To prep for an OSHA audit, pull your OSHA 300, 300A, and 301 injury logs, your written safety programs, training records, equipment logs, and Safety Data Sheets — then walk your facility with the same checklist a compliance officer would carry. Find the gaps before the inspector does. Fix them. Document the fix.
One willful violation in 2026 maxes out at $165,514. Serious violations top out at $16,550 each. A half-prepped audit can swallow a year of safety budget in a single afternoon — we’ve seen it happen to a 40-person plastics shop in Ohio that got caught with three repeat HazCom citations.
What Triggers an OSHA Audit in the First Place?
Not every OSHA visit is random. Inspections sort into five priority buckets — in this order: imminent danger reports, fatalities or hospitalizations, employee complaints, agency referrals, and programmed inspections under the Site-Specific Targeting plan. Had a recordable injury that put someone in the hospital in the last 24 hours? You were already required to report it. That report is often what lands you on the inspection list in the first place.
Programmed inspections go after high-injury NAICS codes: construction, fabricated metal manufacturing, food manufacturing, warehousing, nursing care. If your DART rate (days away, restricted, transferred) sits above industry average for two years running, expect a knock. The 2026 audit-failure penalty breakdown spells out what each violation class actually costs once a CSHO is on site.
Which Documents Should I Have Ready Before the Inspector Arrives?
Build a binder — physical or shared drive, doesn’t matter — with the documents an inspector will ask for in the opening conference. OSHA 300 Logs, 300A annual summaries, and 301 incident reports for the last five years come first. Had a recordable incident? The 301 needs to surface within minutes, not after a long email hunt. We point new HR generalists at the OSHA 300 Forms course because the form fields trip up almost everyone the first time. If your records are messy, the primer on filling out the 300 log correctly is worth 20 minutes of your day.
Logs aren’t enough on their own. You’ll also need written programs: Hazard Communication, Lockout/Tagout, Emergency Action Plan, Bloodborne Pathogens (if anyone on staff is a designated first-aid responder), Respiratory Protection, Confined Space, and the PPE Hazard Assessment. The inspector will pick three or four to spot-check — usually whichever ones map to the hazards she sees on the floor. Training rosters need to back each program: affected employee names, dates, signatures, topic outlines. The guide on managing OSHA training records covers what’s strictly required versus what employers tend to over-collect (and yes, you can over-collect).
One more thing: if your records live across email threads, a shared folder, and someone’s desk drawer, that’s a citation waiting to happen. Get them into a single system that timestamps completions. The OSHA Recordkeeping & Documentation course walks supervisors through what to file, where to file it, and how long to keep it.
How Do I Run a Self-Inspection That Actually Catches Things?
Plan on half a day for a 50-person facility. Walk the floor with a printed General Industry Quick Start (or Construction, depending on your standard) and check each item. Housekeeping first — that’s where the easy money is. Look for blocked exit routes, electrical panels with less than 36 inches of clearance, extension cords being used as permanent wiring. These are the cheapest citations an inspector can write and the ones we see most often.
PPE next. Are employees wearing the eye, hand, and foot protection your hazard assessment requires? Is there a written hazard assessment on file at all? A lot of small employers skip the assessment and end up cited for “lack of documentation” rather than for any actual PPE failure — a frustrating outcome that’s entirely preventable. Walk past every guarded machine. Is the guard in place? Undamaged? Not bypassed with tape? You’d be surprised how often the answer is no.
Then the paperwork side. Fire extinguishers tagged and inspected monthly? Posted evacuation map at every exit? SDSs accessible — digital is fine, as long as employees can pull them up without asking permission? Each one is a fast yes-or-no, and each one shows up on the inspector’s list. The Emergency Action Plan training requirements piece covers what OSHA expects in the written plan, plus the drill cadence most employers under-do.
What Happens During the Actual OSHA Inspection?
An OSHA Compliance Safety and Health Officer (CSHO) will arrive unannounced, present credentials, and request an opening conference. You can ask for a few minutes to get the right people in the room — a safety manager, an HR representative, and an employee representative if you’re unionized. You cannot turn the inspector away without a warrant, and asking for one usually escalates the situation. Most employers consent.
The inspector will explain the scope: complaint-based, programmed, or follow-up. Then comes the walkaround. The CSHO photographs hazards, takes measurements (noise, air sampling), and conducts brief employee interviews — usually 5 to 10 employees, in private. Coach your supervisors and frontline workers in advance: answer truthfully, don’t speculate, and refer questions outside their job to the safety lead. The OSHA Worker Rights course spells out what employees can and can’t be asked to do during these interviews.
The walkaround usually ends with a closing conference where the inspector outlines apparent violations. You won’t get the citations on the spot — those arrive by certified mail within six months. Use the closing conference to ask clarifying questions and start abatement planning right away.
What Are the Most Common OSHA Citations and How Do I Avoid Them?
