Construction Quality Audit Checklist: How to Audit a Site So the Findings Change Something

Most site quality audits produce a score, a list of observations and a folder entry, and nothing else. The score is high because the questions were easy, the observations are the same ones as last quarter, and the trade that caused them has not been told. This article explains what a construction quality audit is for, how it differs from the inspections the site already does, what a checklist question has to look like to produce evidence, how to score and grade what is found, and how the findings get from the checklist to a corrective action that stops the problem recurring.

Audit is not inspection

An inspection checks the work against the acceptance criteria: this cable is supported at the right interval, this pour has the right cover, this fire door has the right gap. The record is the check sheet, and the inspection and test plan says when it happens. An audit checks whether the process that should have produced compliant work is being followed and is working: is there an approved inspection and test plan for this activity, were the hold points held, do the check sheets exist and were they completed before the work was covered, were the nonconformities raised and closed, are the people doing the work the ones the competence register says are qualified. An audit samples the process; an inspection covers the work. A site that confuses the two ends up with an audit that re-inspects the last pour and a quality manager who cannot say whether the next pour will be any better.

ISO 9001:2015 clause 9.2 requires internal audits at planned intervals to determine whether the quality management system conforms to the standard and the organisation's own requirements and is effectively implemented. ISO 19011:2018 is the guidance on how to audit: the principles of integrity, fair presentation, due professional care, confidentiality, independence and an evidence-based approach, and the process of planning, conducting, reporting and following up. Neither tells you what to ask on a construction site. That is what the checklist is for.

Three kinds of audit a contractor needs

1. System audit. The company's quality management system against ISO 9001:2015, clause by clause. Once a year, or spread across the year by clause. The checklist is derived from the standard and the questions are about the system: is document control working, is the calibration register current, was the management review held with the required inputs.
2. Site and trade audit. A project, or one trade on a project, against the project quality plan, the inspection and test plans and the governing standards. Monthly or by risk. The checklist is specific to the trade: electrical, mechanical, concrete and reinforcement, structural steel, drainage and external works, masonry and envelope, fit-out and finishes, commissioning and handover readiness, and the subcontractor's own quality arrangements. This is the audit that finds the problems that cost money.
3. Supplier and factory audit. A second-party audit of a manufacturer or fabricator before or during production: switchboards, precast, steelwork, doorsets, modular units. The checklist follows ISO 19011 and adds product-specific questions from the product standard.

What a checklist question has to look like

The difference between a checklist that finds things and one that does not is in the wording. "Is the electrical installation of good quality?" cannot be answered with evidence. A question that can be looks like this:

• It names the requirement and where it comes from: the ITP line, the specification clause, the standard and its clause. For electrical containment, BS 7671:2018+A4:2026 Regulation 521.10.202 on support against premature collapse; for fire alarm cabling, BS 5839-1:2025 clause 25; for steelwork, BS EN 1090-2:2018+A1:2024 on bolting and NDT extent; for concrete, BS EN 13670 and BS 8500 on cover and conformity; for drainage, BS EN 1610 on testing; for paving, BS 7533-102:2025; for flat roofing, BS 6229:2025; for ductwork, DW/144; for water systems, BSRIA BG 49/2024 and the CIBSE commissioning codes. The edition matters; an auditor citing a withdrawn edition loses the argument before it starts.
• It states the evidence the auditor will look at: the check sheet, the certificate, the register entry, the sample of work, the person interviewed.
• It has a defined result: conforming, observation, nonconforming, not applicable, with what each means written down.
• It leaves space for the objective evidence found: the document reference, the location, the photograph number, the name. A result without evidence is an opinion.

A site electrical audit of thirty-odd questions built this way covers containment, cabling, terminations, distribution boards, earthing and bonding, fire alarm and emergency lighting, test records and certification, competence and the ITP status, and it takes half a day with the subcontractor's supervisor. A concrete audit covers the pre-pour card, reinforcement inspection, cover, the pour record, cube sampling and the register, curing, striking and the falsework permit. The questions differ; the structure does not.

Scoring that means something

A score is useful for one purpose: trend. A single audit score of 83 per cent tells you little; six months of scores for the same trade tell you whether things are improving. The scoring rule needs to be simple enough to be consistent between auditors: two points for conforming, one for an observation, none for a nonconformity, and not-applicable questions excluded from the denominator. Set bands and write them down: what percentage is acceptable without action, what requires actions, what triggers a re-audit within a month. Do not let the score become the output. The findings are the output; the score is the summary.

Grading the findings

Every finding is graded when it is written, not later:

• Major nonconformity. The requirement is absent or has broken down: no ITP for an activity in progress, hold points signed off without the inspection, a certificate that does not match the installation. Stops the process until corrected and needs a corrective action with a root cause.
• Minor nonconformity. An isolated lapse in a process that otherwise works: one check sheet not signed, one record filed in the wrong place. Corrected, and watched for recurrence.
• Observation. Conforms, but there is a risk or an improvement. Recorded, and reviewed at the next audit.

Each finding gets a number, an owner, a due date, and a place on the findings tracker where the days open and the overdue status are calculated rather than remembered. The tracker feeds the corrective action register, and the corrective action register is what the management review reads.

Planning by risk, not by calendar

An audit programme that audits every trade every quarter regardless wastes effort on the trades that are performing and under-audits the ones that are not. Score each area on the factors that matter, for instance the value and complexity of the work, its consequence if it fails, the subcontractor's track record, and the findings of the last audit, and let the score set the frequency. A concrete frame subcontractor with two majors last time and the structure about to go up is audited monthly; a painting contractor with clean results is audited once. The programme is then a twelve-month schedule that the quality manager can show the client, and the audit log records what was done against it.

From finding to root cause

A finding that is corrected but not understood recurs. The corrective action process, ISO 9001:2015 clause 10.2, requires the cause to be determined and the action to address it. Two tools do the work on a construction site: five whys, asked honestly until the answer is a process and not a person, and a cause-and-effect diagram when several causes contribute. "The check sheet was not completed because the supervisor was busy" is not a root cause. "The check sheets are issued as a single workbook the supervisor cannot open on site, so they are completed from memory at the end of the week" is, and it has an action attached. The worksheet that records the analysis, the action, the owner and the date the effectiveness was verified is the evidence the auditor will ask for at the next audit.

Reporting up

An audit that is not reported changes nothing. The monthly quality report carries the audits done against the programme, the findings by grade, the overdue actions, the nonconformities raised and closed, the right-first-time rate and the trend; the same data feeds the key performance indicators and the management review inputs under clause 9.3.2. The discipline that makes reporting sustainable is a single data set: one list of nonconformities, one list of audits, one findings tracker, from which the report, the dashboard and the review pack are populated. When the report, the deck and the register carry different numbers for the same month, the audience stops trusting all three.

The auditor

Independence means not auditing your own work. On a small contractor the quality manager audits the sites and someone else audits the quality manager. Competence means knowing the trade well enough to know what good looks like and the standard well enough to cite it. Conduct means opening meeting, evidence, closing meeting with the findings agreed on the day, and a report within a week. The subcontractor's supervisor should leave the closing meeting knowing what was found, what it was graded, and what happens next. That is the point at which the audit starts to change something.