HS 031 Internal Audit
HS 031 Internal Audit
HS 031 Internal Audit
The purpose of this procedure is to define the process of planning and executing systematic,
independent, internal OHSAS audits in order to:
2. SCOPE
This procedure applies to the conducting of internal audits and the evaluation of compliance to the
South Africa Region Services safety system based on OHSAS 18001 as well as the compliance to
Radiation Protection Act based on NNR requirements, and the methodology for communicating,
reporting and recording audit findings and the implementation of action plans.
4. REFERENCES
5. RESPONSIBILITY / ACCOUNTABILITY
Employee • To form part of the pre audit meeting and participate in the audit
Representative protocol.
Audit Manager • Form part of the internal audit team as and when required.
- AGA
Lead Auditor • Identify experienced and / all qualified auditors who will accompany
(Internal him/her on the audit.
Audits) • Orientate audit team, coordinate the audit process, and coordinate the
preparation of the audit report.
• Execute internal audits.
• Write audit reports.
• Develop audit protocols for internal audits.
• Communicate audit results and ensure availability of the audit report.
6. AUDIT REQUIREMENTS
Internal audit
The organisation shall ensure that internal audits of the South Africa Region Services safety system are
conducted at planned intervals to:
• Conforms to plan arrangements for South Africa Region Services safety system including the
requirements of the International Standard, and specifications.
• It will be verified if it has been properly implemented and is maintained, and
Audit programme(s) shall be planned (see Annexure 1) whereby results of the baseline risk
assessment and results of previous audits will be considered, established, implemented and
maintained by South Africa Region Services, taking into consideration the Risk concerned and the
results of previous audits. (All risk assessment processes as per the South Africa Region Services
safety system should be considered.)
• The responsibilities and requirements for planning and conducting audits, reporting results
and retaining associated records.
• Audit process is planned - considering the status and importance of the procedures and areas
to be audited. Audit criteria, scope, frequency and method are then defined.
• Management to review audit schedule prior to the audit taking place as well as the monthly
results done for the evaluation of the South Africa Region Services safety system.
• Selection of auditors and conducting of audits shall ensure objectivity and the impartiality of
the audit process.
• Audits shall be conducted by the H&S officers and other identified employees who are
independent of those having direct responsibility. They will be trained in systems auditing
techniques and have adequate experience. Include interview techniques, verification
techniques, audit preparation, report writing, demeanour, and interpretation of criteria used in
the audit (CRA process form part of this Audit).
• Training sessions will be given to the Foremen, Supervisors to assist with the internal audit
where required.
• Ensure that internal audits of the Occupational Health and Safety management system are
conducted at planned intervals that conform to planned arrangements for Health and Safety
management including the requirements of the International Standard and specifications. It
will be verified if it has been properly implemented and is maintained, and provide information
on the results of audits to management.
• Audit results are discussed at the various management levels and MANCOM.
• Audit results will also be discussed at the relevant employee forums as per communication
procedure.
• The responsibilities and requirements for planning and conducting audits, reporting results
and retaining associated records – Health and Safety Manager. A post audit meeting is called
for where all affected supervisory staff is informed about the results and necessary corrective
measures.
This procedure also provides the methodology for communicating, reporting and recording audit
findings.
This is a planned annual audit that will be included in the SA Region audit programme. The OH&S
audit will be audited by an AGA auditor where after certification will be issued. Audit programme will
be communicated to all relevant parties.
a) Audits will take place once a year to determine whether the OH&S Management System:
All audit results will be discussed at the relevant forums as per communication procedure.
Audit programme(s) shall be planned, established, implemented and maintained by the organisation,
based on the results of risk assessments of the organisation’s activities, and the results of previous
audits and include the following:
a) The responsibilities, competencies, and requirements for planning and conducting audits,
reporting results and retaining associated records (refer to H&S 023 Procedure); and
b) The determination of audit criteria, scope, frequency and methods.
Sufficient resources will be available to assist in the audit process. Selection of auditors and
conducting of audits shall ensure objectivity and the impartiality of the audit process.
External Audits
The AGA Audit Team will conduct independent audits to evaluate compliance to OHSAS 18001
requirements. A schedule will be drafted and made available on an annual basis.
Evaluation of Compliance
• According to Section 4.5.2 of OHSAS 18001 standards, the operations should periodically
evaluate the compliance to legal and other requirements. The evaluation of compliance will
be conducted on an annual basis and will form part of the O H & S audit programme.
Critical evaluations will be done on a monthly, quarterly and annual basis to reflect
compliance and continual improvement.
a. Internal Audits
7.1.4 Execute internal All audits will start with a brief Opening Meeting. Day of Lead
audit The Lead Auditor again goes through the Agenda audit Auditor
to emphasise the objective, criteria and audit plan.
