• Grounding.
• Circuit protection.
• Cable condition.
• Portable equipment.
• Extension leads.
• Electrical inspection records.
• Warning labels.
• Access to electrical equipment.

Record defects immediately.

9. Fire and Emergency Safety

Check whether the workplace can respond effectively to emergencies.

Review:

• Emergency plans.
• Fire alarms.
• Fire extinguishers.
• Emergency exits.
• Emergency lighting.
• Assembly points.
• Emergency contacts.
• First aid.
• Evacuation procedures.
• Emergency drills.

The eAuditor EHS checklist includes emergency information, fire safety, evacuation arrangements, and related workplace controls.

10. Chemical Management

Review chemical controls.

Check:

• Chemical inventory.
• Safety Data Sheets.
• Labels.
• Storage.
• Segregation.
• Secondary containment.
• Spill kits.
• PPE.
• Exposure controls.
• Disposal procedures.

Chemical management should cover the full lifecycle from receipt through disposal.

11. Occupational Health

An HSE audit should also consider employee health.

Review:

• Noise exposure.
• Dust exposure.
• Chemical exposure.
• Heat stress.
• Ergonomics.
• Manual handling.
• Workplace hygiene.
• Health surveillance.
• First aid.
• Welfare facilities.

eAuditor’s EHS framework includes occupational health areas such as exposure monitoring, medical surveillance, ergonomics, hygiene, welfare facilities, and first aid.

12. Environmental Management

The environmental part of an HSE audit should match the organization’s activities.

Check:

• Waste segregation.
• Hazardous waste.
• Chemical storage.
• Spill prevention.
• Wastewater.
• Air emissions.
• Dust control.
• Energy use.
• Water management.
• Environmental permits.
• Environmental monitoring.

The eAuditor EHS Checklist covers waste management, air and emission control, water management, chemicals, spill controls, and sustainability measures.

13. Contractor Management

Contractors can introduce additional risks.

Check:

• Contractor prequalification.
• HSE requirements.
• Induction.
• Competency.
• Permits.
• Risk assessments.
• PPE.
• Supervision.
• Incident reporting.
• Contractor performance.

Make sure contractors follow site requirements rather than assuming that their own procedures are enough.

14. Training and Competence

Review whether workers have the knowledge required for their jobs.

Check:

• Training matrix.
• New employee induction.
• Task-specific training.
• Emergency training.
• PPE training.
• Equipment training.
• Refresher training.
• Competency assessments.
• Training records.

The eAuditor ISO 45001 audit template includes training, awareness, communication, worker participation, and feedback on health and safety issues.

15. Incident and Near-Miss Management

Review how the organization handles incidents.

Check:

• Incident reporting procedure.
• Near-miss reporting.
• Investigation process.
• Root cause analysis.
• Corrective actions.
• Lessons learned.
• Management review.
• Trend analysis.

An audit should check whether the organization learns from incidents rather than simply recording them.

16. Corrective Action Management

Review previous findings.

Check:

• Actions are documented.
• Owners are assigned.
• Deadlines are defined.
• Evidence is provided.
• Actions are verified.
• Overdue actions are escalated.
• Effectiveness is checked.

This is one of the most important parts of an internal audit.

17. Document and Record Control

Check whether HSE information is controlled.

Review:

• Policies.
• Procedures.
• Risk assessments.
• Inspection records.
• Training records.
• Permits.
• Incident reports.
• Environmental records.
• Audit reports.

Outdated documents can lead to inconsistent work practices.

18. Continual Improvement

Finally, determine whether the organization learns from its HSE data.

Look for:

• Audit trends.
• Incident trends.
• Repeated findings.
• Employee feedback.
• Corrective action performance.
• Management review outputs.
• Improvement projects.

The goal is not simply to pass an audit. The goal is to make the workplace safer over time.

HSE Internal Audit Checklist

Use the following checklist as a practical starting point.

General Information

• Organization name recorded.
• Site location recorded.
• Audit date recorded.
• Auditor identified.
• Department identified.
• Audit scope defined.
• Audit criteria defined.
• Previous audit reviewed.
• Relevant documents available.

HSE Management

• HSE policy is documented.
• Policy is communicated.
• HSE responsibilities are defined.
• HSE objectives are established.
• Management reviews HSE performance.
• Adequate HSE resources are available.
• Workers can raise HSE concerns.

Legal Compliance

• Applicable legal requirements identified.
• Required permits are current.
• Licenses are current.
• Regulatory inspections are tracked.
• Compliance records are maintained.
• Legal non-conformities are addressed.

