Industrial Hygiene Exposure Control Procedure Audit Checklist

What an industrial hygiene exposure control audit covers

An industrial hygiene exposure control procedure audit checks whether the systems you use to recognise, evaluate and control workplace health hazards are working as intended. It is an internal audit, not a one-off assessment, and it looks across the whole programme: how exposures are identified, how they are measured, how results are interpreted, and how those results are communicated to the people affected. The checklist walks through the minimum compliance requirements for occupational exposure control procedures and industrial hygiene management practices, from the initial risk assessment to the final monitoring report. The audit is built around a simple logic. You start by identifying every potential source of occupational exposure through a comprehensive risk assessment. You then quantify exposure using both personal and area monitoring. You compare those results against applicable occupational exposure limits, decide on controls where needed, and tell workers and management what you found. Each section of the checklist maps to one of these steps, so a Non-Conformant answer early on signals a problem that will carry through to the sampling and control decisions later.

Why exposure control procedures matter

Workplace health hazards are often invisible and slow to show their effects. That makes the quality of your exposure control procedure the difference between managing risk and discovering it too late. The checklist is designed to catch the weaknesses that undermine a programme: SEGs that no longer reflect how work is actually done, sampling that is not representative, analyses from laboratories without recognised competency, or monitoring results that never reach the workers they describe. The audit also protects the integrity of the decisions that follow. If the risk assessment does not draw on exposure monitoring results, medical surveillance outcomes, reported health incidents and previous audit findings, you are assessing the wrong exposures. If sampling methods do not follow internationally recognised standards and best practices, the numbers cannot be compared against occupational exposure limits with confidence. If engineering and administrative controls already in place are not identified and their effectiveness factored in, you may credit protection that is not real. The checklist tests each of these links in the chain.

What a good exposure control audit covers

A thorough audit moves through seven areas, and the checklist mirrors them in order. - Industrial hygiene exposure control audit: the identity of the audit itself, including who conducted it, when, and where. - Procedure requirements: whether all potential sources of exposure are systematically identified, whether the risk assessment incorporates monitoring results, medical surveillance outcomes, reported health incidents and previous audit findings, and whether Similar Exposure Groups are established, documented, maintained and reviewed at least biennially or when processes, tasks or engineering controls change. - Exposure assessments: quantification of worker exposure through both personal and area monitoring, sampling methods consistent with internationally recognised standards and established best practices, analyses performed exclusively by accredited laboratories, and recognition of existing engineering and administrative controls and their demonstrated effectiveness. - Sampling plan and data collection: a formal, documented and maintained industrial hygiene sampling programme, sampling prioritised for the highest-risk employees in each SEG, an adequate minimum number of samples per SEG, randomised selection of individual workers for statistical representativeness, and sampling of representative routine operations under normal working conditions for long-term exposure. - Determination of exposure levels and control measures: comparison of quantitative results against applicable occupational exposure limits, implementation of engineering, administrative or PPE controls to maintain exposures below those limits, and systematic application of the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, PPE. - Communication of exposure monitoring results: prompt notification of sampled employees of their individual personal monitoring outcomes, direct personal monitoring of the individual worker rather than proxy or area-only measurements, use of the standardised exceedance notification form, reporting of exceedances within 24 hours of receipt and confirmation of analytical results, written notification to the relevant department head or area supervisor, investigation with documented corrective and preventive actions, communication of personal results to affected employees within 7 calendar days, a monitoring report to management within 7 calendar days, actionable recommendations in that report, and annual summary data presented to management for each SEG. - Quality control: calibration of exposure monitoring equipment before each use and maintenance in line with manufacturer specifications, suitably trained and qualified monitoring personnel, and a field blank sample with each batch submitted to the analytical laboratory.

Carrying out the audit

Work through the checklist in order, because each section depends on the one before it. Answer each question on the Conformant, Partially Conformant, Non-Conformant or N/A scale, and use the record fields at the start to capture the date of the audit, the person who conducted it, the location, and the inspection start and end times. Close with the signature and finish time. Where you answer Non-Conformant, go back to the underlying record rather than the procedure document alone. Pull the current sampling plan, the SEG list and its review dates, the laboratory accreditation certificates, the calibration logs and field blank records, and the correspondence showing that individual results and exceedance notifications were sent within the required timeframes. The evidence you need is the same evidence an external reviewer would ask for. Pay particular attention to the time-bound steps, because they are easy to miss in practice. Exceedances must be reported within 24 hours of receiving and confirming the analytical results, and the department head or area supervisor must be notified in writing. Personal results go to the affected employees within 7 calendar days of the confirmed analytical results, and the monitoring report goes to management within the same window. If any of these are late or undocumented, the communication section of the audit is not conformant, however good the sampling was. Finish by reviewing your answers with the people who own the exposure control programme. Use the findings to update the risk assessment, the SEG definitions, the sampling plan and the control measures, and set a date for the next review. The audit is only useful if its results change something.

Frequently Asked Questions

Quantifying exposure through both personal and area monitoring gives you a complete picture. Personal monitoring captures what the sampled worker actually breathes in as they move through their tasks. Area or stationary monitoring shows background concentrations and identifies sources or pathways of release. Together, they let you prioritise controls where exposures are highest and check that engineering and administrative measures are actually working. Both approaches are required by the checklist, and the results are compared against applicable occupational exposure limits.

A Similar Exposure Group is the unit of measurement for exposure assessment. If your groups are badly defined, your sampling results tell you about the wrong people. The checklist requires you to establish, document and maintain SEGs, and to review them at least every two years, or sooner if processes, tasks or engineering controls change. Sampling is then prioritised for the workers with the highest potential risk in each group, so the data you collect is both statistically representative and useful for targeting controls.

The checklist requires you to apply the hierarchy of controls, which means elimination, substitution, engineering controls, administrative controls, and personal protective equipment, in that order of preference. The aim is to maintain exposures below applicable occupational exposure limits. Before recommending any new control, you also need to identify the engineering and administrative controls already in place and factor their demonstrated effectiveness into your evaluation, so you do not double-count protection that is not working.

No. Exposure assessment results need to be compared against the applicable occupational exposure limits, and sampled workers must be notified of their individual result within 7 calendar days of receiving the confirmed analytical result. Exceedances have their own path: they are reported within 24 hours of receiving and confirming the analytical results, the relevant department head or area supervisor is notified in writing, and a thorough investigation identifies, documents and implements corrective and preventive actions. A monitoring report with actionable recommendations goes to management within 7 calendar days.

The checklist covers the basics of a defensible programme: a formal sampling plan that is documented and maintained; random selection of individual workers for statistical representativeness; sampling during representative routine operations under normal conditions for chronic exposure; accredited laboratories for analysis; calibration before each use; a field blank with every batch; and personnel with the training, qualifications and field experience to conduct the monitoring. Following these steps means your data stands up to scrutiny and can support real decisions about controls.

Written by

Arne Reis

Founder

Process optimizer with 25 years of expertise, focused on operational excellence in quality, maintenance, EHS, and commissioning. Emphasizes innovative solutions and top-quality standards.

View LinkedIn profile