Introduction
Manufacturing plants generate a lot of paperwork during an EHS audit: checklists, signed corrective action forms, photos of a fixed guard. Yet the same lockout/tagout gap or chemical labeling issue often resurfaces the next time around.
In 2024, U.S. manufacturers recorded 2.7 recordable injury and illness cases per 100 full-time workers, according to BLS data. That number doesn't move much when audits are run as a paperwork exercise instead of a genuine system check.
This guide is written for EHS managers, plant leaders, quality teams, operations managers, and internal auditors responsible for OSHA, EPA, permit, and management-system readiness.
Many of you deal with audits that produce long lists of findings but no lasting fix. The scope runs too broad, the evidence stays vague, or nobody owns the corrective action.
We'll walk through the full lifecycle: planning the audit, verifying documents and floor conditions, and writing findings that hold up to scrutiny. You'll also see how to assign corrective actions and close them with real evidence, not just a signature on a due date.
Key Takeaways
- Effective audits compare regulatory requirements and internal controls against actual floor conditions, not just paperwork.
- Audit quality depends on defined scope, competent auditors, and representative evidence.
- Marking an action "complete" doesn't close a finding; effectiveness must be verified.
- Manufacturing recorded 2.7 recordable cases per 100 workers in 2024, a benchmark worth tracking internally.
- Single-shift sampling creates false confidence; evidence needs to span lines, shifts, and processes.
What Is an EHS Audit and Why Does Manufacturing Need One?
An EHS audit evaluates whether a facility's environmental, health, and safety controls actually work, not just whether conditions look acceptable on the day someone walks the floor. It tests compliance, system implementation, operational controls, and risk-management effectiveness together.
Audit vs. Inspection vs. Incident Investigation
These three activities get confused constantly, but they answer different questions:
| Activity | What it checks |
|---|---|
| Inspection | Specific hazards or conditions at a point in time |
| EHS audit | The broader system: records, responsibilities, implementation |
| Incident investigation | Why a particular event happened and what contributing causes need to be fixed |
A clean inspection result doesn't mean your documentation, training, or management-of-change process would survive an audit.
Audit Types Manufacturers Rely On
Most manufacturing programs use some combination of:
- Compliance audits against OSHA, EPA, permit, and state requirements
- Management-system audits against ISO 14001 or ISO 45001
- Internal audits run by the plant's own team
- External or third-party audits, including certification assessments
- Focused audits scoped to a single hazard, permit, or process
Done well, manufacturing EHS audits:
- Catch hazards before an incident occurs
- Validate that operational controls are actually working
- Support permit standing, customer requirements, and certification renewals
Where Audit Criteria Come From
Not every requirement applies to every plant. Common categories include:
- OSHA general-industry standards such as machine guarding, lockout/tagout, and hazard communication
- Hazardous-waste rules under RCRA, plus air and water permits
- EPCRA reporting thresholds
- State-specific obligations like California's written injury and illness prevention program
QMS Learning's EHS Fundamentals course covers how these categories map to ISO 14001, ISO 45001, and EPA reporting obligations. That background helps before you start building an audit plan.
How to Plan, Conduct, and Close an EHS Audit
Define Scope, Objectives, and Criteria
Write down your objective, scope, criteria, audit period, team, schedule, sampling approach, and expected deliverables before anything else. Build your criteria from:
- Current federal and state requirements and permits
- Internal procedures and risk assessments
- Prior findings and incident or near-miss trends
- Customer or certification requirements
- Recent changes to equipment, chemicals, processes, or staffing
Choose Your Auditors and Gather Evidence First
Auditors need to understand manufacturing hazards and the specific regulatory or management-system criteria involved. Internal teams work well for routine audits; bring in an external perspective when independence is a concern or when the program hasn't been audited by anyone outside the plant.
Before the opening meeting, gather:
- Permits, training records, and inspection or maintenance logs
- Chemical inventories, SDS records, and waste manifests
- Emissions data, incident history, and emergency drill records
- Contractor files and open corrective actions from prior audits
Then run an opening meeting covering scope confirmation, interview expectations, safety requirements, and how disputed evidence or an imminent hazard will be escalated.
Walk the Floor, Review Documents, and Interview Staff
This is where most of the real work happens, and it breaks into three steps:
- Review documented information. Compare procedures against current regulations and actual responsibilities. Flag obsolete revisions, missing approvals, and controls that exist on paper but have no implementation record behind them.
- Verify floor conditions. Walk production, maintenance, warehouse, laboratory, utility, waste-storage, and contractor areas. Look at machine guarding, lockout/tagout, PPE use, chemical handling, forklifts, housekeeping, spill controls, and permit-related conditions.
- Interview and sample broadly. Talk to operators, supervisors, maintenance staff, and environmental personnel with open questions. Sample multiple shifts, lines, and permits so your conclusion doesn't rest on one favorable example.
Write Findings and Issue the Report
Every finding needs to tie back to a specific requirement or internal criterion, not a general impression. State the objective evidence, including location and sample context, describe the condition factually, and explain the risk without speculating about intent.
Hold a closing discussion to confirm factual accuracy, not to negotiate away a valid finding. Separate nonconformities from observations, opportunities for improvement, and immediate hazards. Issue a report with priorities, owners, due dates, and the evidence required to close each item.
