COR IA Student Manual_V.2016_FINAL (1)
COR IA Student Manual_V.2016_FINAL (1)
COR IA Student Manual_V.2016_FINAL (1)
3
V2.2 COR Internal Auditor Training Program – Student Manual
AUDITOR TRAINING PROGRAM
The BC Construction Safety Alliance (BCCSA) is a non-profit organization funded by
British Columbia’s construction industry.
ACKNOWLEDGMENTS
This program was developed by the BCCSA with the assistance of WorkSafeBC and
industry members. Their collective input and dedication to construction safety issues
is greatly appreciated by the BCCSA. The BCCSA is also greatly indebted to the
Alberta Construction Safety Association for their ongoing assistance.
COPYRIGHT
This publication is the property of BCCSA. Reproduction in any form, by any means,
in whole or in part is prohibited without the express written consent of the BCCSA.
BACKGROUND
The BCCSA has redeveloped the Internal Auditor Training Program as part of its
ongoing mandate to provide quality training.
DISCLAIMER
The information presented in this publication is intended for general use and may not
apply to every circumstance. This is not a definitive guide to government regulations
and does not relieve persons using this publication from their responsibilities under
applicable legislation. The BCCSA does not guarantee the accuracy of, or assume
liability for, the information presented in this workshop.
AUTHOR
BC Construction Safety Alliance
400 – 625 Agnes Street
New Westminster, BC V3M 5Y4
P: (604) 636-3675
www.bccsa.ca
4
V2.2 COR Internal Auditor Training Program – Student Manual
Module 1: Introduction
Welcome to the BCCSA COR Internal Auditor Training Program. This is a two-day
course designed to teach you the skills required to conduct objective and consistent
Internal COR audits.
Overview
Definitions
Term Description
Auditee The company being audited.
5
V2.2 COR Internal Auditor Training Program – Student Manual
Auditor Certification
In order to obtain and maintain your Internal COR Auditor certificate you must:
1. Complete the online Principles of Health & Safety Management course
2. Attend the 2–day COR Auditor Training Course
3. Sign the BCCSA Terms of Participation
4. Obtain a minimum score of 80% on the final exam
5. Pass the student audit assignment
6. Complete at least two audits every three years
7. Attend re-certification training every three years
Submission
You have 4 weeks after the last day of the training course to submit the Student
Audit Assignment to training@bccsa.ca. Extension requests, with estimated time
6
V2.2 COR Internal Auditor Training Program – Student Manual
required, must be submitted to training@bccsa.ca prior to the due date. Failure to
submit on-time will result in the student having to re-take the Internal Auditor
Training Program.
You must submit the student assignment and wait until receiving formal auditor
certification prior to conducting his/her internal COR audit.
Auditor Responsibilities
Auditor responsibilities are as follows:
Prepare for the audit.
Conduct a pre-audit meeting.
Verify the health and safety program through DOI.
Communicate findings at a post-audit meeting.
Keep his/her certification current.
Adhere to the BCCSA Terms of Participation at all times.
7
V2.2 COR Internal Auditor Training Program – Student Manual
Module 1: Review
1. What are the three techniques used to verify a health and safety program?
4. The Student Audit Assignment must be done as a Large COR audit regardless
of company size
True
False
7. In addition to the main office, how many active worksites must be visited
during the Student Audit Assignment?
1
2
3
4
The following questions are based on the BCCSA Terms of Participation from
Appendix 3 of this manual, specifically the sections “Internal Auditor Code of
Conduct” and “Performance Management.”
9. Joe is conducting an internal audit. During the audit process he notes that
people didn’t write neatly when completing forms (even though the forms
8
V2.2 COR Internal Auditor Training Program – Student Manual
were legible), so he decides to dock marks off the final audit score. Is he
behaving in accordance with the Internal Auditor Code of Conduct?
Yes
No
11. A 1st occurrence of “Incomplete and/or insufficient audit data within the audit
report” could result in:
Verbal warning
Written letter on file
Suspension
12. A 2nd occurrence of “Completing audits that do not meet the minimum audit
scope requirements with regard to interviews and worksite observations”
could result in:
Written letter on file
Written letter on file and suspension
Termination
9
V2.2 COR Internal Auditor Training Program – Student Manual
Module 2: Pre-Audit Activities
Overview
Step 1:
Step 2:
Microsoft Excel Health and
Definitions Audit
Skills Safety Manual
Information
Verification
Step 3: Step 4:
Module 2:
List of Active Pre-Audit
Review
Worksites Meeting
Definitions
Term Description
A comprehensive review of an employer’s health and
Audit
safety management system.
In order to qualify for COR, the employer certification audit
(internal or external) conducted by a qualified Auditor
Certification Audit
must be submitted to the appropriate Certifying Partner for
review and approval.
An accreditation given to an employer’s health and safety
Certificate of
management system that has been evaluated by a
Recognition (COR)
certified Auditor.
Workplace where the occupational health and safety
Main Office management system documents and records are mainly
kept.
Once the employer successfully achieves COR, annual
maintenance audits are required to maintain certification.
The COR certificate is valid for three years, after which a
re-certification audit is required. Maintenance audits may
Maintenance Audit be performed at any time during a calendar year, but there
must be at least six months between the initial certification
date and the first maintenance audit submission and at
least six months between each subsequent maintenance
audit submission.
Those people who have some level of authority,
Management
responsibility, and accountability within the firm.
10
V2.2 COR Internal Auditor Training Program – Student Manual
Term Description
An employee of a company who is responsible for
planning, or directing a department or a group of
individuals and monitoring their work. Managers have the
authority to change the work assignments of staff and
Manager
have some control over resources and expenditures. They
are responsible for ensuring the company or department is
complying with the Occupational Health and Safety (OHS)
Regulation and other applicable safety legislation.
The average number of employees based on a 12-month
period of time. When planning COR audits, auditors need
to ensure the total # of employees at the time of the audit
is no less than 80% of the company’s Normal Operating
Mode, and the interview sample must be calculated from
Normal Operating
the Normal Operating Mode number of employees. The
Mode
audit must be conducted when the company has at least 1
active worksite in addition to their main office for site
observations. Note: Audits are not to be scheduled during
a company’s slow season (i.e., when staff have been laid
off or there are no active worksites).
OHS An acronym for Occupational Health and Safety.
Partners in Injury and Disability Prevention — a voluntary
program that operates through the combined efforts of
Partners Program WorkSafeBC and industry and safety associations, such as
the BCCSA.
The COR certificate is valid for three (3) years, after which
Re-Certification Audit a re-certification audit is required.
For the purposes of this audit document, Regular
Regularly Employed Employees or Regularly Employed requires an employee to
have been on the worksite for at least one month.
Personnel in a company who directly control the overall
operation of the company or a division/department within
a company. They are responsible for ensuring the company
Senior Management or division/department is complying with the OHS
Regulation and other applicable safety legislation. Senior
management of a company may be appointed by a board
of directors and/or approved by shareholders.
Subcontractors are not limited to trade contractors and
may include delivery people, traffic controllers, service
Subcontractor
technicians, first aid, temporary labour, and cleaning
services.
A person who directs, guides, and monitors workers as
part of his or her job responsibilities. For the purposes of
Supervisor the COR audit the term supervisor means any individual
having authority, in the interest of the employer, to
exercise independent judgement, and who is also
responsible for working with management in complying
11
V2.2 COR Internal Auditor Training Program – Student Manual
Term Description
with the OHS Regulation and other applicable safety
legislation.
An audit performed by more than one Auditor. Does not
Team Audit
apply to student audit assignments.
A workplace set up for a specific type of work or service for
a finite period of time and which will not become a
permanent site. For the purposes of the COR audit a site is
Temporary Site
temporary if it is in operation for less than one year
(12 months). If a worksite is in operation longer than
1 year it is deemed permanent.
An individual employed by a company, whether full-time,
part-time, volunteer, or on a contractual basis. Workers
may include owners, management, and subcontractors;
Worker
however, for the purposes of the COR audit, this term will
be used to define individuals who do not have
management or supervisor responsibilities.
All personnel directly employed by the company at the
Work Force
workplaces, including all management.
Any place where a worker is or is likely to be engaged in
any work. This includes any vessel, vehicle, or mobile
Workplace
equipment used by a worker in work. Also referred to as a
worksite.
A provincial organization that regulates workplace safety.
WorkSafeBC Also known as the Workers’ Compensation Board (WCB) of
British Columbia.
12
V2.2 COR Internal Auditor Training Program – Student Manual
Microsoft Excel: Skills
It is mandatory for the auditor to have basic skills in Microsoft Excel. The steps listed
below will provide you with an introduction/review.
Step 4: Scroll down the page to “ COR OHS National Audit Document” and click
“COR OHS National Audit Document Version___.”
Step 7: Go to the bottom left of the screen and click the right-
pointing arrow until you see the tab “E1.”
13
V2.2 COR Internal Auditor Training Program – Student Manual
Step 8: Select tab “E1.”
Step 9: Go to question 1.1 and click the down arrow beside the white box.
Step 11: Click anywhere in the large white area below question 1.1.
Step 12: Type a sentence. The content of this sentence doesn’t matter.
Step 14: Now type another sentence. You will notice a space between the two
sentences. Creating this space is called a carriage return and can help provide clearer
comments when recording audit results.
14
V2.2 COR Internal Auditor Training Program – Student Manual
Microsoft Excel: Tips & Tricks
2. Move the mouse pointer anywhere in the area shown by the red rectangle (in
the image below) until it looks like a double arrow.
The pointer should look like this:
3. Click and drag the text bar to a larger size to see more than one line of text.
15
V2.2 COR Internal Auditor Training Program – Student Manual
Go to this URL to watch a video demonstration:
http://screencast.com/t/qN1hStQ8CcR
16
V2.2 COR Internal Auditor Training Program – Student Manual
Step 1: H&S Manual Verification Tab
The Health & Safety Manual must be verified to contain all elements as required by
COR. The auditor is not looking to see how well written these elements are or for the
order of presentation. In some cases the company may have certain COR element
information in another section. This is why it’s important to look through the Table of
Contents and then in the manual if a topic isn’t readily apparent.
