One Grab Sample, One Word: Breach
You are finalizing an audit report for a municipal wastewater contractor. A single grab sample from the outfall shows 32 mg/L suspended solids against a permit limit of 30 mg/L. The laboratory QA flag says estimated, holding time exceeded by 6 hours. The operations manager says a split sample was 24 mg/L, but there is no chain-of-custody record for it. Your draft report states that the organization breached its permit. Legal counsel demands that the word breach be removed and says the corrective action will be a toolbox talk for operators. The audit evidence file contains the lab report, the permit, the sample log, and an interview note in which the operator says the outfall occasionally looks cloudy after rain.
1. How should you revise the finding and its wording?
Read the worked answer
Separate an audit nonconformity from a legal determination. The audit can report that one sample indicated an exceedance - 32 mg/L against a 30 mg/L limit - but the QA flag for exceeded holding time limits the sample's validity, and the split sample has no chain of custody. Compliance status is therefore not established by this evidence alone. Replace breached its permit with wording such as: one sample indicated a possible exceedance; the result is qualified by the laboratory's estimated flag and holding-time exceedance; the organization has not demonstrated compliance for that period.
This is fair presentation, not weakening the finding. A regulator or court decides legal breach; an auditor reports conformity or nonconformity against audit criteria. The report should include the lab report reference, the permit limit, the QA limitation, and the missing chain of custody, so the reader can see the basis.
2. Evaluate the proposed corrective action and identify what a proper root-cause response would require.
Read the worked answer
A toolbox talk alone is not a credible corrective action because it addresses neither the possible discharge cause nor the evidence defects. The organization needs root-cause analysis covering: why suspended solids may have risen (rain, process upset, treatment performance); why the sample was held beyond holding time; why the split sample lacked chain of custody; and how outfall observations are escalated. Training may be one action, but only after the causes are identified.
A proper response would include corrected sampling and courier arrangements, laboratory contract review, chain-of-custody training with verification, operational checks after rain, and a resampling plan. Each action should have an owner, date, and evidence of completion. The auditor should not accept the plan merely because it is quick; it must address the likelihood of recurrence and the reliability of future monitoring.
3. Design the follow-up verification and closure decision.
Read the worked answer
Verify implementation separately from effectiveness. Implementation evidence: revised sampling procedure, courier records, training attendance, and chain-of-custody forms. Effectiveness evidence: properly held and documented resamples, a review of at least three months of monitoring data, and records showing operational response after rain. If the resample is valid and below the limit, that supports correction but does not alone prove the system is effective.
Close the finding only when the root causes have been addressed and the evidence shows the monitoring process can produce reliable results. If the organization cannot produce valid data, keep the finding open and escalate. Report the status in the next audit or management review. Do not let the legal counsel's preferred wording or a quick toolbox talk determine closure; the closure decision must rest on objective evidence.