Hazard Identification

• Hazards are identified.
• Risk assessments are current.
• Job Safety Analyses are completed where required.
• Hazard registers are maintained.
• New hazards are reported.
• Risk controls are documented.
• Controls are reviewed for effectiveness.

Workplace Conditions

• Floors are safe.
• Walkways are clear.
• Stairs are safe.
• Lighting is adequate.
• Ventilation is adequate.
• Housekeeping is acceptable.
• Storage is safe.
• Emergency exits are clear.
• Safety signs are visible.

PPE

• PPE requirements are defined.
• Required PPE is available.
• PPE is suitable for the task.
• PPE is in good condition.
• Workers receive PPE training.
• PPE use is monitored.
• Damaged PPE is replaced.

Machinery and Equipment

• Machine guards are installed.
• Emergency stops function.
• Safety interlocks function.
• Equipment is maintained.
• Inspection records are current.
• Lockout/Tagout procedures are available.
• Operators are trained.
• Safe operating procedures are available.

Electrical Safety

• Electrical equipment is inspected.
• Cables are in good condition.
• Electrical panels are accessible.
• Panels are labeled.
• Grounding is adequate.
• Circuit protection is maintained.
• Extension leads are controlled.
• Electrical defects are corrected.

Fire and Emergency Safety

• Emergency plan is current.
• Fire alarms are tested.
• Fire extinguishers are accessible.
• Emergency exits are clear.
• Emergency lighting is functional.
• Assembly points are identified.
• Emergency contacts are current.
• Fire drills are completed.
• First aid arrangements are adequate.

Chemical Safety

• Chemical inventory is current.
• SDS are available.
• Chemical containers are labeled.
• Chemicals are stored safely.
• Incompatible chemicals are separated.
• Spill kits are available.
• Secondary containment is provided.
• Employees are trained.
• Chemical waste is managed correctly.

Occupational Health

• Exposure risks are identified.
• Noise risks are controlled.
• Dust exposure is controlled.
• Chemical exposure is controlled.
• Ergonomic risks are assessed.
• Manual handling risks are controlled.
• Welfare facilities are adequate.
• First aid facilities are available.
• Health surveillance is provided where required.

Environmental Management

• Waste is segregated.
• Hazardous waste is controlled.
• Waste containers are labeled.
• Spill controls are available.
• Chemical storage is secure.
• Waste disposal records are maintained.
• Emissions are controlled.
• Water pollution risks are controlled.
• Environmental permits are current.

Contractor Management

• Contractors are approved.
• Contractor HSE requirements are defined.
• Contractor induction is completed.
• Competency is verified.
• Contractor risk assessments are reviewed.
• Permits are issued where required.
• Contractor PPE is appropriate.
• Contractor performance is monitored.

Training

• HSE training matrix is current.
• New employees receive induction.
• Job-specific training is completed.
• Emergency training is provided.
• PPE training is provided.
• Equipment training is documented.
• Refresher training is completed.
• Competency is verified.

Incident Management

• Incidents are reported.
• Near misses are reported.
• Investigations are completed.
• Root causes are identified.
• Corrective actions are assigned.
• Lessons learned are communicated.
• Incident trends are reviewed.

Corrective Actions

• Previous findings are reviewed.
• Corrective actions have owners.
• Due dates are defined.
• Evidence is attached.
• Completed actions are verified.
• Overdue actions are escalated.
• Effectiveness is evaluated.

Final Audit Review

• All audit sections completed.
• Non-conformities recorded.
• Observations recorded.
• Positive findings recorded.
• Risk levels assigned.
• Corrective actions created.
• Audit conclusions documented.
• Auditor signs off.
• Responsible manager signs off.

How to Conduct an HSE Internal Audit

A successful internal audit should follow a clear process.

Step 1: Define the Audit Scope

First, decide what the audit will cover.

The scope may include:

• One department.
• One facility.
• A specific process.
• A project.
• The complete HSE management system.

Also define the audit criteria and objectives.

Step 2: Review Previous Information

Before visiting the site, review:

• Previous audit reports.
• Incident records.
• Near-miss reports.
• Risk assessments.
• Legal registers.
• Training records.
• Corrective actions.
• Inspection results.

This helps the auditor focus attention on known weaknesses.

Step 3: Prepare the Checklist

Customize the checklist to match the organization’s risks.

For example, a manufacturing facility may need more machinery and chemical questions, while a construction project may require stronger controls for work at height, excavation, lifting, and temporary works.

Step 4: Conduct the Opening Meeting

Explain:

• Audit purpose.
• Scope.
• Schedule.
• Audit criteria.
• People involved.
• Reporting process.

This helps everyone understand what the audit will cover.

Step 5: Review Documents

Check policies, procedures, risk assessments, training records, permits, inspection records, and previous findings.