An Attendance Register shall be completed
Audit:
• If any, establish whether previous audit findings Lead
were closed -out by the due date. Record Auditor/
findings. Team
• Establish if personnel are familiar with and
understand the policies, procedures against
which the audit is being conducted. Record
findings.
7.1.5 Audit Findings For the Internal audit, three criteria will be evaluated Lead
and compliance will be evaluated: Auditor
7.1.7 Summary Audit An audit summary report will be distributed by the Within 10 Lead
Report Lead Auditor, as per the distribution list. The audit days of Auditor
summary report will also summarise the audit audit
scope, restate the Lead Auditor or audit team,
observers and where possible state
recommendations.
AUDIT REPORTS
7.1.8 Audit Actions Should the audit findings be positive, the lead Lead
auditor will give the feedback to management and Auditor
comment on the positive findings, and a report will
be submitted?
Execute follow up audit This may not be an official internal audit but the
(Next audit cycle) H&S Officer could also do a follow-up investigation
if required.
RECORDS LOCATION
DEFINITIONS:
DOCUMENT
Information and its supporting medium (The medium can be paper, magnetic, electronic or optical computer
disc, photograph or master sample, or a combination thereof.)
RECORD
Document stating results achieved or providing evidence of activities performed
CONTROLLED DOCUMENT
Any document that needs to be controlled in terms of its distribution and use, such as the Policy and
documented procedures. These documents are either signed in original ink and/or signed for on a
distribution list. These documents will be signed off after evaluation has been done to determine that they
are adequate for purpose. The document will be signed off by the relevant members as depicted on the
distribution list.
Once copies are printed of the database, they are considered to be “uncontrolled”.
OBSOLETE DOCUMENTS
Documents that have been replaced by later revisions or those that is no longer relevant or valid, and has
been cancelled from the system. These documents will be identified either by crossing them out and writing
obsolete or rubber stamp obsolete document.
UNCONTROLLED DOCUMENTS
Any documents that have not been issued under the circumstances under “controlled documents” are
categorised as uncontrolled. This includes, but may not be limited to:
• Documents that do not need to be controlled such as the monthly safety topic.
• Documents not distributed by the authorised person as per the procedures “authority and
responsibility” table and signed for by the recipient.
• Documents printed from the electronic database. (Watermarked “uncontrolled document”)
• Documents duplicated or photocopied from controlled documents.
• Photocopies of the Occupational Health and Safety policy as issued to the public or other
Interested and Affected Parties
It is not possible to judge from an uncontrolled copy whether it is the latest version. It is the responsibility of
the person holding the documentation to ensure that (s) he has the latest version.
INJURY
Physical harm or damage
FREQUENCY
Occurrence per unit time, (May be expressed qualitatively or quantitatively).
EXPOSURE
How often and for how long employees are exposed to a hazard/s.
LIKELIHOOD
Means the chance of an event occurring.
DUE DILIGENCE
Taking reasonable care to protect the health and safety of all employees. Provide equipment, maintain the
equipment, use equipment as prescribed, provide information relating to the equipment, and provide
competent supervision.
INCIDENT
An undesired event which under slightly different circumstances could result in harm to people. Damage to
property or loss to process or an undesired event that could or does result in a loss.
RISK MATRIX
A Risk index can be determined by plotting likelihood and severity indices on the y and x-axis respectively
and then using them to obtain a risk ranking.
HIRA
Process of recognizing that a hazard exists and defining its characteristics
• H = HAZARD
Anything around us that we can see as well as those energy sources we cannot see e.g. Gas and
radiation that can cause harm
• I = IDENTIFICATION
Identify the significant hazards (Process and recognition)
• R = RISK
Risk imagining (Likelihood and consequence if risk materializes)
• A = ASSESSMENT
Determine the magnitude of the risk if materialized
ROUTINE ACTIVITY
An activity which is performed on a regular basis (day to day)
NON ROUTINE
An activity performed on an adhoc basis
ACCOUNTABILITY
Principle that, individuals, organizations, and the community are responsible for their actions and may be
required to explain them to others.
RESPONSIBLE
Liable to be called to respond to a person for issues to be done.
ILL HEALTH
Identifiable adverse physical or mental condition arising from and/or made worse by a work activity and/or
work-related situation.
NONCONFORMITY
Non-fulfilment of a requirement – can be any deviation from:
Relevant work standards, practices, procedures, legal requirements.
