CPEA cheat sheet

Audit evidence hierarchy: direct observation and instrument readings outrank interviews, which outrank document review; corroborate any single-source finding with a second evidence type before writing it up.

Conformity finding requires three elements: the requirement (citation to regulation, permit condition, or standard clause), the objective evidence (record, observation, measurement), and the gap statement quantifying the deviation.

Nonconformity grading rule: Major = systemic breakdown or absence of a required control with likely significant impact; Minor = isolated lapse in an otherwise functioning control; Observation = risk without a demonstrated requirement breach.

Sampling rule of thumb: audit sample size scales with population risk and control failure history, not with population size alone; document the sampling rationale so the report can be defended.

Root cause categories to test for every finding: inadequate procedure, procedure not followed, training gap, equipment/facility deficiency, and management system failure (no verification or ownership).

Opening meeting agenda must cover scope, criteria, audit plan and schedule, confidentiality, safety briefing, escort arrangements, and the closing meeting date; record attendance.

Closing meeting content: findings presented by grade with evidence references, agreement on correction timeframes, and clarification that corrective action adequacy is verified later, not at the closing meeting.

Audit trail rule: retain working papers, sampling records, photographs, and interviewee notes for the period defined by the audit program; findings must be traceable from report back to raw evidence.

Independence control: auditors must not audit their own work or activity they managed within the review period; declare and mitigate any impairment in writing before fieldwork begins.

Permit audit test: for each permit condition, verify (1) the condition is captured in an operating procedure or work instruction, (2) monitoring is performed at the stated frequency, and (3) exceedances were reported within the regulatory deadline.

Monitoring data integrity checks: calibration records current and traceable, instrument ID matching the log, detection limits below the applicable limit value, and no unexplained data gaps or hand-edited entries.

Exceedance decision path: compare result to permit limit, then to the reporting threshold and averaging period; averaging period mismatch is a common false-exceedance cause.

Waste determination audit: verify waste classification against the applicable hazardous-waste characteristic or listing, container labeling and accumulation start date, and manifest/consignment traceability to final disposal.

Air emission source audit: confirm each emission point on the permit inventory is present on site, control device operational parameters are monitored and recorded, and fugitive-emission checks are performed at the required frequency.

Water and stormwater audit: verify discharge points match the permit, sampling locations are downstream of the last input, and stormwater pollution prevention inspections and corrective actions are documented.

Chemical inventory thresholds: cross-check aggregate site quantities against storage-limit and emergency-planning thresholds; aggregation across containers and locations is the most frequent miss.

Emergency preparedness evidence: drill records within the required interval, drill critique with identified deficiencies, and documented closure of prior drill actions.

Hierarchy of controls for judging adequacy: elimination, substitution, engineering controls, administrative controls, then PPE; a finding that relies on PPE alone where engineering control is feasible is a control-adequacy gap.

Exposure assessment test: verify similar exposure groups are defined, sampling covers the highest-exposure tasks and shifts, and results are compared to the applicable occupational exposure limit with the correct averaging time.

PPE program audit elements: hazard assessment per task, selection rationale, fit testing records for respirators, training, and inspection/cleaning/replacement records.

Hazard communication check: container labeling, safety data sheet availability at the point of use, and training covering physical and health hazards of chemicals in the work area.

Lockout/tagout audit: energy control procedure for each machine with multiple energy sources, periodic inspection at the required interval, and verification that stored energy is dissipated and blocked.

Confined space decision rule: permit-required unless the space is tested and documented as having no actual or potential hazardous atmosphere, no engulfment hazard, and no internal configuration that could trap or asphyxiate.

Machine guarding and powered-vehicle checks: guard presence at the point of operation, emergency stop function test, and pedestrian/vehicle separation evidence.

Incident investigation audit: verify injuries and near misses are recorded, investigations identify causal factors beyond the individual, and corrective actions are tracked to verified closure.

Occupational health surveillance: verify the surveillance is triggered by a documented exposure or regulatory requirement, and that results are communicated to the worker with follow-up defined.

Audit program cycle: establish objectives and risk-based scope, plan and resource, conduct, report, verify corrective action, then evaluate program performance and update the risk assessment for the next cycle.

Competence evidence for auditors: documented training, technical knowledge of the audited activity, audit-method experience, and evaluation of performance in the field, not attendance certificates alone.