However, do not rely only on documents.

Step 6: Walk the Workplace

Observe actual conditions.

Talk to employees. Check equipment. Look at storage. Review PPE use. Inspect emergency arrangements.

This comparison between written procedures and actual work is often where useful findings appear.

Step 7: Record Findings

Document findings clearly.

For each significant finding, capture:

• Requirement.
• Observation.
• Evidence.
• Risk.
• Location.
• Responsible person.
• Recommended action.

Step 8: Classify Findings

Use a consistent approach to classify:

• Conformities.
• Observations.
• Minor non-conformities.
• Major non-conformities.
• Opportunities for improvement.

Your classification system should match your organization’s audit procedure.

Step 9: Assign Corrective Actions

Do not leave findings without ownership.

Assign each action to a responsible person and establish a reasonable deadline.

Step 10: Conduct the Closing Meeting

Explain the main findings and discuss the required actions.

Give managers an opportunity to clarify information and confirm responsibilities.

Step 11: Issue the Audit Report

Create a clear report containing:

• Audit scope.
• Audit criteria.
• Findings.
• Evidence.
• Risk levels.
• Corrective actions.
• Recommendations.
• Overall conclusion.

Step 12: Verify Corrective Actions

Follow up after the audit.

Check whether actions were completed and whether they actually addressed the underlying problem.

Common HSE Internal Audit Problems

Outdated Risk Assessments

A risk assessment may remain unchanged even after equipment or processes change.

Therefore, audit teams should check whether assessments reflect current operations.

Weak Employee Awareness

A procedure may exist, but workers may not know about it.

Talk to employees during the audit to verify actual awareness.

Poor Corrective Action Follow-Up

Organizations often identify problems but fail to close them.

Digital action tracking can help maintain accountability.

Missing Evidence

A company may say that training, inspections, or maintenance occurred without having clear records.

Good audit systems make evidence easier to capture and retain.

Repeated Findings

Repeated findings often indicate a deeper system problem.

Instead of fixing the same issue repeatedly, investigate why it keeps returning.

Poor Contractor Control

Contractors may work under different standards if site requirements are not clearly communicated.

Therefore, contractor management should form part of the HSE audit.

Weak Environmental Controls

Some organizations focus heavily on worker safety but overlook waste, emissions, chemicals, water, and pollution risks.

An HSE audit should cover all three areas: health, safety, and environment.

How eAuditor Audits & Inspections Handles HSE Internal Audits

eAuditor Audits & Inspections helps turn an HSE internal audit into a structured digital process.

Build a Custom HSE Audit Checklist

Teams can create a checklist based on their:

• HSE policy.
• Risk profile.
• Legal requirements.
• Internal procedures.
• Industry.
• Site conditions.
• Audit objectives.

The eAuditor ISO 45001 OHSMS audit template provides a useful foundation for management commitment, risk control, emergency preparedness, PPE, training, contractor management, and internal auditing.

Conduct Audits from Mobile Devices

Auditors can complete checks while walking through the workplace.

Instead of writing findings on paper and transferring them later, they can record observations directly during the audit.

Capture Photos and Evidence

A photograph can make a finding much easier to understand.

Auditors can document:

• Unsafe equipment.
• Poor housekeeping.
• Blocked exits.
• Chemical storage.
• PPE problems.
• Electrical hazards.
• Environmental issues.
• Corrective work.

eAuditor’s EHS workflow supports digital findings with photographic evidence and compliance scoring.

Record Non-Conformities

Auditors can document non-conformities and observations directly within the checklist.

This helps create a clear link between the audit question and the finding.

Assign Corrective Actions

Each significant finding can become an action with:

• Responsible person.
• Priority.
• Due date.
• Required correction.
• Supporting evidence.
• Completion status.

Track Findings to Closure

An internal audit should not end when the report is issued.

eAuditor can help teams monitor corrective actions and verify that findings are addressed.

Its HSE maintenance audit workflow also describes assigning corrective actions, generating reports, and using analytics to track compliance and recurring issues.

Generate Audit Reports

After completing the audit, teams can generate structured reports containing findings, evidence, observations, and actions.

This reduces manual report preparation.

Review Trends

When audits are repeated digitally, organizations can compare results over time.

This can help identify:

• Repeated findings.
• High-risk departments.
• Overdue actions.
• Recurring hazards.
• Areas with improving performance.

Standardize Audits Across Sites

Organizations with multiple facilities can use standardized audit templates.

At the same time, they can customize sections for local risks.

This creates a more consistent HSE audit approach across the organization.

Benefits of a Digital HSE Internal Audit Checklist

Better Consistency

Auditors follow a defined structure instead of relying on memory.

