Internal EHS Audit Under Budget Pressure and Scope Limits
A corporate EHS auditor conducted a two-day announced audit at a specialty chemical blending plant. The audit covered three process lines, the tank farm, and the maintenance shop. The auditor sampled 20 of 140 written procedures and 15 of 90 training records because the plant said the full records were 'in the cloud' and unavailable. Findings: 47 total, including 12 high-risk items-a blocked emergency eyewash on Line 2, missing lockout/tagout procedures for three pieces of equipment, expired respirator fit tests for 22 of 40 respirator users, and a 55-gallon drum of flammable solvent stored beside a heater. The plant manager is the audit client and controls the corrective-action budget. He asks the auditor to downgrade nine findings to 'observations' so they do not appear in the corporate scorecard, and says capital is frozen until the next fiscal year. The auditor's supervisor is on vacation. The plant has had two recordable chemical exposures in 14 months.
1. Evaluate the independence and ethical pressures in this audit. What should the auditor do?
Read the worked answer
The auditor faces a self-review and intimidation threat. The plant manager is the audit client and controls the budget, and he is asking to downgrade findings for scorecard reasons. That is not an acceptable basis for changing risk ratings. The auditor should not downgrade findings merely because capital is frozen; instead, classify by risk and require interim controls. Because the supervisor is unavailable, escalate to the next-level EHS leader or ethics/compliance channel. Document the request and the auditor's response. The blocked eyewash, missing LOTO procedures, expired fit tests, and flammable solvent by a heater are high-risk and should remain high until corrected. The auditor may accept a documented interim control with a date, but must not relabel a hazard as an observation. If records are unavailable, treat that as a scope limitation and report it, not as a reason to reduce sample size silently.
2. Propose a risk-based prioritization of the 12 high-risk findings and interim controls.
Read the worked answer
Prioritize based on severity and likelihood, not cost. Immediate: remove the flammable solvent from the heater and restore the eyewash; these can be fixed same-day with no capital. Next: implement interim LOTO procedures and training for the three equipment items; restrict respirator use to fit-tested employees until the 22 tests are completed. Then schedule permanent corrections. Interim controls must be documented with owner, date, and verification. For each high-risk finding, define a risk score such as severity times likelihood, the required interim control, and the capital request. Deferral of capital can be a management decision, but the risk must be communicated in writing to the plant manager and corporate EHS. Use a risk register that shows residual risk after interim controls.
3. Design audit follow-up and metrics. How should the auditor handle the unavailable records?
Read the worked answer
Follow-up: require corrective actions in a shared tracker with owner, due date, verification evidence, and closure approval independent of the auditee. Verify high-risk items within 30 days and others at 90 days. Track repeat findings and overdue actions as leading indicators. For unavailable records, issue a scope limitation and request a sampling plan for on-site or remote review within 14 days. If access is still denied, escalate. Report to corporate EHS and operations with a clear risk statement: two recordable chemical exposures in 14 months plus a blocked eyewash and missing LOTO indicate controls are not reliable. Use the audit committee or management review to resolve budget conflicts. Metrics: percent of high-risk actions closed on time, repeat-finding rate, and verification pass rate.