Additional Notes
Verify that each of the 14 elements are present.
Not a detailed analysis.
Does not need to be in sequential order.
STOP if the Health & Safety Manual is missing an element.
17
V2.2 COR Internal Auditor Training Program – Student Manual
Step 2: Audit Information Tab
This is where the basic information about the company, the type of audit and COR
auditor information is contained. Many of the fields are self-explanatory; however,
some of the fields are described below.
18
V2.2 COR Internal Auditor Training Program – Student Manual
Audit Timelines
The auditor must adhere to the maximum permitted audit timelines:
Field Work — 15 days from pre-audit meeting to complete all documentation
review, observations, and interviews. This is also referred to as the “Actual
End Date” or “Last Day On-Site.”
Report Writing and Post-Audit Meeting — 15 days to review and collate
audit findings, write the audit report, and conduct the post-audit meeting.
While the report writing may take up to 15 days, there must be at least one
day from the Field Work to the Post-Audit Meeting date.
Corrective Action Plan Development — 15 days to review and sign off on
the audit results, develop a Corrective Action Plan and submit the final audit
report to the BCCSA for Quality Assurance.
These are maximum durations and cannot be carried over. For example, if the Field
Work was completed within 10 days, the auditor would NOT be able to take an extra
5 days for Report Writing.
Type of Program
Large COR Program is for companies with 20 or more employees.
Small COR Program is for companies with fewer than 20 employees.
Type of Audit
19
V2.2 COR Internal Auditor Training Program – Student Manual
Company Quality Assurance Audit — Typically initiated by WorkSafeBC in
response to an incident or area of concern. These are full-scope audits and
could count as the company’s re-certification audit. An audit of this type is
referred to as a WorkSafeBC Initiated Verification Audit (WIVA).
Company Information
This consists of basic company information, such as address and phone number.
20
V2.2 COR Internal Auditor Training Program – Student Manual
Step 3: List of Active Worksites Tab
This allows the auditor, company, and BCCSA to review/confirm that proper audit
scope has been applied.
21
V2.2 COR Internal Auditor Training Program – Student Manual
Total Number of Employees During Normal Operating Mode
It is important to determine Normal Operating Mode (NOM) because this will ensure
the audit is conducted during representative operations. In order to determine NOM,
follow these steps:
1. Obtain the number of employees on payroll for each month over the past 12
months and add the number of employees for all months sampled.
Month # of Employees
January 25
February 25
March 23
April 21
May 28
June 26
July 26
August 26
September 29
October 21
November 21
December 21
Total 292
Figure 5. Sample NOM Calculation (step 1)
22
V2.2 COR Internal Auditor Training Program – Student Manual
Worksite Locations
This is a description of each location where employees are conducting work. For
example, if the company has 48 active contracts but workers are only present on
26 of these worksites, then only 26 worksites should be recorded. The auditor is
required to record Site Name, Address, and City.
The table below shows the three categories of worksites, along with a description of
how to record the information on the List of Active Worksites Form.
Account # and CU
Record the WorkSafeBC Account # and Classification Unit (CU) associated with each
active worksite. Confirm with the employer which CU is associated with each
operational worksite.
The auditor MUST visit at least one worksite from each WorkSafeBC Account # and
each CU covered in the audit.
Note: CUs are identified by a six-digit classification unit code. Typically, each
company is assigned to the CU that best describes its primary business
activity. If a company is engaged in two or more separate and distinct
activities, it may be assigned to two or more CUs. For more details, see the
multiple classification policy (Policy Number 1-37-2) in the Assessment
Manual.1
1 Reference: http://worksafebc.com/insurance/premiums/classification/default.asp
23
V2.2 COR Internal Auditor Training Program – Student Manual
Visited (Yes or No)
Worksites included in the audit must be representative of the overall scope of
operations, and all CUs for which the company is seeking COR must be included in
the scope of the audit.
If the audit will cover more than one WorkSafeBC account, a representative sample
of worksites and CUs for each WorkSafeBC account must be included in the scope of
the audit for COR Certification and rebate eligibility.
For companies that have active worksites in various regions throughout the province,
the auditor must also ensure that the audit scope includes site visits to each region
over a three–year period.
Using the Site Observation Sampling Table above, a company with 3 Active Sites
would require visits to 2 sites. This is in addition to the provincial head office/shop.
The head office/shop must always be included in audit scope.
Number of Employees
1. Obtain information regarding the number of OMS and Workers at each
worksite.
2. Record this information in the respective column under “Number of
Employees.”
24
V2.2 COR Internal Auditor Training Program – Student Manual
Number Interviewed
1. Review (row 161) and find the number of Total Employees for the
company’s Normal Operating Mode to determine a proper interview sampling
size. Note: There MUST be interviews for the Head Office.
18–20 12 2 10
21–24 13 3 10
25–27 14 3 11
28–30 15 3 12
31–36 16 3 13
37–44 17 3 14
45–49 18 4 14
50–64 19 4 15
65–74 20 4 16
75–88 21 4 17
89–99 22 4 18
100–120 23 5 18
Figure 7. Interview Sampling Table
Using the Interview Sampling Table above, a company with a NOM of 32 employees
would require 3 OMS and 13 Worker interviews.
Note: The total number of interviews must be distributed as follows: 20% OMS and
80% Worker interviews. The auditor cannot decrease the number of required
interviews without obtaining permission first. The auditor MUST keep the 20/80 ratio
if choosing to increase the number of interviews. For example, if the auditor wants to
interview an extra OMS, he or she must also interview an extra 4 Workers to
maintain the proper ratio.
25
V2.2 COR Internal Auditor Training Program – Student Manual
Step 4: Pre-Audit Meeting Tab
The pre-audit meeting is meant to ensure that all stakeholders in the audit are aware
of the process and to confirm all information before starting.
Location
Indicate where the pre-audit meeting took place.
Attendees
List attendees by first and last name. The company can choose which personnel
should attend the pre-audit meeting. In most cases, the senior management team
will be in attendance.
Key Contact
This is the person working as the key contact on behalf of the company in relation to
the COR program. If the auditor is the key contact, then record “NA” in this field.
Site Escort
This is the person who accompanies the auditor to each worksite visited. If the
auditor visits sites alone, then record “NA” in this field.
26
V2.2 COR Internal Auditor Training Program – Student Manual
Pre-Audit Meeting Notes
The auditor must cover the following topics
in the pre-audit meeting:
Purpose and scope of the audit —
This is to measure the effectiveness
of the health and safety program
against a national standard. Passing
the audit will result in a 10% rebate
on the company’s assessments for
OHS and 5% for RTW (if applicable).
Schedule — Review the proposed
audit schedule. This includes time
and date estimates for site and office
visits. Inform the company how long
you expect interviews to take.
Confidentiality — All information
gathered will be kept completely
confidential.
Code of Conduct — Review the
principles of the Code of Conduct to Figure 9. Pre-Audit Meeting Agenda Items
ensure understanding.
Audit document to be used — The audit document covers 14 elements of
an OHS program. Marks are awarded using three different methods:
Documentation, Observation, and Interviews. A score of 80% overall and
50% in each element is required to pass.
Confirmation of the location of the active worksites
Discuss the sites to be toured
Number of people to be interviewed — State how many people (OMS and
Workers) will be interviewed.
Non-conformance issues — State that non-conformance issues observed in
site visits will be discussed with the manager and should be corrected as soon
as practicable. Ask what happens if an employee doesn’t want to participate.
The schedule for the post-audit meeting — Plan to hold the post-audit
meeting on a specific date and time. Inform the company that the post-audit
meeting will include a review of positives and areas for improvement.
Questions — Ask the company if they have any questions.
27
V2.2 COR Internal Auditor Training Program – Student Manual
Module 2: Review
Instructions
1. Locate the In-Class Case Study in Appendix 1 of this manual.
2. Open the OHS Audit Document that was downloaded from the BCCSA
website.
3. Use the information from the In-Class Case Study to complete the following
tabs in the Audit Document:
a. H&S Manual Verification tab
b. Audit Information tab
c. List of Active Worksites tab
d. Pre-Audit Meeting tab
28
V2.2 COR Internal Auditor Training Program – Student Manual
Module 3: Conducting the Audit
Overview
Audit
Definitions Audit Questions Comments Verification
Techniques
Definitions
Term Description
Critical Task A task that has the potential to produce major loss to
people, equipment, process, or the environment.
In legal terms, this is the requirement of a
Due Diligence company/employer to provide safe work conditions, through
taking reasonable steps to prevent incidents from occurring.
An individual who works for an employer or organization and
is compensated for his/her services. This person may be full-
Employee time, part-time, or retained on a contractual basis and is
insured under the company’s WorkSafeBC account.
In the event the audit score is below 80% (or less than 50%
in any element) the audit is considered to have failed. In
Failure of an audit this is the case, it must be reported to the BCCSA. The
company has the option of requesting a second audit once it
has addressed the areas of concern. A score of 70–79% may
29
V2.2 COR Internal Auditor Training Program – Student Manual
Term Description
trigger a limited scope audit that will address the identified
deficiencies.
Is there a process in which individual hazards of the
workplace are identified, anticipated, assessed, and
Hazard Assessment controlled/eliminated as close to source (location of the
hazard) as reasonable and possible?
These are measures put into place to protect workers from
known hazards. The typical hierarchy of control measures
Hazard Controls are elimination, substitution, engineering, administrative,
and finally personal protective equipment, as a last line of
defence.