Corrective action verification: require containment, root cause analysis, action plan with owner and date, implementation evidence, and effectiveness check; closing a finding on the action plan alone is a program weakness.

Finding classification counts feed the management review: track findings by clause, by site, and by repeat status; repeat findings indicate the corrective action process, not the workforce, is failing.

Audit criteria must be defined before fieldwork: the specific regulations, permit conditions, internal standards, and contract requirements that conformity will be judged against.

Document control audit test: current revision at the point of use, obsolete copies removed or marked, changes reviewed and approved by the same function that approved the original.

Risk-based scheduling rule: allocate audit frequency and depth to hazard severity, regulatory exposure, change (new process, new chemical, reorganization), and prior performance.

Audit report content minimum: scope, criteria, dates and sites, audit team, summary of conformity, findings with evidence and grade, and a clear statement of what was and was not covered.

Follow-up timing: set verification intervals proportional to risk; high-severity findings require interim verification before the next scheduled audit.

Auditor communication rule: state the requirement and the evidence before stating the conclusion; leading with the conclusion triggers defensiveness and weakens acceptance of the finding.

Interview technique: ask open questions about how the task is actually done, then closed questions to confirm; never ask a worker to confirm a violation in front of a supervisor.

Language of findings: describe the condition, not the person; avoid words like careless or negligent, which shift the finding from system to individual and undermine corrective action.

Confidentiality: interviewee identities and personal data are protected; report findings by role or area, and release personal information only where legally required.

Conflict handling: when management disputes a finding, return to the written criterion and the recorded evidence; unresolved disagreement is documented as a dissenting view in the report, not deleted.

Stop-work trigger: imminent danger observed during an audit requires immediate notification to site management and documentation of the time, condition, and response; it is not deferred to the closing meeting.

Management review inputs: audit results, corrective action status, regulatory changes, incident trends, and resource adequacy; outputs must include decisions and assigned responsibilities.

Audit program performance metrics: completion against plan, finding closure rate and overdue actions, repeat finding rate, and cycle time from finding to verified closure.

Evidence reliability ranking: instrument measurement and direct observation > documented records generated at the time > interviews > recollection or undated summaries; record the source type for each finding.

Photograph and sample handling: record location, time, identifier, and context; maintain chain-of-custody for any physical sample and confirm the laboratory's accreditation covers the analysis.

Regulatory change check: confirm the audit criteria reflect requirements in force at the audit date, including amendments with transition periods still running.

Contractor and multi-employer audit: verify contractor selection criteria, pre-qualification of EHS performance, site-specific induction, and coordination of overlapping activities and shared hazards.

Management of change test: for recent process, chemical, or equipment changes, verify hazard review before implementation, updated procedures, updated training, and updated permits or notifications.

Training effectiveness check: verify the training matrix covers required tasks, records show completion before task assignment, and workers can describe the hazard controls relevant to their own job.

Measurement verification: check that monitoring equipment is calibrated against a traceable standard, calibration is within the stated interval, and out-of-tolerance instruments are removed from service.

Audit conclusion rule: a conclusion of conformity applies only to the sampled scope and criteria; the report must state exclusions and sampling limits so readers do not over-generalize.

Severity and likelihood matrix: grade risk by consequence severity times likelihood with existing controls in place; residual risk after corrective action determines the verification priority.

Environmental aspect and impact test: verify significant aspects are identified considering normal, abnormal, and emergency conditions, and that controls and objectives address the significant ones.

Legal register audit: confirm the register is current, covers all applicable jurisdictions and media, and that each entry is linked to the control or procedure that delivers compliance.

Objectives and targets check: measurable, assigned owner, deadline, and progress reviewed at defined intervals; targets without measurement method are not auditable.

Supplier and waste-vendor audit: verify due diligence on environmental permits and EHS performance of critical suppliers and disposal contractors, with evidence of periodic review.

Emergency response test: scenario coverage includes credible worst cases, roles are assigned, equipment is inspected, and external notification paths are documented and tested.

Spill and release readiness: secondary containment capacity and condition, spill kit inventory and location, drainage protection, and documented response drills.

Resource and waste efficiency: verify measurement of energy, water, and waste streams against baseline, and that identified reduction opportunities have owners and status tracking.

Sustainability reporting controls: data used in external EHS reporting must be traceable to source records with defined calculation method and review before publication.