Table of Contents
- Prioritise health and safety audit findings
- Protect people before the permanent fix
- Assign owners and agree workable deadlines
- Make the change work in practice
- Verify results and keep actions on track
- Frequently Asked Questions
Picture an operations manager on a busy Monday, opening an audit report with a dozen findings. Some are about blocked walkways, some about missing records, one about a machine guard. Where do you start? A health and safety audit action plan turns those findings into progress: prioritise by risk, protect people now, assign owners, agree deadlines and check that each improvement actually works.
Prioritise health and safety audit findings
Our illustrative manager’s first instinct might be to clear the quick wins. A better starting point is to understand what each finding means, what requirement sits behind it and how much harm it could cause in real working conditions.
Understand what the report found
An audit report is where the corrective work of the audit process starts. It does not show that a risk is under control. Salusphere Global describes a health and safety audit as a test of management arrangements and working practice against defined criteria. A risk assessment identifies hazards and controls for particular work, while a health and safety inspection checks conditions at one moment in time.
An audit can test whether assessments and controls are in place, but it cannot replace them, as our guide to health and safety audits versus risk assessments explains. A useful report records its scope, evidence, findings and recommendations. Each finding should say what the auditor observed, measured or could not verify, rather than rely on a broad label such as “poor housekeeping”.
Clarify the requirement and the exposure
The requirement behind a finding may be legislation, an internal procedure, a contract or a voluntary standard. A recommendation is not automatically a statutory duty. Salusphere Global advises separating identified legal breaches from management weaknesses and optional improvements, so you know what kind of response each one needs.
Next, establish who could be harmed, how exposure happens and whether current controls work. In Great Britain, regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires a suitable and sufficient risk assessment, and employers with five or more employees must record its significant findings. If evidence or criteria are unclear, ask the safety auditor. Record any disagreement with supporting evidence, and give each action a reference linked to its original finding.
Rank actual risk before easy tasks
Prioritising audit findings starts with the credible severity and likelihood of harm under actual working conditions, not report order or convenience. Consider how often and how long people are exposed, how many are affected and whether anyone is particularly vulnerable. Contractors and visitors count too.
Absent, unreliable or bypassed controls, or a specific legal deadline, can raise urgency. A “low” rating or a paperwork description does not prove the operational health and safety risk is low. A risk matrix can help, but record the reasoning behind each score. HSE prescribes no universal scoring system, and Northern Ireland employers should check their own legislation and HSENI guidance.
Protect people before the permanent fix
Some findings cannot wait for the action plan. Back at our manager’s desk, the unreliable machine guard needs a decision today, not a date in next month’s tracker.
Decide whether work can continue
An action-plan deadline does not justify continued exposure to an inadequately controlled hazard. If an activity cannot be done safely, stop or restrict it, and isolate equipment or areas where appropriate. Regulation 8 of the Management of Health and Safety at Work Regulations 1999 provides for procedures that let workers facing serious, imminent and unavoidable danger stop work and move to safety.
Work should not resume while that danger remains, except in properly substantiated exceptional cases. Equally, not every finding calls for a shutdown: the decision depends on the actual danger, the effective controls available and the relevant requirements. Record why work was stopped, restricted or allowed to continue.
Set and monitor interim safeguards
Interim protection might mean restricting access, arranging safe alternative work or using a suitable temporary operating method. For each interim control, record why it is suitable, who implements and checks it, when it will be reviewed and when it would stop being acceptable.
If the permanent action slips, escalate and reassess the interim protection rather than extending the date while exposure stays the same. Salusphere Global recommends recording these safeguards for as long as the lasting fix is being arranged.
Know when PPE is insufficient
A warning sign, verbal instruction or PPE should not automatically stand in for stronger, reasonably practicable controls. Schedule 1 to the 1999 Regulations prioritises avoiding risks, tackling them at source and collective protection over individual protection. HSE’s hierarchy of controls helps you choose a suitable combination, without requiring every control type in sequence.
In our illustrative example, the unreliable guard interlock calls for an immediate decision on safe operation. If the machine cannot be used safely, keep it out of use until a competent person verifies the repair and its safety function.
Assign owners and agree workable deadlines
With people protected, the plan needs ownership and realistic dates. This is where many plans stall, because “maintenance” or “as soon as possible” looks like an answer but is not one.
Give each action accountable ownership
Give each corrective action one named person accountable for progress, even if several people do the work. Entries such as “management” leave nobody clearly responsible.
Before confirming the owner, check they have what delivery requires:
- Authority: the standing to change how work is done.
- Competence and time: the skills and capacity to see the action through.
- People and equipment: the resources the fix depends on.
- Specialist support: access to expert help, plus a manager who can approve resources beyond the owner’s remit.
Delegating delivery does not transfer the employer’s legal duties. Salusphere Global’s health and safety compliance support works alongside leadership, HR and operational teams without taking those duties over.
Match dates to risk and dependencies
No single statutory completion period applies to all audit findings, so avoid a universal 30/60/90-day schedule. Agree a calendar date for each action based on the risk, any legal requirements, how well interim controls work and the work involved. A complex change may need milestones for design, procurement, installation, commissioning and verification. If a date becomes unrealistic, escalate before it expires, as described for interim safeguards.
Put the plan in a live tracker
A simple spreadsheet or an existing maintenance or quality system can hold your corrective action plan; HSE does not prescribe a particular format.