OSHA’s “Top 10 Most Frequently Cited Standards” barely changes year to year. Fall protection in construction (1926.501), Hazard Communication (1910.1200), ladders, scaffolding, respiratory protection, lockout/tagout, powered industrial trucks (forklifts), and machine guarding round out the list every fiscal year. If your operation touches any of these, your prep should focus there first.
For office-heavy employers, the citation pattern shifts. Bloodborne Pathogens (if you have a designated first-aid responder), Emergency Action Plans, electrical safety (overloaded outlets, extension cords), and HazCom for cleaning chemicals are the usual suspects. Even a small office with no obvious “industrial” hazards can collect $4,000–$8,000 in citations from a thorough inspector. The primer on what OSHA compliance actually means is a useful refresher for non-safety leaders.
Train widely, train often. A new-hire safety orientation that covers the General Duty Clause, your written programs, and emergency procedures heads off about 70 percent of the easy citations. We point clients to the Safety Orientation course as a baseline — it’s short enough to fit into Day 1 onboarding and covers the topics OSHA expects every employee to know.
How Do I Document Everything So a Future Audit Goes Smoothly?
The audit-passing employers we work with treat documentation like a perpetual project, not a fire drill. They run a quarterly mock inspection, log the findings, and assign abatement owners with deadlines. They keep five years of training records (OSHA only requires three years for most standards, but auditors love it when you exceed). And they store everything in one searchable system — not five.
The audit-trail documentation guide covers what an inspectable record looks like: who trained, what was covered, how long it took, what materials were used, and how comprehension was verified. The OSHA Recordkeeping orientation is the version we recommend for HR and safety teams who are inheriting a messy records system. And if you’re trying to figure out the right cadence for refreshers, the five triggers for auditing your compliance training piece is worth a read.
What Should I Do If I Get Cited?
You have 15 working days from receipt of the citation to either accept it, request an informal conference with the OSHA Area Director, or formally contest it. The informal conference is underused — about 40 percent of employers who request one get penalty reductions, abatement extensions, or both. Bring evidence: photos of completed corrections, training records added since the inspection, and a written abatement plan.
If you contest, the case moves to the Occupational Safety and Health Review Commission, which is independent of OSHA. That’s a multi-month process and usually involves outside counsel. Most employers settle. Whatever path you choose, abate the hazard immediately — failure-to-abate penalties run $16,550 per day, and they accumulate fast.
Get Your Team Trained — Without the Paperwork Headache
Audit prep is half safety culture, half documentation discipline. Coggno’s marketplace gives HR and safety leaders the training catalog and the recordkeeping backbone to do both without managing five different vendors.
Start with the Safety Orientation course for every new hire, layer in the OSHA Recordkeeping & Documentation course for HR and supervisors, and add the OSHA Worker Rights course so your frontline knows what to expect during an inspection. Completion records sit in one dashboard — pull them in seconds when an inspector asks.
Frequently Asked Questions About OSHA Audit Preparation
How long does an OSHA inspection actually take?
Most general-industry inspections take 4 to 8 hours on-site, though complex multi-site or fatality investigations can stretch to several weeks of follow-up. The opening conference and walkaround happen the same day; document review and employee interviews can extend over multiple visits if the facility is large.
Can I refuse an OSHA inspection without a warrant?
Technically yes — under the 1978 Marshall v. Barlow’s decision, employers can require OSHA to obtain a warrant. In practice, refusing usually escalates the situation: OSHA will return with a warrant within a day or two, and they’ll arrive with a less cooperative posture. Most employers consent, get the inspection done, and address findings constructively.
What’s the difference between an OSHA audit and an OSHA inspection?
“Audit” is informal — most employers use it to mean either a self-inspection or an actual OSHA visit. OSHA itself uses “inspection” for a CSHO-led visit. A self-audit is one you run internally, ideally quarterly, to find problems before OSHA does. Both should follow the same checklists.
Do small employers really get inspected?
Yes — though OSHA exempts employers with 10 or fewer employees from programmed inspections in low-hazard industries, complaint- and incident-driven inspections apply to everyone. A single employee complaint can put a 6-person business on OSHA’s calendar within a month. The “small employer exemption” is narrow and frequently misunderstood.
How far back can OSHA look during an inspection?
For OSHA 300 logs, the requirement is five years of retention, and inspectors can request all five. Training records are typically required for three years, though many standards (lead, asbestos, bloodborne pathogens) have longer retention requirements. When in doubt, keep records for at least five years to cover the broadest set of standards.
Can I bring a lawyer or consultant to the OSHA inspection?
Yes, and it’s often a good idea for the closing conference and any follow-up. During the walkaround itself, OSHA may proceed even if your attorney isn’t physically present. Many employers have outside safety counsel on retainer specifically to handle inspection responses and informal conferences.