Include information that can help companies measure,
review, and address health and safety concerns in the
workplace. These may include injury statistics, near miss
reports, injury reports, safety meeting minutes, and
Health and Safety
inspection and hazard reports. Summaries are not limited to
Activity Summaries
internal information; companies may find it beneficial to
review provincial or national reports on health and safety
matters. (For WorkSafeBC statistics reports go to
www.worksafebc.com.)
A comprehensive survey of workplaces, personnel,
Inspections
processes, and equipment or tools.
A segment of work, a specific work assignment, or a set of
Job actions required to complete a specific work objective. An
accumulation of all tasks involved in the worksite.
The process of evaluating a specific task (job) to identify all
Job Hazard Analysis hazards or potential hazards that the individuals performing
the task (job) may be exposed to.
A committee composed of worker and company/employer
representatives who together are committed to improving
Joint Occupational
health and safety conditions in the workplace. (In the
Health and Safety
absence of a joint OHS committee, a worker representative
(OHS) Committee
is nominated or appointed by the workers to represent all
workers from all departments within a company.)
If the audit score is 70–79% or below 50 % in any
element, a limited scope audit may be offered and
performed within 90 days from completion of audit. This is
Limited Scope Audit
limited to the elements that contributed to the low score.
BCCSA must be informed of the intention to carry out a
limited scope audit.
Meetings may include but are not limited to joint OHS
Meetings committee meetings, toolbox talks, management meetings,
and informal safety meetings. They may or may not include
an agenda but should include a record of attendance.
Near Miss An occurrence that had the potential for causing damage or
an injury or occupational disease.
30
V2.2 COR Internal Auditor Training Program – Student Manual
Term Description
Protective gear designed to reduce or eliminate potential
Personal Protective injuries to a worker. Basic PPE includes gloves, hard hats,
Equipment (PPE) clothing, and steel-toed boots. Specialized PPE includes full
body harnesses, respirators, goggles, and reflective vests).
The contractor, employer, or other person who enters into
an agreement with the owner of the worksite to be the
Prime Contractor prime contractor. The prime contractor has the overall
responsibility for health and safety on the worksite.
A written step-by-step set of instructions on how to safely
complete a specific task (e.g., lockout). Safe job procedures
must clearly identify the hazards the worker could be
Safe Job Procedure exposed to, the steps required to complete the task (in
proper order), the control measures, and what to do in an
emergency situation. Also referred to as safe work
procedures or execution plans.
Safe work practices are a set of methods or “Do’s and
Don’ts” on how to carry out a specific task or use
equipment. They should inform the worker about the
Safe Work Practice hazards that are present and provide direction on how to
safeguard against the hazards. They are general methods
only and do not define specific procedures. Examples include
using ladders and safe lifting techniques.
Personnel in a company who directly control the overall
operation of the company or a division/department within
the company. They are responsible for ensuring the
Senior Management company or division/department is complying with the OHS
Regulation and other applicable safety legislation. Senior
management of a company may be appointed by a board of
directors or approved by shareholders.
In the absence of a joint OHS committee, this is an
Worker individual who is nominated or appointed by the workers to
Representative represent all workers from all departments within a
company.
31
V2.2 COR Internal Auditor Training Program – Student Manual
Audit Questions
Each question in the audit document has four components, as shown in Figure 10
and described below.
1. The Question
The audit question provides the basic intent that the auditor is looking to meet.
2. Guideline
The guideline helps the auditor do his/her diligence to arrive at a final sufficient vs.
insufficient result for each question. The guideline may reference a specific OHS
Regulation that needs to be reviewed prior to answering the question.
3. Directive
The directive helps the auditor prove his/her diligence when answering the audit
question in the comment field. The directive may ask the auditor to provide
examples of documents observed or statements received.
4. Comment
The auditor is aiming to conduct an effective audit that will help the company make
improvements over the following year. While performing diligence in noting the
documentation, observation, and interview results, the auditor must include quality
comments to indicate how the final decision for each question was obtained.
Quality comments allow the:
Auditor to write an effective Executive Summary
Auditor to defend the answers to the client, the BCCSA, and WorkSafeBC
BCCSA to conduct Quality Assurance audits
Client to learn the context for each sufficient vs. insufficient question
Each audit question must contain a comment and:
1. Align with the audit question.
2. Provide justification for the result awarded. The audit question guideline helps
the auditor know what type of justification might be required.
3. Answer the audit question directive.
32
V2.2 COR Internal Auditor Training Program – Student Manual
Figure 11. Example of audit question with components of a quality comment shown
33
V2.2 COR Internal Auditor Training Program – Student Manual
Audit Verification Techniques
The audit process contains a series of three verification techniques with weighted
scoring. The combination of all three techniques is commonly referred to as DOI:
D = Documentation review
O = Observations of worksites
I = Interviews
Documentation Types
There are two types of documentation being reviewed in the audit process:
1. Safety Management System (SMS) documents
2. Due Diligence (DD) records
34
V2.2 COR Internal Auditor Training Program – Student Manual
Safety Management System (SMS) Documents
What are they? The basis on which the safety program is administered
Safety Policy
Company Rules
SMS Documentation Orientation Procedures and Forms
Examples Incident Investigation Procedures and Forms
Safe Work Practices and Safe Job Procedures (may also
be considering DD)
5.4 “Does the program address non-conformance and
Audit Question progressive disciplinary actions?”
Examples
6.1 “Is there a written policy for PPE?”
35
V2.2 COR Internal Auditor Training Program – Student Manual
Due Diligence (DD) Records
What are they? Documents proving the safety program is being followed
Employee Orientations
Site Inspections
DD Documentation
Incident Investigations
Examples
Hazard Assessments
Pre-Use Inspection
5.5 “Are the rules applied and enforced consistently with all
Audit Question employees?”
Examples
6.2 “Are workers made aware of the requirements for PPE?”
36
V2.2 COR Internal Auditor Training Program – Student Manual
Documentation: Verification
Verifying documentation as sufficient vs. deficient is not as straightforward as it
sounds. Some documentation might be as simple as determining whether a
particular statement exists, while other documentation may require hours of
research to obtain a conclusion.
There are two methods to verify a documentation question as sufficient:
1. Yes/No method
2. Eighty percent method
Yes/No Method
The Yes/No method is the simplest method of verification and typically requires the
auditor to find proof of sufficiency within a single document. Most SMS-related
questions are simple Yes/No questions.
37
V2.2 COR Internal Auditor Training Program – Student Manual
Documentation: Auditor Diligence
Documentation questions are the most challenging to answer and keep track of. In
some cases, the auditor would need to review the safety manual and a variety of due
diligence records from a number of locations over a three-month period to answer a
single audit question.
Proving diligence can prevent future issues related to auditor competency. The
auditor should have a process for each documentation question that allows the
auditor to defend the final assessment.
38
V2.2 COR Internal Auditor Training Program – Student Manual
Due Diligence Records — Block Sampling
Block sampling is the review of a prescribed quantity of documentation over a period
of time as a means to determine sufficiency.
The BCCSA requires that auditors review at least 25% of the past 12 months of
documentation.
There are some exceptions to the above-mentioned requirement where an auditor
would require a different sampling. The tables below show examples of block
sampling where 25% over 12 months isn’t practical.
39
V2.2 COR Internal Auditor Training Program – Student Manual
The table below shows many of the due diligence records that will need to be viewed
during the COR audit process, along with examples of the quantities needed.
Block Sampling Plan
Element Quantity
1: Safety Policy
Meeting minutes or some other method to show an
annual review of the Safety Policy has taken place. Previous 3 years
signed safety policies do not count.
2: Workplace Hazard Assessment & Control
Hazard assessments
Examples: Job Hazard Analysis, Task Hazard Analysis, Pre- 3 months
Job, Hazard Assessment, Field-Level Hazard Assessment
3: Safe Work Practices
Field-generated Safe Work Practices 3 months
4: Safe Job Procedures
40
V2.2 COR Internal Auditor Training Program – Student Manual
Block Sampling Plan
Element Quantity
9: Inspections
Site: 3 months
Inspections
Office: 12 months
Examples: Site, Office, Shop, Other: _________
Shop: 6 months
10: Investigations & Reporting
Completed Accident and Near Miss Investigations 12 months
11: Emergency Preparedness
Office/Shop Emergency Response Plans
25% of locations in BC
Site Emergency Response Plans
12: Records & Statistics
Report of all incidents broken down by first aid, medical
aid, time loss, and return to work (only if doing IM/RTW
Audit)
Records to show review of safety performance 12 months
Example: Management meeting showing discussion of
incident types and time-loss duration, or email records to
show communication of incident trends
12 months or
First aid records 25 records, whichever
is less
Previous COR Audit Action Plan
Previous year
Ensure completed items are noted
14: Joint OHS Committee/Worker Representative
Joint OHS Committee Terms of Reference Most recent version
List of current Joint OHS Committee Members Current reps
Joint OHS Committee Training Records All
Joint OHS Committee Meeting Agendas & Minutes 12 months
Important: Daily diaries, journals, and logbooks can provide acceptable proof that
certain activities are being completed. Records must be presented within a
reasonable time.
Documentation: Application
The following three steps must be followed in order to apply documentation review:
1. Determine sample size.
2. Gather/Review SMS & Due Diligence Records.
3. Record results in audit question “D” column.
41
V2.2 COR Internal Auditor Training Program – Student Manual
Step 2: Observations of Worksites
42
V2.2 COR Internal Auditor Training Program – Student Manual
Observations: Auditor Diligence
The auditor must know how he/she is going to ensure diligence in answering the
question. The audit question guideline provides some guidance, but a diligence
strategy is required to effectively determine a final result.
4.2 “Have critical safe job procedures been written to cover
Example
worker activities?”
Determine if all critical safe job procedures have been
written. Identify missing procedures as “recommendations”
Guideline in the Auditor Executive Summary Report. A critical task is
a task that has the potential to produce major loss to
people, equipment, processes, or the environment.
