ZeroLapse

How to Prepare for an HSE Audit in South Africa

HSE Compliance Resources · ZeroLapse

An HSE audit rarely arrives with much warning — a client doing due diligence before a contract, an ISO surveillance visit, an insurer's risk assessment, or a Department of Employment and Labour inspection. What separates a calm audit from a stressful one usually isn't how compliant the business actually is day-to-day — it's whether that compliance can be proven, on the spot, with paperwork.

What an auditor actually checks

Employee training certificates. Are they current, on file, and matched to the training each role actually requires?
PPE records. Was protective equipment issued, logged, and reissued on schedule — not just handed over once years ago?
Legal appointments. Are safety roles (first aiders, fire wardens, safety officers and similar) backed by signed, current appointment letters?
Equipment and asset certificates. Are lifting equipment, vehicles, fire extinguishers and similar assets certified and within date?
Incident register. Are incidents logged, and do closed entries show an actual corrective action — not just a status flip to "resolved"?
COID Letter of Good Standing. Is it current, or has it quietly lapsed since the last renewal?
POPIA disclosure register. Can you show employees what personal data is held about them and why?

The week before an audit

If an audit is confirmed, the most useful thing to do isn't a scramble to fix gaps — it's a scramble to find them first, while there's still time to act. Pull every certificate, appointment letter, and PPE record together in one place and check each one against its expiry date, not just its existence. A certificate that's on file but expired is arguably worse than one that's missing, since it signals the gap wasn't noticed.

Common findings that are easy to avoid

A lapsed certificate discovered during the audit itself. Almost always avoidable with a reminder system that flags expiries weeks in advance, not a manual review that only happens once a year.
A safety role with no appointment letter. Someone's clearly been doing the job — but without a signed, dated appointment on file, it doesn't count.
An incident marked closed with no corrective action recorded. Auditors specifically look for this gap, since "resolved" with no explanation reads as unresolved.
PPE issued but never logged. Verbal confirmation that "everyone has boots" doesn't hold up against a documented issue register.

Audits reward paper trails, not good intentions. A business that's genuinely safety-conscious can still fail an audit if the proof isn't organised and dateable. Conversely, a business with solid records rarely gets tripped up, even if there's a real gap somewhere — because at least it's visible and being worked on.

Make audit-readiness a habit, not a scramble

The businesses that handle audits calmly aren't necessarily the most compliant — they're the ones where the paperwork stays current automatically, so there's nothing to pull together in a hurry. That usually means moving away from a once-a-year spreadsheet review toward a system that flags expiries as they approach, rather than after they've already lapsed.

Be audit-ready every day, not just audit week

ZeroLapse generates a complete Audit Pack on demand — a PDF covering every certificate, PPE record, legal appointment and equipment cert, with every supporting document attached, so there's nothing to assemble when an auditor walks in.

Start Your Free 30-Day Trial

This article is general information for South African employers and isn't legal advice. Audit scope and requirements vary by industry, client, and certification body — consult the relevant standard, the Department of Employment and Labour, or a qualified HSE professional for guidance specific to your business.