A typical health and safety audit is designed to check that the obvious things are in place. Fire exits are clear. Signage is visible. Electrical equipment has been tested and tagged. First aid kits are stocked.
These things matter. Genuinely. Nobody is arguing otherwise.
But if your workplace safety audit stops at the physical and the visible, it is missing the hazards that are now causing the most harm. Chronic overwork. Unclear roles. Poor support. Bullying that everyone knows about but nobody names. The slow erosion of trust often linked to low psychological safety at work happens when people stop believing their concerns will be taken seriously.
Under current Australian WHS law, those are not soft issues. They are psychosocial hazards. And employers have a legal obligation to identify, assess, and control them with the same rigour as any physical risk.
A WHS audit that only looks at guardrails and exit signs is an audit from a different era.
What a WHS Audit Actually Is (And What It Should Be)
A WHS audit is a systematic review of how well an organisation's safety framework is working. It assesses policies, procedures, documentation, and actual workplace conditions against a set of criteria. Those criteria are usually drawn from the Work Health and Safety Act 2011, the WHS Regulations, relevant Codes of Practice, and in some cases, standards like ISO 45001.
You might hear it referred to as a workplace safety audit, a health and safety audit, or a WHS management system audit. The broader category of WHS audits and assessments covers everything from full management system reviews to targeted inspections of a single site or risk area. The language varies. The core purpose does not: you are evaluating whether your systems are doing what they are supposed to do, and whether the people in your workplace are actually safe.
Most audits follow a cycle. You plan. You review documentation. You inspect the workplace. You talk to people. You assess what you find. You report. You act.
That cycle is sound. The issue is usually in the scope. An audit that reviews physical hazards and paperwork but ignores how people feel at work, how workload is managed, or whether workers feel safe to speak up, is only telling you half the story. These blind spots often show up later as workplace disengagement leaders overlook
Step by Step: How to Conduct a WHS Audit for Australian Workplaces
Step 1: Define the scope
Before anything else, decide what the audit will cover. Will it review the entire WHS management system, or focus on a specific area? A particular site? A particular type of risk?
Scope matters because it determines what you will actually find. If psychosocial hazards are not in the scope, they will not appear in the findings. Make a deliberate decision to include them. Under the WHS Regulations, you are required to manage them. So they belong in the audit.
Step 2: Assemble your team
An effective audit needs people who understand the legislation, the workplace, and the difference between compliance on paper and compliance in practice. That might mean a combination of internal staff (WHS officers, health and safety representatives, managers) and, where appropriate, external auditors who bring an independent perspective.
If your audit includes psychosocial hazards, make sure at least one person on the team understands what to look for. This is newer territory for many organisations and the skills are different from inspecting fire extinguishers.
Step 3: Review your documentation
Start with what exists on paper. Policies. Risk assessments. Incident reports. Training records. Inspection logs. Meeting minutes from WHS committees. Corrective action registers.
What you are looking for is not perfection. You are looking for evidence that systems are in place, that they are being used, and that they are being updated. A policy that was written in 2019 and never reviewed tells you something. A corrective action register with items open for twelve months tells you something else.
Step 4: Walk the workplace
This is where the audit moves from paper to reality. Walk the site. Observe how work actually happens, not just how it is supposed to happen.
Look at the physical environment. Are controls in place? Are they being followed? Is signage current? Are emergency exits accessible?
But also look at the less visible things. How do people interact? Does the space allow for breaks? Is the pace of work visibly unsustainable? Are people working in isolation when they should not be? You will not capture this on a standard checklist. You need to be present and observant.
Step 5: Talk to workers
This is the single most important step. And the one most often rushed.
Workers know things that documentation and walkthroughs cannot reveal. They know which risks are being managed and which ones are being tolerated. They know whether reporting systems are trusted. They know where the real pressure points are.
Ask open questions. Not "are you aware of the safety policy?" but "what concerns you most about how work gets done here?" Not "have you received training?" but "do you feel confident managing the risks in your role?"
If you are assessing psychosocial hazards, this is where the real data lives. Ask about workload. Ask about support from managers. Ask about conflict. Ask about whether people feel safe to raise concerns. If people hesitate before answering, that tells you as much as the answer itself.
Step 6: Assess psychosocial hazards specifically
This deserves its own step because it is the area most audits still miss.
The 2024 Commonwealth Code of Practice identifies 17 psychosocial hazards. These include job demands, low control, poor support, lack of role clarity, poor change management, low recognition, traumatic content, remote and isolated work, conflict, bullying, harassment, violence, fatigue, job insecurity, and intrusive surveillance.
