It depends entirely on who is auditing you. A failed client audit costs you work. A regulator finding problems can stop work immediately. A failed certification audit puts your certificate at risk.

Most Australian businesses that talk about “failing an audit” mean the first one, and it’s the one with the most immediate commercial consequences.

What Are the Three Kinds of WHS Audit?

A client or principal contractor audit. A customer, head contractor or pre-qualification portal reviews your safety documentation before letting you on site or onto a panel. This is by far the most common audit a small or medium business faces.

A regulator inspection. SafeWork NSW, WorkSafe Queensland, WorkSafe Victoria or your state equivalent visits your workplace. Technically this is an inspection rather than an audit, but the effect is the same: someone with statutory powers examines whether you’re meeting your obligations.

A certification audit. An accredited body audits your safety management system against a standard, usually ISO 45001. This is relevant mainly if you hold or are seeking certification, often because a client requires it.

Work out which one you’re facing before you do anything else, because the consequences and the remedies are different.

What Happens If You Fail a Client or Principal Contractor Audit?

You don’t get on site. Or you’re removed from the approved supplier list, or your pre-qualification lapses and tenders stop coming.

There is rarely a formal “fail” letter. More often you get a list of deficiencies and a window to close them out, or the work quietly goes to someone else. The most common outcomes are conditional approval pending corrective action, suspension from a panel until documents are resubmitted, or a contract not being renewed.

The fix is usually documentation rather than anything physical. Businesses fail these audits far more often for not being able to evidence their safety practices than for being unsafe.

What Happens If a Regulator Finds Problems?

Inspectors have statutory powers under the model WHS laws and a graduated set of responses.

An improvement notice requires you to fix a contravention within a specified period. You must comply by the date on the notice, and inspectors can and do return to check.

A prohibition notice stops an activity immediately where there is a serious risk to health or safety. Work cannot resume until the inspector is satisfied the risk is controlled. This is the one that costs real money, because it halts the job.

An infringement notice is an on-the-spot penalty for certain contraventions.

Prosecution is reserved for more serious breaches. Importantly, prosecution doesn’t require anyone to have been hurt. Failing to have required systems in place is itself an offence, and businesses are regularly prosecuted after inspections where nobody was injured.

Inspectors also have broad powers to enter workplaces, require documents to be produced and interview workers. In most jurisdictions you can seek internal review of a notice if you believe it’s wrong, within a limited timeframe.

Terminology and penalty levels vary between states, and Victoria operates under the Occupational Health and Safety Act 2004 rather than the model WHS laws, so check your own regulator’s guidance for specifics.

What Happens If You Fail a Certification Audit?

Certification auditors record findings as non-conformances.

A minor non-conformance is an isolated lapse. You submit a corrective action plan, usually within 30 days, and close it out at the next surveillance audit.

A major non-conformance is a systemic failure or the complete absence of a required element. Certification can be suspended or withheld until it’s resolved, which usually means a follow-up audit and additional cost.

If certification was a condition of a contract, a suspension can trigger the commercial consequences described above as well.

Why Do Businesses Fail WHS Audits?

In practice, the same handful of problems account for most failures, and almost none of them are about businesses being unsafe:

• Documents exist but are out of date. Policies referencing superseded legislation or repealed codes of practice.
• SWMS are generic. A template downloaded years ago that isn’t specific to the job, the site or the actual hazards. A SWMS that doesn’t reflect the work isn’t compliant.
• No evidence of training or induction. The training happened, but nobody recorded it.
• Documents aren’t signed or dated. Unsigned SWMS and unacknowledged inductions are treated as not having happened.
• No consultation records. No toolbox talks, no safety meeting minutes, no record of workers being involved in decisions affecting their safety.
• Nothing shows the system is live. No incident records, no reviews, no evidence anyone has looked at the system since it was written.

The theme is consistent. Auditors assess evidence. Doing the right thing without recording it reads the same as not doing it.

How Do You Recover From a Failed Audit?

Get the findings in writing, so you’re fixing what was actually raised rather than what you assume was raised.

Deal with anything that stopped work first. A prohibition notice or an immediate safety risk outranks paperwork.

Then close out the documentation systematically: update what is out of date, make generic documents job-specific, and reconstruct your records of training, induction and consultation where you legitimately can. Don’t backdate anything. Auditors and inspectors are experienced at spotting it, and it turns a documentation problem into a credibility problem.

Respond formally by the deadline with what you’ve fixed and the evidence that supports it.

Then address why it happened. A business that fixes the findings but not the system fails the next audit too. If you don’t have a system at all, start with what a small business WHS management system needs.

How ASSA Can Help

ASSA members have a complete WHS management system ready to produce when an auditor asks. That includes job-specific SWMS you can clone and tailor to each site, safe operating procedures, the WHS policies your business is required to have, and registers for incidents, inductions and toolbox talks.

Every document you use is stored with a version history, which gives you the audit trail that proves your system exists and that you’re using it. When legislation changes, we update the documents and notify you, so you’re never handing over something out of date.

Frequently Asked Questions

How long do you get to fix a failed audit? Improvement notices specify a date. Certification non-conformances typically allow 30 days for a corrective action plan. Client audits vary, and some give no window at all.

Can you be prosecuted for failing an audit? Not for the audit itself. But if an inspection finds a contravention, prosecution is available regardless of whether anyone was injured.

Does a failed audit affect insurance? It can. Insurers may ask about safety systems and enforcement history at renewal, and a prohibition notice or prosecution is material.

What’s the fastest way to pass next time? Have current, job-specific documentation you can produce on request, with signatures and dates. Most failures are about evidence, not practice.

Final Thoughts

What happens when you fail a WHS audit depends on who ran it, but the cause is almost always the same: the business couldn’t show what it does. A current, job-specific, signed set of documents is what separates a pass from a fail far more often than anything happening on site.

This article is general information, not legal advice. WHS obligations and enforcement powers vary between states and territories. For advice specific to your situation, speak with a qualified WHS professional or your state regulator.

Join ASSA or call our team on 1300 131 014 to see how it works for your business.