1. The SMS must include critical Safe Job Procedures.
2. Observed critical work on-site must have relevant
documented critical Safe Job Procedures.
Diligence Strategy
3. Any observed critical work on-site without a
corresponding critical Safe Job Procedure would
contribute to an insufficient mark for this audit question.
43
V2.2 COR Internal Auditor Training Program – Student Manual
Observations: Application
The following steps must be followed to apply observation review:
1. Print 1 copy of observation questions per site that you plan to visit.
2. Record results on the Observation form, and make notes. These notes will be
needed when writing the auditor comments.
3. Transfer to the Observation Summary tab in the Audit document.
Notes:
Information from the Observation Summary tab gets automatically
transferred to the “O” column of each “E1–E14” tab.
At least half of the observation tours must be positive in order to receive an overall positive
mark for the relavant audit question.
44
V2.2 COR Internal Auditor Training Program – Student Manual
Step 3: Interviews
45
V2.2 COR Internal Auditor Training Program – Student Manual
Interviews: Conducting Interviews
Interviews are the third verification method used when conducting an audit. They
help to finalize the picture of how a company is operating in reference to their stated
Safety Program requirements. Ensure that interviews take place in a private area
where interviewees will feel comfortable knowing their answers are not being
overheard.
Example 1.9 “Can you explain what the policy means to you?”
“If you were to compare working for this company, which
has a safety policy, to another employer that doesn’t have
How to Paraphrase
any safety policy… how would ‘having a safety policy’
affect your work?”
46
V2.2 COR Internal Auditor Training Program – Student Manual
Interviews: Application
1. Print 1 copy of and 1 copy of per site visited.
2. Record results on the form and make notes. These notes will be needed when
writing the auditor comments.
Note: Information from the Interview Summary tab gets automatically transferred
to the “I” column of each “E1–E14” tab.
50% of interviews must be positive in order to receive a positive mark for the
relevant audit question.
47
V2.2 COR Internal Auditor Training Program – Student Manual
Module 3: Review
Part 1: Checkboxes
Read the following questions and determine whether the question is referring to a
Safety Management System (SMS) document or a Due Diligence (DD) document.
1. [Safety Policy] expresses a commitment to work in a spirit of
consultation and cooperation with workers?
Guideline: The policy should outline the commitment of the company to work
with their employees to promote a safe and healthy work environment.
48
V2.2 COR Internal Auditor Training Program – Student Manual
4. Are the [company] rules applied and enforced consistently with all
employees?
Guideline: Obtain evidence that the disciplinary process is being used. Look
for disciplinary letters (blacked out) or similar documentation.
Guideline: Look for documentation to support that the employer has a formal
orientation program. Reference: section 3.23 of the OHS Regulation (Young
or new worker orientation and training).
49
V2.2 COR Internal Auditor Training Program – Student Manual
Module 4: Post-Audit Activities
Overview
Module 4:
Student Audit Final Exam
Review
Upon completion of the audit, the auditor should have an accurate understanding of
the health and safety aspect of company operations. Using experience combined with
clear documentation, observation, and interview notes will allow the auditor to make
practical recommendations for company improvement.
50
V2.2 COR Internal Auditor Training Program – Student Manual
Step 1: Review Audit Data
Given the diversity of questions and methods of verification, it is prudent to double-
check all audit data prior to finalization. Ensure that all scores match up with the
comments provided and that comments are in line with the audit question directive.
1. Double-check all of your work.
2. Ensure that Scores Comments.
3. Ensure that Comments Directives.
The Audit Summary tab is auto-calculated to show the total score/percentage for
each element, the overall audit score/percentage for the entire audit, and an
indication of whether the audit resulted in a pass or fail mark.
51
V2.2 COR Internal Auditor Training Program – Student Manual
Step 2: Executive Summary Tab
The Executive Summary is an opportunity for the auditor to provide a succinct
summary of the company health and safety performance while providing practical
general guidance for future improvement.
Step 1
Thank the organization for their effort and help during the audit. Identify the
individuals who assisted you during the audit.
Step 2
Provide a brief description of the company being audited and describe the scope of
the audit (i.e., audit start and end dates, sites visited, number of interviews
conducted, and any other relevant information). If any variances were made on the
number of sites visited or interviews conducted, explain in detail.
52
V2.2 COR Internal Auditor Training Program – Student Manual
Step 3
Complete the main body of the report by summarizing the findings of the audit for
every Element. For each of the 14 elements, describe areas of strength and
recommended areas for improvement.
1. Strengths
Strengths must be listed for each element of the audit. These can be based on
documentation, observations, or interviews. Often, the company being audited might
focus on deficiencies only, and strengths provide an opportunity to examine what is
working well.
2. Recommendations
Recommendations provide guidance for developing the Corrective Action plan and
are focused on desired outcomes. Recommendations must be made for elements
scoring 100%. These can guide a company toward ongoing improvement, yet aren’t
related to a specific deficiency. Recommendations must also be included for each
audit question that scored zero or had a negative result for a verification technique.
All recommendations must reference the relevant audit question at the beginning of
the recommendation as shown in Figure 20.
Example 2 in Figure 20 shows a recommendation.
Step 4
Write a concluding paragraph. Remind the company to develop a Corrective Action
plan that addresses areas for improvement identified in the audit findings. Thank the
company for allowing you to present the audit. Remind them that by focusing on the
areas for improvement, their program may be more effective at reducing the impact
of workplace injuries.
53
V2.2 COR Internal Auditor Training Program – Student Manual
Step 3: Post-Audit Meeting
The post-audit meeting should take 30–60 minutes depending on the questions and
comments generated. The meeting is a review of the overall audit performance and
each of the elements. It should include some helpful guidance on how to improve for
the next audit.
The auditor must be prepared to defend all deficient questions with a complete
explanation based on objective observations and avoid using his/her opinion as much
as possible.
54
V2.2 COR Internal Auditor Training Program – Student Manual
Post-Audit Meeting Notes
The auditor must conduct a thorough review of the
completed document prior to the post-audit meeting:
Purpose and scope of the audit — This is
to measure the effectiveness of your health
and safety program against a provincial
standard, which requires a minimum score of
80% to achieve your certificate of recognition.
The audit is a way of measuring your health
and safety program’s effectiveness by
applying a quantitative value to it. Passing
the audit will result in a 10% incentive on the
base assessments for health and safety and
5% for RTW.
Audit document that was used — The audit document covers 14 elements
of an OHS program. Marks are awarded using three different methods;
Documentation, Observation, and Interviews. A score of 80% is required to
pass the audit. A minimum of 50% must be achieved in each of the 14
elements or a Limited Scope Audit may be applied for. No partial marks will
be awarded. It’s an all or nothing situation.
Present the audit score — Discuss the final audit score and criteria for
passing the audit. If the score was 70–79%, inform the company about their
ability to request approval for a Limited Scope Audit.
Discuss the target audit score for the next audit — Ask the company if
they know what they would like to set as a target for the following year.
Generally, a target should be 3–8% improvement. Any more than that and
the company may be undergoing too much change at once and risk losing
ground in other areas of performance.
Outline next steps for the company — Inform the Senior Manager to
review/add their name to the Audit Summary and Corrective Action, and state
that the completed audit must be emailed to cor@bccsa.ca.
55
V2.2 COR Internal Auditor Training Program – Student Manual
Step 4: Corrective Action Plan Tab
The Corrective Action Plan (CAP) describes the steps to address deficiencies
identified in the audit report. While it is the responsibility of the company to
complete the report, the Auditor may be able to provide ideas on appropriate
recommendations for corrective actions when the audit findings are presented to the
company.
57
V2.2 COR Internal Auditor Training Program – Student Manual
Appendix 1: In-Class Case Study
Company Information
ABC Construction Ltd. is owned by Sarah Wells. She also owns a sister company
named CBA Contracting Inc. ABC provides management services as the Prime
Contractor for high-rise concrete condo buildings, while CBA Contracting constructs
wood frame townhouse complexes.
You are the company’s primary COR contact, so use your own name and email
address. The secondary COR contact is N/A. The president is Sarah Wells, and her
email address is swells@abcconstruction.ca.
ABC Construction Ltd. would be considered the primary COR applicant. You will be
the auditor and must complete all of your own personal information.
Certification #: 12345
Auditor Cert. Expiry Date: January 1, 2020 Month # of Employees
Audit start date is today. 1 100
Site escort is N/A.
Set your own anticipated end date. 2 98
These people will attend the pre (today) & post (15 days later) audit meetings:
Sarah Wells, Teresa Koch, Stanley Trevino, and Joseph Sauer.
58
V2.2 COR Internal Auditor Training Program – Student Manual
Health & Safety Manual Table of Contents
Job List
Classification
Job # Job Name Location OMS Workers
Unit
59
V2.2 COR Internal Auditor Training Program – Student Manual
In-Class Case Study — Documentation
Section 6 — PPE
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
60
V2.2 COR Internal Auditor Training Program – Student Manual
61
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
Eye Protection
Face Protection
Definitions
1. “Anchor” — a component or subsystem of a fall protection system used to connect the other parts of
a fall protection system to an anchorage. It includes an anchorage connector.
2. “Full Body Harness” — a body support device consisting of connected straps designed to distribute
the force resulting from a fall over at least the thigh, shoulders, and pelvis, with provision for attaching
a lanyard, lifeline, or other components.
3. “Lanyard” — a flexible line of webbing, or synthetic or wire rope, that is used to secure a safety belt or
full body harness to a lifeline or anchor.
62
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
Instructions
1. All fall protection equipment will:
2. Only one personal fall restraint or fall arrest system will be connected to each anchor point at any
time unless authorized by a competent person or designed by an engineer.