Faster Audits

Digital forms reduce paper handling and manual data entry.

Better Evidence

Photos, notes, documents, and other evidence can stay connected to findings.

Faster Corrective Action

Problems can be assigned immediately.

Clear Accountability

Every action can have an owner and due date.

Easier Reporting

Audit reports can be created from the inspection data.

Better Trend Analysis

Repeated findings become easier to identify.

Stronger Management Visibility

Managers can see the status of HSE findings and corrective actions more clearly.

Best Practices for HSE Internal Audits

Keep the Audit Risk-Based

Spend more time on activities that can cause serious harm or environmental impact.

Avoid Checkbox Auditing

Do not simply mark Yes or No.

Ask questions. Observe work. Review evidence.

Speak With Employees

Employees often know about practical problems that documents do not show.

Compare Procedures With Reality

Check whether people actually follow the procedures that the organization says it uses.

Capture Strong Evidence

Use photos, documents, records, measurements, and observations where appropriate.

Focus on Root Causes

If the same finding appears repeatedly, investigate the underlying management problem.

Keep Corrective Actions Clear

A good action should explain what needs to change and who needs to do it.

Set Realistic Deadlines

Critical issues may require immediate action, while lower-risk improvements may need planned completion dates.

Verify Effectiveness

Closing an action is not the same as proving that the problem is solved.

Share Lessons Learned

Use audit results to improve procedures, training, risk assessments, and workplace conditions.

10 Frequently Asked Questions About HSE Internal Audit Checklists

1. What is an HSE Internal Audit Checklist?

It is a structured set of questions used to assess an organization’s health, safety, and environmental management systems, workplace conditions, compliance, and corrective actions.

2. What does HSE stand for?

HSE stands for Health, Safety, and Environment.

3. What should an HSE internal audit cover?

It should cover areas such as leadership, legal compliance, hazard identification, risk assessment, workplace safety, PPE, emergency preparedness, occupational health, environmental controls, training, incidents, contractors, and corrective actions.

4. How often should an HSE internal audit be performed?

The frequency should reflect the organization’s risks, legal requirements, audit program, previous findings, and operational changes. Higher-risk activities may require more frequent reviews.

5. Who should conduct an HSE internal audit?

A competent and sufficiently independent auditor should conduct the audit. The required level of knowledge depends on the complexity and risks of the organization.

6. What is the difference between an HSE inspection and an HSE internal audit?

An inspection usually focuses more on workplace conditions and immediate hazards. An internal audit looks more broadly at whether the HSE management system and its controls are planned, implemented, maintained, and effective.

7. Should an HSE audit include environmental controls?

Yes. The environmental part should reflect the organization’s activities and risks. It may include waste, emissions, chemicals, wastewater, spills, energy, water, and environmental compliance.

8. Can eAuditor be used for HSE internal audits?

Yes. eAuditor supports digital HSE and EHS inspections, evidence capture, corrective action management, reporting, and trend analysis.

9. Can I customize an HSE Internal Audit Checklist in eAuditor?

Yes. Teams can build or adapt checklists to match their HSE policies, risks, processes, standards, and site requirements.

10. Why should HSE audit findings be tracked to closure?

Because finding a problem does not remove the risk. Tracking corrective actions helps ensure that responsible people address the issue and that the completed action is verified.

Final Thoughts

An HSE Internal Audit Checklist gives organizations a practical way to check whether their health, safety, and environmental systems work in real conditions.

However, an effective audit should be more than a list of tick boxes. It should connect policies with workplace observations, employee feedback, records, evidence, risk controls, and corrective actions.

A strong audit process follows a simple cycle:

Plan → Audit → Record → Act → Verify → Improve

With eAuditor Audits & Inspections, organizations can manage this cycle digitally. Auditors can complete inspections from mobile devices, capture photos and observations, record non-conformities, assign actions, generate reports, and track findings through to closure.

As a result, HSE teams gain better visibility into workplace risks and can focus their time on meaningful improvements.

The goal is not simply to complete an audit.

The goal is to use every audit to make the workplace safer, healthier, more compliant, and more environmentally responsible.

Verified eAuditor Resources

• HSE Site Audit Checklist – eAuditor
• Environmental, Health, and Safety (EHS) Checklist – eAuditor Template
• Environmental, Health, and Safety (EHS) Checklist – eAuditor
• ISO 45001:2018 Occupational Health and Safety Management System Audit Template – eAuditor
• Health and Safety Audit Checklist – eAuditor
• Safety Audits Checklist – eAuditor
• General Workplace Health and Safety Checklist – eAuditor
• HSE Maintenance Audit – eAuditor