28 August 2026

Is Your Site Audit-Ready? A Practical Checklist for Compliance Audits

Whether it's a fire and rescue service inspection, an insurer's site survey, a funding body's compliance check, or a new landlord's due diligence, the pattern is always the same: someone turns up expecting to see paperwork that matches reality, and the scramble to find it starts about ten minutes before they arrive. Being genuinely audit-ready means that scramble never happens.

What "audit-ready" actually means

It's not about having a lot of paperwork. It's about your documentation being current, held in one place you can put your hands on quickly, and reflecting what actually happens on site — not what's supposed to happen according to a policy nobody's looked at since it was written.

The checklist

1. Fire safety

  • A current, dated fire risk assessment with actions closed out, not just identified
  • Fire door inspection records, ideally referencing the current BS 8214:2026 standard
  • Fire alarm and emergency lighting test certificates, in date
  • Evacuation drill records — dates, numbers involved, and any issues raised
  • Person-centred evacuation plans (PEEPs), where relevant to your building type

2. Statutory maintenance and testing

  • Gas safety certificates
  • Electrical testing (EICR and PAT), in date
  • Water hygiene / Legionella risk assessment and ongoing monitoring records
  • Lift maintenance records, where applicable
  • Fire extinguisher servicing records

3. Health & safety management

  • A current health & safety policy that matches what actually happens on site
  • Risk assessments — general and activity-specific (COSHH, manual handling, and so on)
  • An up-to-date accident and incident log
  • RIDDOR reporting records where applicable

4. Contractor and visitor management

  • Permit-to-work records for higher-risk contractor jobs
  • Contractor insurance and certification on file — not just requested, but received and checked
  • Visitor and contractor induction sign-in records

5. Safeguarding and site security (schools and community venues)

  • DBS checks recorded and in date for relevant staff and volunteers
  • A current safeguarding policy
  • Martyn's Law procedures, even if you're still building towards the spring 2027 deadline

6. Waste and environmental

  • Waste transfer notes on file and complete
  • Awareness of how your waste contractor is preparing for mandatory digital waste tracking from October 2026

7. Records and governance

  • Documentation centralised somewhere one person can access quickly, not spread across email inboxes and site manager's desk drawers
  • Clear ownership — one named person responsible for the compliance calendar

The most common audit failures we see

It's rarely a dramatic failing. It's an EICR that expired eight weeks ago and nobody noticed, a fix that was genuinely carried out but never logged, a fire risk assessment action that's been "in progress" for a year, or a procedure that exists on paper but that staff have never actually been trained on. Auditors notice the pattern, not just the individual gap — a site with one missing certificate looks different to one where nobody can say who's responsible for tracking any of this.

Getting audit-ready in the weeks before

  1. Pull every certificate and record into one place and check expiry dates against today, not against when you think you last renewed them.
  2. Close out open actions from your last fire risk assessment or H&S inspection, or document a clear plan and timeline for the ones you can't close immediately.
  3. Spot-check that policy matches practice — walk the site with your procedures in hand rather than assuming they're being followed.
  4. Confirm contractor paperwork is current, not just held from when they first started working with you.
  5. Assign clear ownership if no one person currently owns the compliance calendar — this is the single biggest predictor of whether gaps get caught early or found by an auditor.

If you'd rather have someone independent go through this before a regulator, insurer or funding body does, our compliance audits give you a clear, honest picture of where your site stands and a prioritised action plan — from £350 per site. Get in touch for a free 30-minute consultation.

This article is general guidance, not legal advice. Requirements vary by site type, sector and local authority — consult a suitably qualified adviser for a definitive view on your specific obligations.

Want this reviewed for your site?

Book a free 30-minute consultation with Adam.

Book a free call →