3. Anchors must have an ultimate load capacity (in any direction) as shown in the table below.
4. All connectors used in a personal fall arrest or personal fall restraint system will:
· have an attached and legible manufacturer’s tag or stamp indicating CSA or ANSI approval
· not be marked on the software or engraved by the end user on the hardware
5. All snap hooks and carabiners will be:
· fitted with a functioning auto-locking mechanism
· used in a manner that prevents forced roll-out, three-way loading, cross-gate loading, or gating
over an edge
6. Only full-body harnesses will be used in a Fall Protection System and will:
· have an attached and legible manufacturer’s tag indicating CSA or ANSI approval
· be fitted properly for each intended end-user
· not be marked with felt pen on the webbing or engraving on metal components
Fitting
Inspection
8. Before using a fall restraint or fall arrest system, all equipment will be visually inspected by the end
user.
9. In addition to (7), the site supervisor or designate will ensure that a competent person conducts a
formal inspection of all fall protection equipment and system components.
10. A competent person will document formal inspection results on the Fall Protection Equipment
Inspection Form.
11. Any equipment that is past the manufacturer-recommended service life, appears to be damaged or
63
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
defective, or shows signs of deployment will not be used and will be reported to the site supervisor or
designate.
12. Damaged or defective fall protection system components that are permanent fixtures will not be used
until they have either been replaced, or inspected and re-certified by the manufacturer, an authorized
agent of the manufacturer, or a certified engineer.
Storage
13. When not in use, all fall protection system components will be:
· stored indoors, whenever possible, or stored in a cool, dry environment away from direct
sunlight and rain, if possible
· kept free of dirt, oil, grease, markers, chemicals, abrasive materials, and anything else that
may damage the equipment
Hearing Protection
3. The education and training of workers exposed to noise above the exposure limits stated in (1) should
include the following:
· results of any noise exposure measurements
· effects of noise on hearing
· proper use and maintenance of hearing protection
· purpose of hearing testing
4. The employer must give workers who are exposed to noise that exceeds noise exposure limits
· an initial hearing test as soon as practicable after employment starts, but not later than 6 months
after the start of employment, and
· a test at least once every 12 months after the initial test.
5. Hearing tests must be administered by a hearing tester authorized by the Board.
64
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
6. The employer must ensure that the authorized hearing tester sends the test results to the Board.
Fitting
1
From “Personal Protective Equipment – Inserting your foam earplugs” published by WorkSafeBC at
http://www2.worksafebc.com/i/PPE/PDFs/InfoSheets/PPE09-031.pdf
65
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
High-Visibility Vest
1. High-visibility vests must be worn whenever instructed to do so, and
2. Must meet Type 1, Type 2, or Type 3 criteria of WCB Personal Protective
Equipment
Fitting
3. Garments should be fitted to the person. Don't forget to consider the bulk
of clothing that might be worn underneath the garments, and how the
garment should be worn (i.e., done up properly around the body with no
loose or dangling components). The garments should sit correctly on
your body and stay in place during your work.
4. The apparel should be comfortable to wear - the parts of the apparel that
come into direct contact with the worker should not be rough, have sharp
edges, or projections that could cause excessive irritation or injuries. The
apparel should also be lightweight.
5. Garments should be selected and worn so that no other clothing or
equipment covers the high-visibility materials (e.g., glove gauntlets,
equipment belts, and high-cut boots).
Dust Masks
66
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
General
1. Any respiratory protective equipment must comply with CSA
Standard CAN/CSA-Z94.4-11 — Selection, use, and care of
respirators.
2. The site supervisor or designate will ensure all respirators:
· are purchased from an authorized dealer
· consist of compatible and suitable components
· are sufficient to protect against the identified hazardous
environment
· meet applicable regulatory standards
Respirator Fit Tests
3. Wherever a respirator requires an effective seal with the face for
proper functioning, a fit test will be performed by a qualified person
or agency.
4. The fit test will be carried out in all the following cases:
· before initial use of a respirator
· at least once a year
· when there is a change in respirator face-piece
· when changes to the user’s physical condition could affect
the respirator fit
5. Any personal protective equipment that will be worn at the same
time as a respirator and could interfere with the respirator fit will be
worn during the fit test.
6. Fit tests will be documented on the Respirator Fit Test Record and
filed in the worksite filing system.
7. Workers will perform a positive and negative pressure seal check
before each use of a respirator that requires an effective seal with
the face for proper functioning.
Fitting
2
From “Breathe Safer – How to Use Respirators Safety and Start a Respirator Program” published by WorkSafeBC
67
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
Cartridges
8. Cartridges will be changed in accordance with manufacturers’ instructions. Whenever a new cartridge is
installed, the installation date will be clearly indicated on the cartridge using a suitable marking device.
Storage
9. When not in use all respirators will be:
· stored indoors where practicable, or stored in a cool, dry environment away from direct sunlight
and rain, if practicable
· kept free of dirt, oil, grease, markers, chemicals, abrasive materials, and anything else that may
damage the equipment
Inspection
10. Before using a respirator, all components of the system will be visually inspected by the end user.
Any equipment that appears to be damaged or defective will not be used and will be reported to the site
supervisor or designate in accordance with established company procedure.
Safety Footwear
68
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
Safety Headgear
3. Safety headgear will not be altered or marked with paint, felt markers, or any other marking device.
4. Materials attached to a hard hat must not affect the hat’s ability to protect the head.
5. Regular chin straps or other effective means of retention must be used on safety headgear when
workers are climbing or working from a height exceeding 3 m (10 ft.) or are exposed to high winds or
other conditions that may cause loss of the headgear.
Damaged headgear or headgear with missing, mismatched, or modified components must be removed
from service.
Training Requirements
Type Who Topic Description
Topics should include the following:
· Equipment standards (CSA/ANSI)
Anyone who works at · Fall Protection Regulation
Formal Fall Protection
height · Fall Protection Systems
· Practical Harness Fitting
· Fall Protection System Setup/Analysis
FORMS REQUIREMENTS
Form Completed By When Post?
Fall Protection Equipment Competent
Quarterly No
Inspection Form Person
· before initial use of a respirator
· at least once a year
Respirator Fit Test
Qualified Person · when there is a change in respirator No
Record face-piece
· when changes to the user’s physical
condition could affect the respirator fit
69
V2.2 COR Internal Auditor Training Program – Student Manual
ABC Construction Ltd. & CBA Contracting Inc. HEALTH & SAFETY MANUAL
Inspected by Date
Webbing
Comments:
Stitching
Comments:
D-Rings
Comments:
Buckles
Comments:
Harness Result
70
V2.2 COR Internal Auditor Training Program – Student Manual
71
V2.2 COR Internal Auditor Training Program – Student Manual
Training Matrix and Status
This is based on the auditor-select sample size of 53 employees.
72
V2.2 COR Internal Auditor Training Program – Student Manual
73
V2.2 COR Internal Auditor Training Program – Student Manual
In-Class Case Study — Observations
Use the Site Observation notes from the sites listed below to answer the Observation
Questions for Element 6 only. Use this worksheet to record a or for each
observation question, then transfer these results to the .
Basic Specialized
Glasses, welding shields, goggles, fire-resistant coveralls, chemical
Gloves, footwear, and
suits, impermeable gloves, personal fall protection, and respiratory
headgear
protection
74
V2.2 COR Internal Auditor Training Program – Student Manual
In-Class Case Study — Interviews
Use the Interview notes from the employees listed below to complete the
and tabs in the same Audit Document that you
downloaded from the BCCSA website.
Record the following responses as either positive or negative, then transfer the total
number of positive/negative results to the audit document.
There are 4 OMS and 6 Worker interview responses (instead of the audit scope-
required 18 worker interviews). This has been done on purpose due to classroom
time constraints.
OMS Interviews
6.4 Who provides specialized PPE?
OMS 1 – “The company does.”
OMS 2 – “Employees get issued PPE when they start with the company.”
OMS 3 – “That’s up to the employees to provide it.”
OMS 4 – “We do.”
6.7 Does the company provide training on the use of PPE?
OMS 1 – “No.”
OMS 2 – “Yes, some of my guys have got training.”
OMS 3 – “The guys on my crew have lots of experience and don’t need
specific training.”
OMS 4 – “We would… I’m pretty sure, but we work in an office and don’t need
any PPE.”
6.8 How is the proper PPE selected for a specific job?
OMS 1 – “Common sense. If you’re working at height, then just don’t fall, or
you could put on a fall arrest harness. They should really be teaching
common sense to people.”
OMS 2 – “We pretty much know what’s needed. Hard hats all the time.”
OMS 3 – “We have a daily toolbox where the work tasks and hazards are
discussed. We choose PPE for the day based on whatever hazards might be
present.”
OMS 4 – “Aside from the standard PPE always required on the worksite, such
as steel-toe boots and a hard hat, we determine additional items like high-vis
vests if there’s going to be heavy equipment, or other items depending upon
the work that’s being done.”
75
V2.2 COR Internal Auditor Training Program – Student Manual
Worker Interviews
6.2 What PPE is required for your job?
Worker 1 – “Steel-toed boots, high-vis vest, hard hat, and safety glasses.”
Worker 2 – “High-vis vest, hard hat, safety glasses, and face shield if I’m
grinding, mask if there’s dust, fall protection gear if working at height.”
Worker 3 – “We just need safety boots and a hard hat.”
Worker 4 – “From my head to my feet I need hard hat, hearing protection
when its loud, safety glasses to protect my eyes, a respirator if there’s silica
or asbestos around, high-visibility vest to make it easy to see me and not get
run over by large equipment, fall protection harness if I’m working above 10’,
knee pads to keep my knees safe when I’m working on my knees, gloves to
protect my hands from scratches, and CSA-rated steel-toed boots.”
Worker 5 – “We use the standards of course. You know, hard hats and boots.
But some sites make you wear high-vis all the time. Then there’s safety
glasses, gloves, and earplugs if needed.”
Worker 6 – “None. I work in the office.”
6.3 How do you obtain basic PPE?
Worker 1 – “My supervisor.”