Close Findings With Verified Corrective Action
A finding closes when the evidence shows the action addressed the root cause and is still working, not when a due date passes. That requires:
- Containment where needed
- Root-cause analysis for systemic or repeat issues
- Implementation evidence
- A defined effectiveness check over an appropriate period
It helps to separate three terms that get blurred constantly:
- Correction fixes the immediate problem, like relabeling one mislabeled drum.
- Corrective action eliminates the cause, such as retraining and revising the labeling procedure after repeat lockout/tagout documentation gaps.
- Preventive improvement addresses a potential issue before it becomes a finding at all.
This is also where capability tools earn their keep. QMS Learning's founder spent 20 years writing and closing findings on aerospace audit floors, and that practitioner background shaped how the platform's AI Workbench selects between 5-Why, gap analysis, and CAPA methods based on the actual problem.
The Manager Dashboard tracks owners and due dates, and the Document Management System controls revisions and assembles time-stamped evidence into a single export. None of that replaces competent audit judgment; it just removes friction from capturing it.
Manufacturing Audit Scope, Evidence, and Risk Factors
Scope works on three levels: facility and process boundaries, EHS subject areas, and the evidence period or sampling window. Too broad, and you get shallow findings. Too narrow, and you miss the interfaces between production, maintenance, purchasing, and environmental functions where problems actually hide.
Areas Manufacturing Audits Typically Cover
| Category | Examples |
|---|---|
| Worker safety | Machine guarding, hazardous energy control, powered industrial trucks, PPE, confined spaces, contractor control |
| Environmental compliance | Hazardous waste, chemical storage, spill prevention, air emissions, stormwater, record retention |
| Management-system controls | Risk assessment, training, management of change, document control, corrective action, management review |
What Makes Evidence Strong
Strong evidence is current, traceable, and representative. It links directly to a requirement and gets corroborated through records, observation, or interviews, not a verbal assurance from a supervisor.
Once evidence holds up, risk ranking decides what gets fixed first. Weigh:
- Severity, exposure, and likelihood
- Legal or permit significance
- Recurrence history
- How many employees or processes are affected
A complete finding captures the criterion, objective evidence, condition, risk, classification, owner, due date, and how closure will be verified.
Recurrence is a real warning sign. In December 2025, OSHA cited a transformer manufacturer in Idaho for 53 serious and repeat violations, including machine-guarding and fall-hazard failures, after inspectors found crane hazards similar to issues flagged in two inspections the prior year.
Repeat findings at the same facility usually point to a weak operational control, not bad luck.
Audit effectiveness also shifts with production schedule and shift coverage, contractor involvement, recent process changes, and auditor independence. Treat the annual audit as one piece of assurance, not the whole program. Pair it with routine inspections, permit reviews, and management-of-change reviews.
Common Issues, Misconceptions, and Audit Limitations
A report with zero findings isn't automatically a success. It might just reflect weak scope, thin sampling, or a team afraid to escalate.
Common failure patterns in manufacturing audits include:
- Checklist-only auditing with no document or interview verification
- Outdated legal registers that miss recent regulatory changes
- Interviewing only managers instead of the people doing the work
- Accepting "we always do it this way" as objective evidence
- Writing vague findings with no specific criterion or location
- Assigning corrective actions to people without the authority to fix them
- Closing actions without checking whether they actually worked
A due date is not proof of closure. Training alone rarely fixes a root cause rooted in design, staffing, maintenance, or procedure usability.
Audits are samples, not guarantees. Conditions change between shifts, and requirements vary by jurisdiction.
Voluntary self-auditing has limits too. Under EPA's Audit Policy, penalty relief generally requires disclosure within 21 days of discovery and correction within 60 days. Discovery through legally required monitoring doesn't count as voluntary.
Escalate imminent danger or a release immediately. Don't wait for the final report.
Conclusion
The EHS audit lifecycle holds together like this:
- Define criteria and scope
- Gather evidence on the floor
- Verify conditions and behavior
- Write objective findings
- Assign proportionate corrective actions
- Independently verify that closure worked
Audit value comes from stronger operational control and real organizational capability. A report that sits in a binder does not deliver that.
Start by mapping your facility's highest-risk processes and recurring findings to an audit plan. Then equip your team with the training, methods, controlled documents, and evidence workflow to act on whatever the audit turns up.
Frequently Asked Questions
What is an EHS audit?
An EHS audit is a structured review of environmental, health, and safety requirements, controls, records, and actual practices. Findings and corrective actions are documented based on objective evidence, not impressions.
What are the four types of audits?
Classifications vary, but common categories are compliance, management-system, internal, and external or third-party audits. Facilities also run focused audits for a single hazard, permit, process, or obligation.
How often should a manufacturing facility conduct an EHS audit?
Frequency should reflect risk level, regulatory or certification requirements, prior findings, incidents, and process changes. Formal audits are distinct from the routine inspections and monitoring that happen between them.
Who should conduct an EHS audit?
Competent internal auditors, cross-functional internal teams, or qualified external auditors can all run an audit. Whoever does it needs regulatory knowledge, manufacturing experience, and independence from the activity being reviewed.
What are common EHS audit findings in manufacturing?
Frequent findings include incomplete training or inspection records, machine-guarding and lockout/tagout gaps, chemical or waste-control issues, outdated procedures, weak contractor controls, and overdue corrective actions. Base every finding on verified evidence, not assumptions.
How do you close an EHS audit finding?
Closure requires containment where needed, root-cause analysis, implementation of the corrective action, and objective evidence that it worked. An appropriate reviewer should approve closure, and the record should be retained in a controlled system.