SARSSS OBJECTIVES
SARSSS goals, in terms of OHS performance, that SA Region Services sets itself to achieve. Objectives are
quantified wherever practical.
SARSSS PERFORMANCE
Measurable results of SA Region Services management of its risks.
Note: Performance measurement includes measurement the effectiveness of controls.
OHS POLICY
Overall intention and direction which will be followed for the management of health and safety.
RECORD
Document stating results achieved or providing evidence of activities performed
HAZARD
A condition or practice with the potential to cause harm, or exposure to danger. (Immediate Causes,
Substandard Act or Substandard Condition)
RISK ASSESSMENT
Process of evaluating the risk(s) arising from a hazard(s), taking into account the adequacy of any existing
controls, and deciding whether or not the risk(s) is acceptable
PREVENTATIVE ACTION
Action to eliminate the cause of a potential nonconformity or other undesirable potential situation.
CORRECTIVE ACTION
Action taken to rectify a non-conformance or deviation
CONTINUAL IMPROVEMENT
To constantly improve on current Health and Safety standards
PROCEDURE
Specified way to carry out an activity or a process.
RISK ASSESSMENT
Process of evaluating the risk arising from a hazard, taking into account the adequacy of any existing
controls, and deciding whether or not the risk is acceptable.
WORKPLACE
Any physical location in which work related activities are performed under the control of SA Region
Services.
AUDIT
Independent and documented process for obtaining “audit evidence” and evaluating it objectively to
determine the extent to which “audit criteria” are fulfilled.
SAFETY MONTH
Period from the 20th of a particular month up to the 19th of the following month.
MANCOM
Management Committee
EXCO
Executive Committee
SUPERVISOR
Within SA Region Services – One who supervise or has charge and direction of i.e. Foreman, Clerk of
works, Training Officer, Residence Manager, Security Officer etc.
EMPLOYEE
Person working under the control of the organisation and includes contractors.
MANAGEMENT REPRESENTATIVE
A Person appointed in writing ensuring that the OH&S management system is established, implemented
and maintained in accordance with this OHSAS Standard;
and ensuring that reports on the performance of the OH&S management system are presented to top
management for review and used as a basis for improvement of the OH&S management system.
VISITOR
Any person who enters the premises of the mine who is not a full time employee or Contractor paid by the
mine
CONTRACTOR
Any person who perform work for the mine and is paid for his/her service.
ACCEPTABLE RISK
Risk that has been reduced to a level that can be tolerated by the organization having regard to its legal
obligations and its own
VERIFICATION
Verification is the act of reviewing, inspecting, testing, etc. to establish and document that a product, service,
or system meets the regulatory, standard, or specification requirements.
VALIDATION
Validation refers to meeting the needs of the intended end-user or customer to
prove the truth or to determine or test the accuracy. Also, validation is the process of checking if something
satisfies a certain criterion.
REFERENCES
• Roles and responsibilities are depicted in each system procedure and updated as and when
required in table format
• OHSAS 18001:2007 (Occupational Health and Assessment Series)
• The Mine Health and Safety Act 29 of 1996
• The Minerals Act 50 of 1991
• Occupational Health and Safety Act (Act 86 of 1993)
• COIDA
• AGA Strategic Objectives
• Implex Legal Register
• ATDS Training Matrix
• AGA RCAT
• Corporate Procedure Directive
• Health and Safety Agreement
• SAR/OESH/P/A/001.01 – AGA Incident reporting
• H&S 004 – Incident investigation
• H&S 006 – Emergency preparedness and response
• H&S 014 – Issue based risk assessment
• H&S 018 – Baseline risk assessment H&S 019 – Control of records
• H&S 023 – Control of documents
• H&S 027 – Competence, training and awareness
• H&S 028 – Continuous risk assessment
• H&S 029 – Communication, participation and consultation
• H&S 030 – Management review
• H&S 031 – Internal audit
• H&S 037 – Management of change
• H&S 055 – SA Region Services Scope
• H&S 058 – Legal and other requirements
• H&S 059 – Performance measurement and monitoring
• H&S 060 – Evaluation of compliance
• H&S 061 – Nonconformity, corrective and preventative action
• H&S 065 – Objectives and programme(s)
• H&S 067 – Resources, roles, responsibility, accountability and authority
• H&S 069 – Operational control
• H&S 070 – Documentation
• H&S 071 – H&S Policy
• MS SHE OP 151– Emergency Procedure
PROCEDURE DATE OF
CHANGES TO PROCEDURE
REVISION NUMBER APPROVAL
Definitions and abbreviations, References,
Roles and responsibilities, Communication,
H&S 031 – Revision 3 Audit programme, Action plans, 4 June 2009