Worker 2 – “There are some safety gloves and extra hard hats in the site
trailer that I can grab if needed.”
Worker 3 – “I have to go and buy it.”
Worker 4 – “I get it myself from the store. It’s my responsibility.”
Worker 5 – “Me. I’m supposed to supply basic PPE. It’s clearly stated in OHS
Regulation 8.2.”
Worker 6 – “The safety person has a locker somewhere here with a bunch of
PPE in it.”
6.4 Is specialized PPE available when required?
Worker 1 – “Yes, I just need to tell the foreman.”
Worker 2 – “Sure, I call or text the safety person.”
Worker 3 – “Not really. The company doesn’t treat us very well.”
Worker 4 – “Yea, the safety person would get it for me. But I have all my own
personal PPE because I like to have really good things.”
Worker 5 – “Yes, I make sure to get this from the employer. They’re
responsible to provide it.”
Worker 6 – “The company provides everything that’s needed.”
6.7 Have you received PPE training?
Worker 1 – “Yea, I had training from a previous employer. That was about
10 years ago, but it’s all pretty common sense.”
Worker 2 – “No, should I get trained in PPE use?”
Worker 3 – “Yea, back in 1986.”
Worker 4 – “Yes, I took some fall protection training last month and the
company safety manager gave me a respirator along with a fit test.”
Worker 5 – “Yes, I was in the same fall protection course as a couple other
guys a little while ago.”
Worker 6 – “No, but we work in an office. I can’t think of any PPE training
that would be needed.”
76
V2.2 COR Internal Auditor Training Program – Student Manual
Appendix 2: Final Exam Case Study
Use this information to complete the questions in the Final Exam.
Company Information
BC Interior Construction Ltd. is a Kamloops-based company that builds wood frame
townhome complexes and concrete high-rise condos throughout Kamloops, Kelowna,
and Fort St. John. They were established in 2004 and currently have 105 people on
payroll. Their number of employees has varied depending upon the time of year. The
list below shows the number of employees on payroll for each of the past 12 months.
They received the initial COR certification (external) audit two years ago, have had
one internal maintenance audit conducted, and this would be the second
maintenance audit. In both of the previous audits, the auditor visited sites in
Kamloops and Kelowna but did not visit Fort St. John. The previous internal auditor
has recently quit and you are now the internal auditor.
Totals 13 92
77
V2.2 COR Internal Auditor Training Program – Student Manual
Executive Summary
Step 1: Thank the organization for their effort and help during the audit. Identify
the individuals who helped you during the audit.
Step 2: Provide a brief description of the company being audited and describe the
scope of the audit (i.e., start and end dates of the audit, sites visited, number of
interviews conducted, and any other relevant information). If any variances were
made on the number of sites visited or interviews conducted, explain in detail.
Use the following space to complete Steps 1 and 2:
Thank you for your help during this audit.
1 93%
Recommen
dations
78
V2.2 COR Internal Auditor Training Program – Student Manual
Appendix 3: Terms of Participation
79
V2.2 COR Internal Auditor Training Program – Student Manual
COR
INTERNAL AUDITOR PROGRAM
Terms of Participation
I have read and understood the terms & conditions set out in the COR Internal Program - Terms of Participation
1. Program Goals
2. Roles & Responsibilities
3. Internal Auditor Code of Conduct
4. Auditor Qualification & Training
5. Performance Management
SIGNATURE: DATE:
Performance Management 11
t$PNNVOJDBUJPO5SBJOJOH.FOUPSTIJQ
t2VBMJUZ"TTVSBODFPG"VEJU3FQPSUT
t2VBMJUZ"TTVSBODFPG*OUFSOBM"VEJUPST
t%JTDJQMJOBSZ"DUJPO
Internal Auditor
$03*OUFSOBM"VEJUPSTBSFSFTQPOTJCMFGPSDPOEVDUJOHUIFNTFMWFTXJUIJOUFHSJUZ FTUBCMJTIJOHBOENBJOUBJOJOH
USVTUXJUIUIF#$$4"BOEUIPTFJOXIJDIUIFZBVEJU5IJTQSPWJEFTUIFCBTJTGPSSFMJBODFPOUIFJSKVEHNFOU
*OUFHSJUZSFRVJSFT"VEJUPSTUPNFFUUIFFTUBCMJTIFEBVEJUJOHTUBOEBSETBOEBMTPSFRVJSFT"VEJUPSTUPPCTFSWF
UIFQSJODJQMFTPGJOEFQFOEFODF PCKFDUJWJUZ TUBOEBSETPGQSPGFTTJPOBMDPOEVDU BOEBCTPMVUFIPOFTUZJOUIFJS
XPSL5IF SFTQPOTJCJMJUJFT PG UIF "VEJUPS EVSJOH UIF BVEJU QSPDFTT QMBDFT B IJHI FUIJDBM EFNBOE PO UIFJS
DPOEVDU BOE QSPGFTTJPOBM QSBDUJDFT "VEJUPST NVTU FYIJCJU UIF IJHIFTU MFWFM PG QSPGFTTJPOBM PCKFDUJWJUZ JO
HBUIFSJOH FWBMVBUJOHBOEDPNNVOJDBUJOHJOGPSNBUJPOBCPVUUIFBVEJUBDUJWJUJFT5IFZNVTUNBLFBCBMBODFE
BTTFTTNFOUPGBMMUIFSFMFWBOUDJSDVNTUBODFTBOEBSFOPUUPCFVOEVMZJOøVFODFECZUIFJSPXOJOUFSFTUTPSCZ
PUIFSTXIFOGPSNJOHKVEHNFOUT
WorkSafeBC
8PSL4BGF#$TEPDVNFOU The Certificate of Recognition Program: Standards & Guidelines sets out the standards
BOE HVJEFMJOFT BTTPDJBUFE XJUI #SJUJTI $PMVNCJBT $03 QSPHSBN BOE 1BSU PG UIF EPDVNFOU PVUMJOFT
SFTQPOTJCJMJUJFTBOESFRVJSFNFOUTBTTPDJBUFEXJUI$03"VEJUPST#$$4"FYQFDUT"VEJUPSTUPSFWJFX1BSUPG
UIJTEPDVNFOUBOECFDPNFGBNJMJBSXJUIUIFDPOUFOU
Definition:
Internal Auditoro5IJTJOEJWJEVBMJTBQFSNBOFOUFNQMPZFFPGUIFFNQMPZFSXIPIBTSFDFJWFEBNJOJNVN
PGIPVSTPGDPNCJOFEJOTUSVDUJPOBOEUSBJOJOHGSPNB$FSUJGZJOH1BSUOFSPOIPXUPDPOEVDU EPDVNFOU
BOE TDPSF B $03 BVEJU PG IFBMUI BOE TBGFUZ NBOBHFNFOU TZTUFNT BOEPS JOKVSZ NBOBHFNFOUSFUVSO
UPXPSLTZTUFNT*GUIFFNQMPZFSJTBTNBMMFNQMPZFS XJUIGFXFSUIBOXPSLFST UIFJOUFSOBMBVEJUPSJT
FNQPXFSFEUPDPOEVDUCPUIDFSUJöDBUJPOBVEJUTBOEBOOVBMNBJOUFOBODFBVEJUT*GUIFFNQMPZFSJTBMBSHF
FNQMPZFS XJUI PS NPSF XPSLFST UIF JOUFSOBM BVEJUPS JT FNQPXFSFE UP DPOEVDU BOOVBM NBJOUFOBODF
BVEJUTPOMZ/PUFUIBUJOPSEFSUPQFSGPSNBOJOUFSOBMBVEJUPOBMBSHFFNQMPZFS UIFBVEJUPSNVTUCFUSBJOFE
UP VUJMJ[F UIF MBSHF FNQMPZFS BVEJU UPPM XIJDI NBZ FYDFFE UIF NJOJNVN IPVST PG SFRVJSFE USBJOJOH
4.2$03BVEJUPSTNVTUPCTFSWFQSPGFTTJPOBMQSBDUJDFT EFNPOTUSBUFDPNQFUFODFJOPDDVQBUJPOBMIFBMUIBOE
TBGFUZ BOEQPTTFTTBOBQQSPQSJBUFNJYPGTLJMMTBOEBUUSJCVUFT
4.3 $03 BVEJUPST NVTU IBWF DPNQMFUFE $03TQFDJöD USBJOJOH SFRVJSFE GPS UIF UZQF PG BVEJU UIFZ XJMM CF
performing.
4.4 COR auditors must commit to the “Code of Conduct for COR Auditors.” The “Code of Conduct for COR
Auditors” calls for auditors to:
"QQSPWFE $03 QSPHSBN BVEJUPST BSF SFRVJSFE UP LFFQ DVSSFOU PO BVEJUJOH RVBMJUZ TUBOEBSET BOE BVEJU
JOTUSVNFOUVTF BOEUIFZBSFFYQFDUFEUPQVSTVFPQQPSUVOJUJFTUPJNQSPWFBOENBJOUBJOUIFJSBVEJUJOHTLJMMT
5PUIJTFOE $03BVEJUPSTNVTU
tCFSFBQQSPWFEBUMFBTUPODFFWFSZZFBST
tDPNQMFUFBNJOJNVNPGIPVSTPGBVEJUPSSFGSFTIFSSFDFSUJöDBUJPOUSBJOJOHPSFRVJWBMFOUBTEFFNFE
BQQSPQSJBUFCZUIFDFSUJGZJOHQBSUOFSPWFSUIFUISFFZFBSBVEJUPSDFSUJöDBUJPOQFSJPEUPCFFMJHJCMF
for re-approval
*OUFSOBM"VEJUPSTNVTUBMTPDPOEVDUBNJOJNVNPGBVEJUTXJUIJOUIFZFBSQFSJPECFUXFFOUIFJSJOJUJBM
DFSUJöDBUJPOBOEUIFJSDFSUJöDBUJPOFYQJSBUJPOEBUF5IF$FSUJGZJOH1BSUOFSNBZBDDFQUUFBNBVEJUTGSPNDFSUJöFE
BVEJUPSTUPTBUJTGZUIJTSFRVJSFNFOU QSPWJEFEUIFBVEJUPSTBSFJOWPMWFEJOEPDVNFOUSFWJFXT JOUFSWJFXT BOE
observation processes.
