Integrated Management System Audit Checklist Guide
An Integrated Management System (IMS) helps a business manage quality, health and safety, and environmental duties in one clear system. Instead of running separate audits for every standard, teams can bring common checks together. As a result, they can save time, reduce repeated work, and spot risks sooner. However, an integrated system needs regular checks. An Integrated Management System Audit Checklist helps teams review policies, processes, records, and controls in a consistent way. It also helps auditors find gaps, record evidence, and follow up on issues.
With eAuditor Audits & Inspections, teams can digitize these checks, record findings on site, and assign corrective actions. Therefore, the audit becomes more than a routine task. It becomes a practical way to improve how the business works.
What Is an Integrated Management System Audit Checklist?
An Integrated Management System Audit Checklist is a set of questions used to assess how well an organization manages several systems through one audit process.
For example, a business may combine these standards:
- ISO 9001: Quality management.
- ISO 14001: Environmental management.
- ISO 45001: Occupational health and safety management.
- ISO 50001: Energy management, where relevant.
- ISO/IEC 27001: Information security management, where relevant.
The exact scope depends on the business, its risks, and the standards it follows. Therefore, not every organization needs to include every standard.
An integrated audit checks shared requirements, such as leadership, training, document control, risk management, internal audits, and continual improvement. It also checks the specific controls that each system needs.
For instance, document control may support quality procedures, environmental records, and safety instructions at the same time. However, a check on waste disposal needs its own environmental criteria. Likewise, a check on machine guarding needs clear safety criteria.
Why Is an Integrated Management System Audit Important?
An integrated audit helps teams see how different parts of the business work together. It also reduces the chance of missing a key requirement.
1. Reduce repeated work
Separate audits may ask similar questions about training, records, and management reviews. An integrated checklist can cover shared controls once where the audit scope allows it. As a result, auditors can spend more time on risks that need closer attention.
2. Improve compliance
The checklist helps teams compare current practices with approved procedures, legal duties, customer needs, and relevant standards. However, the team must keep the checklist up to date as requirements change.
3. Find risks earlier
Auditors can review work areas, speak with staff, and check records. Therefore, they can spot weak controls before those gaps lead to poor quality, pollution, injuries, or service delays.
4. Support clear decisions
A well-recorded audit gives managers evidence about what works and what needs attention. In turn, they can set priorities, assign resources, and review progress.
5. Build a culture of improvement
Audits should not focus only on mistakes. They should also identify good practices and useful ideas. Over time, teams can use audit results to improve processes and prevent repeat issues.
Who Should Use an Integrated Management System Audit Checklist?
Many organizations can benefit from an integrated audit. The checklist is especially useful when several management systems share the same sites, teams, or processes.
Typical users include:
- Quality managers who review process controls and product or service quality.
- Health and safety teams that check hazards, training, and safe work practices.
- Environmental managers who assess waste, emissions, resource use, and environmental controls.
- Compliance officers who review legal and other obligations.
- Internal auditors who assess whether systems work as planned.
- Operations managers who oversee daily processes and corrective actions.
- Senior leaders who review performance and set improvement priorities.
- Consultants who support internal audits and readiness reviews.
For example, a manufacturing site may use one audit plan to review document control, production quality, chemical storage, waste handling, worker safety, and emergency readiness. However, the auditor should still apply the right criteria to each area.
When Should You Conduct an Integrated Management System Audit?
The audit schedule should reflect the organization's risks, obligations, and management system requirements.
Common times to conduct an audit include:
- At planned intervals: Follow an approved internal audit schedule.
- Before a certification audit: Check readiness and identify gaps that need attention.
- After a major change: Review new equipment, processes, sites, suppliers, or responsibilities.
- After an incident: Check whether existing controls worked and whether they need improvement.
- When performance drops: Investigate repeated defects, safety issues, environmental problems, or missed targets.
- After corrective actions: Confirm that fixes work and that the issue does not return.
- During management reviews: Provide reliable audit results to support decisions.
The audit frequency should not be the same for every process by default. Instead, prioritize high-risk and poorly performing areas. Also, follow any specific audit frequency required by the relevant standard, law, contract, or internal procedure.
Key Areas to Include in an Integrated Management System Audit Checklist
A useful checklist covers shared management system requirements and the controls specific to each included standard.
1. Organizational Context and Scope
First, check whether the organization understands the issues that may affect its management systems.
Ask questions such as:
- Has the organization identified relevant internal and external issues?
- Have relevant interested parties and their needs been identified?
- Is the scope of each management system clear?
- Does the scope cover the right sites, activities, and processes?
- Have the systems and their shared processes been mapped?
- Have changes that may affect the systems been reviewed?
Then, record any gaps between the documented scope and actual operations.
2. Leadership and Responsibilities
Strong management support helps an IMS work in practice. Therefore, check whether leaders set clear goals and provide suitable resources.
Review whether:
- Policies are approved, current, and communicated.
- Roles, duties, and authorities are clearly assigned.
- Managers support quality, environmental, and safety goals.