The table below is illustrative only. Every deadline must be agreed for your actual circumstances.
| Finding | Priority and reason | Interim control | Action | Owner | Deadline | Evidence/effectiveness check |
| Machine guard interlock unreliable | Critical: serious injury possible, control unreliable | Machine isolated and kept out of use | Repair interlock; competent person tests safety function | Named maintenance manager | Before any further use | Repair record and test result before use resumes |
| Pallet blocking marked pedestrian route | High: pushes workers towards vehicle route | Route cleared immediately; access controlled | Review delivery storage arrangements | Named operations manager | To be agreed | Observe route during a comparable delivery period |
| Inspection records missing | Medium:
Risk not yet confirmed: promptly establish whether inspections are overdue and whether safety-critical defects may be present. |
Risk not yet confirmed: promptly establish whether inspections are overdue and whether safety-critical defects may be present. |
Restore records and inspection routine | Named site supervisor | Prompt initial safety check; agree further deadlines according to the findings and applicable inspection requirements. | Confirm inspections occur and defects are acted on |
The warehouse row shows a distinction Salusphere Global draws: clearing an obstruction is not the same as preventing its return. The owner must deal with why deliveries end up on the route.
Make the change work in practice
Our manager now has a ranked, owned plan. The next test is whether each change fixes the real problem and fits how work is actually done.
Address the cause, not just the symptom
Remedial work fixes what was seen, while corrective action addresses the weakness that let it happen. Clearing a spill does not explain its source or why nobody dealt with it sooner. For significant or repeated findings, ask:
- Why the hazard arose: look at work design, maintenance and purchasing.
- Why controls failed: consider staffing, supervision and production pressures.
- Why it went unnoticed: check how inspections and reporting work.
- Where else it applies: another task, shift, machine, site or contractor.
A revised document or training alone may leave an equipment, layout or workload problem untouched. A sound corrective action process tests the proposed fix against these causes before it is signed off.
Consult workers before finalising changes
In Great Britain, consulting employees is a legal duty under the applicable arrangements. HSE describes consultation as a two-way process in which workers raise concerns and influence decisions, so involve them before decisions are final.
Ask affected workers how the issue arises in normal work, busy periods and unusual tasks. Check whether a proposed control creates another hazard or is awkward to use.
Record the concern, the feedback and the decision. You do not have to accept every suggestion. Then communicate new restrictions, processes and procedures to everyone affected and check they understand them.
Implement the agreed improvement
Before changing equipment, layout or methods, compare proposed workplace safety improvements with how the task is really done. Salusphere Global’s deeper assessment and implementation support can help turn findings into workable measures. Update the affected risk assessment when work or a hazard changes, someone exposed was overlooked, an incident challenges its assumptions or controls may be inadequate.
Brief or provide training to affected people on the changed control and how to report future failures. Make sure they have the equipment and supervision to use it.
Verify results and keep actions on track
An action is not finished because someone says it is. Closing it well means proving the control works, then watching that it keeps working.
Check compliance and control effectiveness
Keep proof of implementation, but remember that a purchase order or completed work ticket alone does not show the original risk is controlled. Separate implementation, effectiveness verification and authorised closure. Useful evidence includes:
- Dated photographs: showing the change in place.
- Installation or maintenance records: confirming what was done and by whom.
- Inspection results: showing conditions after the change.
- Relevant training records: linked to a check of practice on the job.
Choose a check that reflects realistic conditions: for vehicle–pedestrian segregation, observe movements during representative operations, including busy periods. If verification fails, reopen the action, strengthen interim safeguards, investigate and revise the solution. A completed plan does not, by itself, establish compliance with every applicable duty.
Review overdue and recurring findings
Your tracker should distinguish open, in-progress, implemented, verified-closed and reopened actions, with links to evidence. Review overdue actions and dependencies at a frequency proportionate to risk, and report failed checks as well as completed work.
Escalate unresolved high-risk actions and resource constraints to a manager who can decide what happens next. Recheck significant or recurring findings over a suitable period, and review controls when changes, incidents, near misses or worker concerns suggest they may no longer work.
Use findings in management review
The HSE guidance on monitoring and auditing recommends periodic audits of management structures and risk controls, internal audit included. Boards should receive preventive information, such as training and maintenance progress, alongside incident data, so monitoring covers both.
The HSE guidance on reviewing performance recommends boards carry out a management review at least once a year, decide how to address weaknesses and monitor implementation. Major shortcomings or events may call for an immediate review, making health and safety audit follow-up part of everyday health and safety management.
Salusphere Global helps employers interpret findings, plan practical improvements and follow up implementation. If your own report is waiting on the desk, talk to Salusphere Global about audit support and the help you need.
Frequently Asked Questions
Does a favourable audit report mean that every hazard has been found?
No. An audit samples evidence, so a favourable report cannot establish that every hazard has been found. It tests management arrangements and working practice against defined criteria, and it starts corrective work rather than proving risks are controlled.
How should a finding about missing inspection records be closed?
Restoring the paperwork is not enough. Confirm that the inspections have actually taken place and that any defects they identified are being acted upon before you close the finding.
How can you check that training given after an audit has actually worked?
Assess competence in the actual task, for example after manual-handling training, and check whether equipment, workload or working arrangements still need improving. For a revised procedure, such as chemical handling, check the risk assessment, controls, worker understanding and how the procedure is used in practice.