You do not need to assess all 17 in a single audit. But you do need a method for identifying which ones are present and how they are being managed. That might involve worker surveys, focus groups, a review of incident data and workers' compensation claims related to psychological injury, or structured conversations during the walkthrough.
The NSW WHS Regulation 2025 now explicitly requires the use of the hierarchy of controls for psychosocial risks. That means elimination first, then substitution, engineering controls, administrative controls, and personal protective equipment. The same framework you would use for a chemical hazard or a fall risk.
Step 7: Document findings and build a corrective action plan
Record what you found. Be specific. Note the hazard, the location or context, the current controls (if any), the gap, and the recommended action. Assign responsibility. Set a timeframe.
This is where many audits die. The report gets written. It sits in a shared drive. Nothing changes. The value of a WHS audit lives entirely in what happens after it is finished. If findings are not acted on, the audit was a performance, not a process.
Share findings with workers who participated. Close the loop. Let people see that their input led to something real. This builds the kind of trust and is often strengthened through mental health safety planning that makes the next audit more honest and more useful.
The Step Most Guides Leave Out
If you search for WHS audit guides online, you will find plenty of checklists, templates, and compliance frameworks. Most of them are thorough on physical hazards and light on everything else. Even comprehensive guides to WHS audits and assessments tend to treat psychosocial risks as an afterthought, if they mention them at all.
Psychosocial hazards are not optional. They are a legal requirement under Australian WHS Regulations. But beyond legality, they are the hazards causing the most rapidly growing category of harm. Psychological injury claims in Australia have been rising, and they tend to be more expensive and longer in duration than physical injury claims.
An audit that ignores how people feel at work is like a building inspection that checks the roof but not the foundation.
If you have never included psychosocial hazards in a WHS audit before, start simply. Add five questions to your worker consultations: How manageable is your workload right now? Do you feel supported by your direct manager? Is there any ongoing conflict in your team that has not been addressed? Do you feel comfortable raising concerns without fear of consequences? Has anything about your role changed significantly in the last twelve months without clear communication?
Five questions. That is enough to surface what most audits miss entirely.
What a Good Health and Safety Audit Actually Changes
When a WHS audit is done well, it does more than produce a report.
It shifts how people experience safety. Workers who are consulted during an audit and then see their input acted on begin to trust the system. They report hazards earlier. They speak up when something feels off. They stop treating safety as someone else's responsibility.
A good audit does not just find problems. It builds the conditions where problems get found faster next time. That is the difference between a compliance exercise and a culture of safety.
One Last Thing
WHS audits and assessments catch what is already broken. They are essential. Every Australian workplace should be doing them regularly and doing them well.
But the thing that prevents harm in the first place is not a checklist. It is a culture where people notice, care, and speak up. Where a manager asks how someone is doing and actually waits for the answer. Where a worker trusts that raising a concern will not cost them.
That kind of culture is built through connection. Through the small, repeated acts of attention and honesty that most organisations never formalise but that every worker recognises.
KanYini Earth is an Australian not-for-profit organisation rooted in an ancient philosophy of connection, working across writing, storytelling, education, and public conversation. The learning programs we are building are designed to help people develop exactly these skills. Recognising when something is off. Stepping in before it escalates. Creating environments where people feel safe enough to be honest about what is happening around them.
If that resonates, a contribution to KanYini Earth helps us continue developing the programs, tools, and conversations that make safer, more connected workplaces possible. You become part of building a different kind of safety culture. One that starts with people, not paperwork.
KanYini Earth. Walk with us
References
Work Health and Safety Act 2011 (Cth). Federal Register of Legislation. https://www.legislation.gov.au/C2011A00137/latest/text
Work Health and Safety (Managing Psychosocial Hazards at Work) Code of Practice 2024 (Cth). Federal Register of Legislation. https://www.legislation.gov.au/F2024L01380/latest/text
Comcare. (2024). Psychosocial hazards. Australian Government. https://www.comcare.gov.au/safe-healthy-work/prevent-harm/psychosocial-hazards
Work Health and Safety Regulation 2025 (NSW). NSW Legislation. https://legislation.nsw.gov.au/view/html/inforce/current/sl-2025-0322
SafeWork NSW. (2021). Code of Practice: Managing psychosocial hazards at work. NSW Government. https://www.safework.nsw.gov.au/resource-library/list-of-all-codes-of-practice/codes-of-practice/managing-psychosocial-hazards-at-work
Safe Work Australia. (2025). Key Work Health and Safety Statistics Australia 2025. Safe Work Australia. https://data.safeworkaustralia.gov.au/insights/key-whs-statistics-australia/latest-release