- Workers can raise concerns and share improvement ideas.
- Teams understand how their work affects system performance.
- Management reviews cover relevant results and required actions.
Also, verify that leaders follow up on decisions rather than leaving actions open.
3. Risk and Opportunity Management
Risk management helps teams focus on issues that could affect people, customers, the environment, or business results.
Check whether the organization:
- Identifies risks and opportunities across its systems.
- Assesses risks using a defined method.
- Considers environmental aspects and impacts where relevant.
- Identifies workplace hazards and assesses safety risks.
- Reviews quality risks that may affect products or services.
- Selects suitable controls and assigns responsibility.
- Updates assessments after significant changes.
- Checks whether controls remain effective.
For example, poor chemical storage may create a worker safety risk and an environmental risk. An integrated audit can review both concerns during the same visit while recording the right evidence for each.
4. Legal and Other Compliance Requirements
Next, confirm that the organization understands and manages the requirements that apply to its activities.
Ask:
- Is there a current list of relevant legal and other obligations?
- Are responsible people assigned to track these requirements?
- Do teams understand the duties that affect their work?
- Are required permits, licences, and records current?
- Does the organization check compliance at planned intervals?
- Are gaps recorded and addressed?
- Are changes in applicable requirements reviewed?
Do not assume that an audit checklist alone proves legal compliance. Auditors must check the actual requirements, evidence, and conditions that apply to the site.
5. Documented Information and Record Control
Good records help teams prove that processes are planned and carried out as intended.
Review whether:
- Policies and procedures are approved and current.
- Staff can access the right instructions when needed.
- Old or unapproved documents are controlled.
- Records are legible, traceable, and protected.
- Training and competence records are available.
- Audit reports and corrective action records are retained.
- Changes to documents are reviewed and approved.
Also, check that teams use the correct version of each procedure. Outdated instructions can lead to errors, unsafe work, and inconsistent results.
6. Competence, Awareness, and Communication
People need the right skills and information to follow an integrated system.
Check whether:
- Job roles have clear competence requirements.
- Staff receive training for their assigned tasks.
- Training records are maintained.
- Workers understand relevant policies and risks.
- Contractors receive suitable instructions.
- Changes are communicated to affected teams.
- The organization checks whether training works in practice.
For example, a signed attendance sheet shows that someone attended training. However, it does not prove that the person can carry out the task correctly. Therefore, observe the work or ask suitable questions when needed.
7. Operational Controls
Operational controls help the business turn its procedures into daily practice. The exact checks depend on the processes and standards in scope.
Quality controls may include:
- Approved work instructions.
- Product or service inspection records.
- Control of nonconforming outputs.
- Equipment maintenance and calibration records.
- Supplier checks and purchasing controls.
- Customer feedback and complaint handling.
Environmental controls may include:
- Waste storage and disposal.
- Chemical handling and spill prevention.
- Water and energy use.
- Emissions and discharge controls.
- Environmental monitoring records.
- Emergency response arrangements for environmental incidents.
Health and safety controls may include:
- Hazard identification and risk assessments.
- Safe work procedures.
- Personal protective equipment where required.
- Machine guarding and equipment checks.
- Contractor and visitor safety.
- Incident reporting and investigation.
- Emergency plans and drills.
During the audit, look at both the written procedure and the work itself. This helps show whether the controls are understood, available, and effective.
8. Emergency Preparedness and Response
An organization should prepare for emergencies that could affect its people, operations, or the environment.
Check whether:
- Relevant emergency scenarios have been identified.
- Emergency plans are current and available.
- Workers know their roles during an emergency.
- Emergency equipment is inspected and maintained.
- Evacuation routes and exits remain accessible.
- Drills take place where required or planned.
- Drill results and real incidents are reviewed.
- Lessons learned lead to suitable improvements.
Also, consider combined events. For example, a chemical spill may require worker evacuation, environmental containment, and communication with emergency services.
9. Monitoring, Measurement, and Performance
An IMS needs reliable data to show whether it achieves its goals.
Review whether the organization monitors suitable measures, such as:
- Customer complaints and product defects.
- Process performance and service quality.
- Injuries, near misses, and safety observations.
- Waste, emissions, water use, and energy use.
- Training completion and competence.
- Legal compliance checks.
- Corrective action completion and repeat findings.
- Progress against management system objectives.
Then, confirm that teams review the results and act when performance falls below expectations. Collecting data has little value if nobody uses it.
10. Internal Audit and Management Review
Internal audits help the organization check whether its management systems meet planned arrangements and applicable requirements. Management reviews then help leaders evaluate overall performance and decide what to improve.
Check whether:
- An internal audit programme is in place.
- Audit plans consider risk, importance, and past results.
- Auditors are competent and objective.
- Audit criteria and scope are clear.
- Findings are supported by evidence.
- Reports reach the right people.
- Corrective actions have owners and due dates.
- Management reviews cover relevant performance and outstanding actions.
- Decisions and follow-up tasks are recorded.
Where practical, integrate audits that share criteria and processes. However, do not combine them in a way that hides standard-specific requirements.
11. Nonconformities and Corrective Actions
A nonconformity occurs when a requirement is not met. A corrective action addresses its cause to help prevent the issue from happening again.
Check whether:
- Staff know how to report nonconformities.
- Findings are recorded clearly.
- The organization responds to the immediate issue.
- The cause is investigated when needed.
- Corrective actions address the cause, not only the symptom.
- A responsible person and due date are assigned.
- Completion is verified.
- The organization checks whether the action was effective.
- Repeat issues are reviewed for wider system weaknesses.
For example, if staff repeatedly use an outdated procedure, simply reminding them may not solve the problem. The audit team should also check document access, version control, training, and communication.
How to Conduct an Integrated Management System Audit
A clear process helps auditors work consistently and makes findings easier to act on.
Step 1: Define the Audit Scope
Decide which sites, departments, processes, standards, and requirements the audit will cover. Also, state what the audit aims to achieve.
Step 2: Review Previous Results
Check earlier audit reports, open corrective actions, complaints, incidents, and performance trends. This helps you focus on areas with known problems.
Step 3: Prepare the Checklist
Group shared requirements together, then add separate questions for quality, environmental, safety, or other systems in scope. Use clear questions that can be checked against evidence.
Step 4: Collect Evidence
Review documents, observe work, inspect relevant areas, and speak with staff. Record facts rather than assumptions. Where useful, attach photographs or supporting files.
Step 5: Record Findings
Classify findings according to your audit procedure. For example, record conformities, nonconformities, observations, and opportunities for improvement. Use clear descriptions and link each finding to its requirement and evidence.
Step 6: Agree on Actions
Discuss findings with the relevant process owners. Assign corrective actions, owners, and realistic due dates based on the level of risk.
Step 7: Issue the Audit Report
Summarize the scope, criteria, evidence, findings, and required actions. Keep the report clear so managers can understand what needs attention.
Step 8: Verify and Close Actions
Follow up on each action. Confirm that the fix is in place and check whether it worked. Finally, use recurring findings and performance data to improve future audits.
Sample Integrated Management System Audit Checklist Questions
Use these questions as a starting point. Adapt them to your organization's scope, risks, and applicable requirements.
Management and Planning
- Are IMS policies current, approved, and communicated?
- Are roles and responsibilities clear?
- Are relevant risks and opportunities assessed?
- Are objectives measurable and reviewed?
- Are required resources available?
Document and Training Control
- Are current procedures available to staff?
- Are records controlled and retained?
- Are workers competent for their assigned tasks?
- Is required training documented?
- Do employees understand the controls relevant to their work?
Quality Management
- Are process requirements defined?
- Are inspection and testing records complete?
- Are nonconforming products or services controlled?
- Are customer complaints reviewed?
- Are suppliers assessed where required?
Environmental Management
- Are relevant environmental aspects and impacts assessed?
- Are waste and hazardous materials managed correctly?
- Are permits and compliance records current?
- Are environmental controls followed?
- Are environmental incidents reported and reviewed?
Occupational Health and Safety
- Are workplace hazards identified and assessed?
- Are risk controls in place and effective?
- Are workers involved in safety discussions?
- Are equipment and emergency controls checked?
- Are incidents investigated and actions tracked?
Performance and Improvement
- Are internal audits completed as planned?
- Are results reviewed by responsible managers?
- Are corrective actions assigned and tracked?
- Is action effectiveness checked?
- Are recurring problems used to improve the system?
How eAuditor Audits & Inspections Handles Integrated Management System Audits
eAuditor Audits & Inspections can help teams move away from paper forms and disconnected spreadsheets. With digital checklists and structured records, auditors can use a consistent process across sites and departments.
1. Build a Checklist That Fits Your IMS
Start with a relevant template or create a checklist for your audit scope. Group shared requirements together, then add questions for the standards and processes your organization follows.
For example, a checklist can cover document control, training, risk management, environmental controls, workplace safety, and quality checks. However, the checklist should reflect your approved audit criteria rather than assume every organization has the same needs.
2. Record Findings During the Audit
Auditors can complete digital forms and record their findings as they inspect a site or process. They can add comments and supporting evidence where the checklist setup allows it.
As a result, teams can keep observations with the relevant audit item instead of relying on separate notes that may be hard to trace later.
3. Support Evidence-Based Reporting
A useful audit record explains what the auditor checked and what the evidence showed. Digital checklists help organize these details and make findings easier to review.
Therefore, managers can better understand the issue, its location, and the action required.
4. Assign and Track Corrective Actions
When a checklist identifies a gap, teams can use the corrective action process to assign responsibility and set a due date. They can then monitor progress and follow up on outstanding work.
This matters because an audit does not deliver lasting value when findings remain open. Instead, clear ownership helps teams turn results into action.
5. https://eauditor.app/2026/10/24/integrated-management-system-audit-checklist-guide/
Comments
Post a Comment