Expectations
5IFGPMMPXJOHBSFUIFQSJODJQMFTBOESVMFTUIBUBMM#$$4"*OUFSOBM"VEJUPSTBSFUPGPMMPX5IFGBDUUIBUBQBSUJDVMBS
DPOEVDUJTOPUNFOUJPOFEJOUIJT$PEFEPFTOPUQSFWFOUBOBDUJPOGSPNCFJOHVOBDDFQUBCMF BOEUIFSFGPSF BO
"VEJUPSPSJOTUJUVUJPODBOCFMJBCMFGPSEJTDJQMJOBSZBDUJPO"VEJUPSTTIBMMOPUWJPMBUFUIF$PEFPG$POEVDU"OZ
CSFBDIPGUIF$PEFXJMMSFTVMUJOBGPSNBMSFWJFXBOEEJTDJQMJOBSZBDUJPO
A. Integrity
5IFJOUFHSJUZPG"VEJUPSTFTUBCMJTIFTUSVTUBOEQSPWJEFTUIFCBTJTGPSSFMJBODFPOUIFJSKVEHNFOU*OUFHSJUZSFRVJSFT
"VEJUPST UP PCTFSWF CPUI UIF GPSN BOE TQJSJU PG BVEJUJOH TUBOEBSET *U BMTP SFRVJSFT "VEJUPST UP PCTFSWF UIF
QSJODJQMFTPGJOEFQFOEFODF PCKFDUJWJUZ TUBOEBSETPGQSPGFTTJPOBMDPOEVDU BOEBCTPMVUFIPOFTUZJOUIFJSXPSL
Auditors shall:
t'PMMPXIJHITUBOEBSETPGIPOFTUZ GBJSOFTT JOUFHSJUZBOEFUIJDBMDPOEVDU
t3FTQFDUBOEBDUXJUIEFEJDBUJPOUPUIF$031SPHSBNHPBMTBOEWJTJPO
t$POEVDUCVTJOFTTJOBOIPOFTUBOEGBJSNBOOFS XJUIPVUBDUVBMPSBQQBSFOUDPOøJDUPGJOUFSFTU
t"EWJTFUIF#$$4"JOXSJUJOHXJUISFBTPOT XIFOFWFSUIFBDUJWJUJFTPSDPOEVDUPGBOBVEJUPSBQQFBSUP
CFJODPOøJDUXJUIUIJT$PEF
t/PUCFBTTPDJBUFEXJUIBOZSFQPSU TUBUFNFOUPSSFQSFTFOUBUJPOLOPXOUPCFGBMTFPSNJTMFBEJOH
t3FTQFDUUIFJOUFHSJUZPGPUIFS*OTUSVDUPST SFDPHOJ[JOHUIFJSEJòFSFOUFYQFSJFODFTBOEBSFBTPGFYQFSUJTF
t$PNQMZXJUIUIFWorkers Compensation Act and the Occupational Health and Safety Regulations BTXFMMBT
BMMPUIFSBQQMJDBCMFMBXTBOESFHVMBUJPOT
t/PUSFQSFTFOUUIFNTFMWFTBTFNQMPZFFTPSDPOUSBDUPSTPGUIF#$$4"BUBOZUJNF
7 t4FSWFUIFDPNQBOZCFJOHBVEJUFE JOBDPOTDJFOUJPVT EJMJHFOU SFTQFDUGVM BOEFóDJFOUNBOOFS
C. Confidentiality
"VEJUPSTNVTUSFTQFDUUIFWBMVFBOEPXOFSTIJQPGJOGPSNBUJPOUIFZSFDFJWFEVSJOHBOBVEJUBOEOPUEJTDMPTF
JOGPSNBUJPOUPBOZUIJSEQBSUZ PSBMMZPSJOXSJUJOH XJUIPVUBQQSPQSJBUFBVUIPSJUZ BOEVOMFTTUIFSFJTBMFHBMPS
professional obligation to do so. Auditors shall:
t.BJOUBJOUIFDPOöEFOUJBMJUZPGJOGPSNBUJPOSFDFJWFEEVSJOHUIFBVEJU
t#FQSVEFOUJOUIFVTFPGJOGPSNBUJPOBDRVJSFEJOUIFDPVSTFPGUIFJSXPSL
t5BLFBMMSFBTPOBCMFTUFQTUPQSPUFDUUIFDPOöEFOUJBMJUZPGUIFBVEJUSFTVMUT EBUBDPMMFDUFEBOEUIF
BOPOZNJUZPGJOUFSWJFXFFT
t/PUVTFBVEJUJOGPSNBUJPOGPSBOZQFSTPOBMHBJO öOBODJBMPSPUIFSXJTFUIBUXPVMECFDPOUSBSZUPUIFMBX
UIFBVEJUQSPDFTT PSEFUSJNFOUBMUPUIF#$$4"
t/PUTIBSF FJUIFSGPSQSPöUPSPUIFSXJTF BOZ#$$4"QSPDFTTPSQSPHSBNNBUFSJBMTXJUIPVUXSJUUFO
QFSNJTTJPOGSPNUIF#$$4"
D. Competency
"VEJUPSTNVTUBQQMZUIFLOPXMFEHF TLJMMTBOEFYQFSJFODFOFFEFEJOUIFQFSGPSNBODFPGBVEJUJOHTFSWJDFT
Auditors shall:
t$POUJOVBMMZTFFLUPNBJOUBJOBOEJNQSPWFUIFJSQSPöDJFODZ FòFDUJWFOFTT BOERVBMJUZPGUIFJSTLJMMT
t#FDPOTJTUFOUBOEBDDVSBUFJOUIFJSFWBMVBUJPOTPGEBUBPCUBJOFEUISPVHIEPDVNFOUBUJPO JOUFSWJFXTBOE
observations.
8
E. Compliance
$03 "VEJUPST NVTU DPNQMZ XJUI #$$4" $03 QSPHSBN QPMJDJFT BOE QSPDFEVSFT DPOEVDUJOH $03 BVEJUT
JO BDDPSEBODF XJUI FTUBCMJTIFE BVEJU QSPUPDPM BOE QBSUJDJQBUJOH DPPQFSBUJWFMZ XJUI UIF #$$4" JO UIF
administration of the COR program. Auditors shall:
t4VCNJU/PUJDFTBOE"VEJU3FQPSUTXJUIJOUIFTQFDJöFEUJNFMJOFT
t$PNQMFUFBVEJUTUIBUBEESFTTUIF$03QSPHSBNNJOJNVNTDPQFSFRVJSFNFOUT
t$PNQMZXJUIBVEJUSFQPSUTVCNJTTJPOSFRVJSFNFOUT
t1FSGPSNUIFOFDFTTBSZNJOJNVNOVNCFSPGBVEJUTUPNBJOUBJODFSUJöDBUJPO
t,FFQVQEBUFEPOUIF$03QSPHSBNWJBUIF#$$4"XFCTJUFBOE"VEJUPSDPSSFTQPOEFODF
t1BSUJDJQBUFJO#$$4"RVBMJUZBTTVSBODFBDUJWJUJFTBOEDPNQMZXJUIRVBMJUZBTTVSBODFPVUDPNFT
9 t'PMMPXUIF"VEJUPS$PEFPG$POEVDU
Step 2
$PNQMFUFUIFEBZ$03*OUFSOBM"VEJUPSDPVSTF
Step 3
$PNQMFUFBTVDDFTTGVMTUVEFOUBVEJUBTTJHONFOUPOBIPTUDPOTUSVDUJPODPNQBOZXJUIJOXFFLTPGZPVS
MBTUEBZPGUSBJOJOH4UVEFOUBVEJUBTTJHONFOUTXJMMCFFWBMVBUFEBHBJOTUBEFUBJMFERVBOUJUBUJWFNBSLJOH
TDBMF4UVEFOUBVEJUBTTJHONFOUJOTUSVDUJPOTBTXFMMBTUIFNBSLTIFFUXJMMCFSFWJFXFEXJUIFBDITUVEFOU
BVEJUPSEVSJOHUIF$03*OUFSOBM"VEJUPS5SBJOJOHDPVSTF4VDDFTTGVMTUVEFOU"VEJUPSTXJMMCFJTTVFEB$03
*OUFSOBM"VEJUPSDFSUJöDBUFWBMJEGPSZFBST
Note:
$FSUJöDBUJPO JT NBJOUBJOFE UISPVHI TVCNJTTJPO PG $03 BVEJUT CZ UIF RVBMJöFE $03 *OUFSOBM "VEJUPST
XJUIJOUIFZFBSQFSJPE.
10
.FOUPSTIJQ JT B LFZ FMFNFOU JO UIF JNQSPWFNFOU PG BVEJUJOH TLJMMT BOE #$$4" XJMM XPSL UP QSPWJEF $03
"VEJUPSTXJUIJOGPSNBUJPO GFFECBDL BOEDPBDIJOH XIFOOFDFTTBSZ
5IFPOVTUPSFNBJOJOGPSNFEMJFTXJUIUIF$03"VEJUPSBOEUIF#$$4"FYQFDUTUIBU"VEJUPSTSFBEBOESFTQPOE
UPDPNNVOJDBUJPOTJODMVEJOHFNBJMT OFXTMFUUFST EJSFDUJWFT BOEBMMPUIFSDPSSFTQPOEFODFSFHBSEJOHUIFJS
QFSGPSNBODF BOEVQEBUFTUP$03
"MMBVEJUSFQPSUTTVCNJUUFEUPUIF#$$4"XJMMCFTVCKFDUFEUPBGPSNBMEFTLUPQSFWJFX"VEJUTXIJDIEPOPU
NFFUUIFSFRVJSFETUBOEBSEBSFTFOUCBDLUPUIF*OUFSOBM"VEJUPSGPSSFWJTJPOBOESFTVCNJTTJPO"VEJUPST
XJMMSFDFJWFBOPUJöDBUJPODPOUBJOJOHBQQSPQSJBUFJOTUSVDUJPOTPOBTQFDUTPGUIFBVEJUSFQPSUXIJDISFRVJSF
improvements.
