CORAA

Environmental, Health & Safety (EHS) Internal Audit Checklist

Statutory EHS registers, incident reporting, pollution control board consents, and Factories Act compliance — the operational controls that sit alongside (and often surface in) ESG assurance.

Free · CORAA original — SA-aligned
Updated 28 Jul 2026
Governing law
Factories Act 1948 + state Pollution Control Board consents
Key registers
Accident register, hazardous-process health register
Common gap
SPCB consent renewal tracked informally, lapses unnoticed
Format
Microsoft Word (.docx)
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

ENVIRONMENTAL, HEALTH & SAFETY (EHS) INTERNAL AUDIT CHECKLIST

Entity: ___ · Period: ___

Scope: statutory EHS compliance at plant/site level — incident and near-miss reporting, State Pollution Control Board (SPCB) consent-to-operate renewals, and Factories Act 1948 registers and requirements. This is operational EHS compliance testing, distinct from (but a key data source for) the entity's BRSR/ESG assurance reporting.

Risk & Control Matrix

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

How does this relate to the entity's BRSR/ESG assurance?
This checklist tests the underlying operational EHS controls and records — incident logs, consent validity, statutory registers — that ultimately feed the safety and environmental disclosures in a BRSR report. See the existing `brsr-core-assurance-working-paper` for the external assurance procedures on those disclosures themselves; this checklist is the internal control layer that should make those disclosures reliable in the first place.
What happens if a Pollution Control Board consent has lapsed?
Operating without a valid Consent to Establish or Consent to Operate from the State Pollution Control Board is itself a compliance breach, independent of whether any actual pollution occurred — it exposes the entity to directions, penalties, or in serious cases closure orders. A lapsed consent found during audit should be flagged as a priority finding, not a minor administrative gap.
Which statutory registers are commonly missed?
Beyond the commonly-known accident register, entities running hazardous processes frequently miss the health register requirement under Factories Act rules (periodic medical examination records for workers in specified hazardous processes) and registers for overtime/working hours where processes run continuously — both are checked separately from general HR/payroll records.
Related templates

You might also need.

ESG (Environmental, Social, Governance) Internal Audit Checklist
Free ESG internal audit checklist. Tests BRSR data governance, ownership and controls readiness ahead of exter
Physical Security & Asset Protection Audit Checklist
Free physical security and asset protection internal audit checklist. Access control, CCTV coverage, asset tag
Business Continuity & Disaster Recovery (BCP/DR) Audit Checklist
Free BCP/DR internal audit checklist. Tests RTO/RPO, backup verification, DR drill documentation. Editable Wor