11
5IFTFBVEJUTBSFQFSGPSNFEBUOPDPTUUPUIFDPNQBOZBOEBSFDPOEVDUFECZUIF#$$4" PSBOBTTJHOFE
SFQSFTFOUBUJWF
Disciplinary Action
"VEJUPSQFSGPSNBODFDPODFSOTBOEJTTVFTNBZDPNFUP#$$4"TBUUFOUJPOUISPVHIBOVNCFSPGBWFOVFTTVDI
as:
t3FTVMUTGSPNRVBMJUZBTTVSBODFPOBVEJUSFQPSUT
t3FTVMUTGSPNRVBMJUZBTTVSBODFBVEJUTPO*OUFSOBM"VEJUPST
t$PNQMBJOUTPSSFQPSUTGSPNDPNQBOJFTQBSUJDJQBUJOHJOUIF$03QSPHSBN
t$PNQMBJOUTPSSFQPSUTGSPNPUIFS$FSUJGZJOH1BSUOFST
t3FRVFTUTBOEJORVJSJFTGSPN8PSL4BGF#$
5IF#$$4"XJMMJOWFTUJHBUFBMMQFSGPSNBODFDPODFSOTBOEJTTVFTUPDPOöSNWBMJEJUZBOEBQQMZEJTDJQMJOBSZBDUJPO
BTPVUMJOFEXJUIJOUIF%JTDJQMJOBSZ"DUJPO1PMJDZ5IF#$$4"JTOPUSFRVJSFEUPBQQMZQSPHSFTTJWFEJTDJQMJOFJO
TJUVBUJPOTXIJDIBSFTFSJPVTJOOBUVSFBOEXBSSBOUTFWFSFQFOBMUJFTVQUPBOEJODMVEJOHQFSNBOFOUSFNPWBM
of certification.
2.1 "MM #$$4" *OUFSOBM "VEJUPST XJMM CF QSPWJEFE BDDFTT UP UIJT %JTDJQMJOBSZ "DUJPO 1PMJDZ BT QBSU PG UIF
*OUFSOBM"VEJUPSRVBMJöDBUJPOQSPDFTT
2.2"TBDPOEJUJPOPGNBJOUBJOJOHUIFJS#$$4"BVEJUPSDFSUJöDBUJPO BMMBVEJUPSTTIBMMBHSFFUPCFCPVOECZ
UIFEJTDJQMJOBSZQSPDFTTPVUMJOFEJOUIJTQPMJDZCZTJHOJOHUIF#$$4"*OUFSOBM"VEJUPS5FSNTPG1BSUJDJQBUJPO
2.33FQPSUFEBOEPSDPOöSNFEBVEJUPSQFSGPSNBODFJTTVFT XIFUIFSSFMBUJOHUPFUIJDBMPSRVBMJUZBTTVSBODF
JTTVFT XJMMSFNBJOPOBO"VEJUPSTöMF
12
2.58IFO#$$4"SFDFJWFTOPUJDFGSPNBOPUIFS$FSUJGZJOH1BSUOFSUIBUJUGPVOEB#$$4"*OUFSOBM"VEJUPSUP
IBWFDPNNJUUFEPOFPSNPSFTFSJPVTJOGSBDUJPOTBTEFUFSNJOFECZUIF#$$4" PSUIFFRVJWBMFOU #$$4"
NBZJOJUJBUFBOJOWFTUJHBUJPOPGUIF"VEJUPS"TQBSUPGJUTJOWFTUJHBUJPO #$$4"NBZEJTDJQMJOFUIF"VEJUPSJO
BDDPSEBODFXJUIUIJT1PMJDZ CVUJTOPUPCMJHBUFEUPEPTP
2.60ODF#$$4"CFHJOTBOJOWFTUJHBUJPOJOUPBO"VEJUPSTQFSGPSNBODF BOEQBSUJDVMBSMZXIFOEJTDJQMJOF
UIBUDPVMEBòFDUUIF"VEJUPSTDFSUJöDBUJPONBZSFTVMU #$$4"XJMMOPUJGZUIF"VEJUPSWFSCBMMZ JGQPTTJCMF BOE
JOXSJUJOH UIBUXIJMF#$$4"TJOWFTUJHBUJPOJTPOHPJOH UIF"VEJUPSJTTVCKFDUUPTVTQFOTJPOXIJMF#$$4"
DPNQMFUFTJUTJOWFTUJHBUJPO i*OUFSJN4VTQFOTJPOw
2.6.1"VEJUPSTTVCKFDUUPBO*OUFSJN4VTQFOTJPOBSFQSPIJCJUFEGSPNDPOEVDUJOHBOZOFXBVEJUT
XJUI#$$4"
2.6.3"OZBVEJUTDPNQMFUFEBOETVCNJUUFEBGUFSBO*OUFSJN4VTQFOTJPOJTJNQPTFEBOEGPSXIJDI
XSJUUFOBQQSPWBMXBTOPUPCUBJOFENBZOPUCFBDDFQUFECZ#$$4"
2.7%JTDJQMJOBSZNFBTVSFTBSFFòFDUJWFJNNFEJBUFMZVQPOOPUJDFUPUIF"VEJUPSCZ#$$4"
2.8 #$$4"T XSJUUFO OPUJDF UP UIF "VEJUPS TFUUJOH PVU UIF EJTDJQMJOBSZ EFDJTJPO XJMM CF BDDPNQBOJFE CZ
JOTUSVDUJPOTPOUIFBQQFBMTQSPDFTT8IJMF#$$4"JTIBOEMJOHBOBQQFBMUIF"VEJUPSJTTVCKFDUUPTVTQFOTJPO
XIJMF#$$4"DPNQMFUFTJUTJOWFTUJHBUJPO
2.95IFFOGPSDFNFOUPGEJTDJQMJOBSZEFDJTJPOTNBEFVOEFSUIJTQPMJDZJTOPUEFMBZFEPSTVTQFOEFEEVSJOHUIF
BQQFBMQFSJPE JGBOBVEJUPSTVCNJUTBSFRVFTUGPSBQQFBM PSXIJMFBOBQQFBMJTIFBSEPSXBJUJOHUPCFIFBSE
2.10 "MM PUIFS BQQMJDBCMF $FSUJöDBUF PG 3FDPHOJUJPO $FSUJGZJOH 1BSUOFST BOE8PSL4BGF#$ XJMM CF OPUJöFE
JGUIF"VEJUPSJTTVTQFOEFEGPSNPOUITPSNPSFBTBSFTVMUPGEJTDJQMJOFJOBDDPSEBODFXJUIUIJTQPMJDZ
2.115BCMF"VEJUPS%JTDJQMJOBSZ"DUJPO5BCMFJUFNJ[FTWJPMBUJPOTBOEDPOTFRVFODFTCBTFEPODPOöSNFE
"VEJUPSCFIBWJPST5IF#$$4"JTOPUMJNJUFEJOBQQMZJOHEJTDJQMJOBSZBDUJPODPOTFRVFODFTUPUIF
13 JUFNTMJTUFEXJUIJO5BCMFBOEUIFTerms of Participation.
8SJUUFO MFUUFS PO öMF BOE 8SJUUFO MFUUFS PO GJMF BOE 8SJUUFO MFUUFS PO GJMF BOE
DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE
Replicating audit reports from OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZ CZ UIF #$$4" 5IJT
previous audit reports for the include and is not limited to: include and is not limited to: NBZJODMVEF
TBNFDPNQBOZPSBDSPTT
EJòFSFOUDPNQBOJFT t4VTQFOTJPO t4VTQFOTJPO t4VTQFOTJPO
t3FRVJSFNFOUUPUBLFUSBJOJOH t3FRVJSFNFOUUPUBLFUSBJOJOH t3FRVJSFNFOUUPUBLFUSBJOJOH
t5FSNJOBUJPO t5FSNJOBUJPO t5FSNJOBUJPO
14
Manipulation of audit data 8SJUUFO MFUUFS PO GJMF BOE 8SJUUFO MFUUFS PO GJMF BOE 8SJUUFO MFUUFS PO GJMF BOE
EPDVNFOUBUJPOSFWJFX TJUF DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE
PCTFSWBUJPOJOUFSWJFXSFTVMUT OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZ CZ UIF #$$4" 5IJT
to alter audit scores. include and is not limited to: include and is not limited to: NBZJODMVEFBOEJTOPUMJNJUFEUP
8SJUUFO MFUUFS PO GJMF BOE 8SJUUFO MFUUFS PO GJMF BOE 8SJUUFO MFUUFS PO GJMF BOE
DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE DPOTFRVFODFT BT EFFNFE
OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZCZUIF#$$4"5IJTNBZ OFDFTTBSZ CZ UIF #$$4" 5IJT
Confidential information audit include and is not limited to: include and is not limited to: NBZJODMVEFBOEJTOPUMJNJUFEUP
information revealed.
t4VTQFOTJPO t4VTQFOTJPO t4VTQFOTJPO
t3FRVJSFNFOUUPUBLFUSBJOJOH t3FRVJSFNFOUUPUBLFUSBJOJOH t3FRVJSFNFOUUPUBLFUSBJOJOH
t5FSNJOBUJPO t5FSNJOBUJPO t5FSNJOBUJPO
15
Notes: