The Supplier Audit Report

A supplier audit is more than a checklist. It tests whether factory conditions align with labour standards, wage rules, working-time requirements, safety expectations, employment documentation and the management systems meant to keep those controls working between visits. Its value comes from credible evidence linking written requirements to what workers, records and the production floor actually show.

Supplier risk is multi-dimensional. A factory can calculate wages accurately while failing on emergency preparedness, or issue formal contracts while allowing excessive overtime. A written safety policy does not prove that chemicals are labelled correctly or machines are properly guarded. Each weakness has a different cause, severity and corrective response, so one combined score can hide important risk.

This report draws on 345 verified supplier-audit observations across 11 categories, seven geographic groupings and eight major source reports. The largest evidence blocks concern occupational safety, audit coverage and wages, followed by core labour standards, working time and management systems. Selected indicators range from low single digits to above 90% non-compliance.

The report follows supplier assurance from audit scope and evidence quality through labour standards, payroll, working time, safety, hazardous substances, emergency preparedness, contracts, management systems, transparency and audit effectiveness. It then places those findings in regional and country context before translating them into a Supplier Audit Benchmark Index and a practical 90-day verification plan. The aim is not to rank countries or reward a supplier for passing one inspection, but to identify which controls are strong, which are weak and whether corrective action holds after the audit closes.

Executive Supplier Audit Benchmarks

The numbers that define supplier compliance risk

The dataset contains 345 verified statistics across 11 audit categories, seven geographic groupings and eight principal reports. That breadth matters because supplier assurance spans worker rights, compensation, hours, safety, contracts, management systems, evidence quality, transparency and buyer due diligence.

Selected Egypt results illustrate the range of risk within one programme. Emergency preparedness reaches 91% non-compliance, worker protection 65%, health services and first aid 60%, chemicals and hazardous substances 58%, overtime 55%, wage information and deductions 53%, regular-hours issues 49% and employment-contract issues 45%. These rates should not be averaged into a synthetic supplier score without preserving severity and category context.

Emergency-preparedness failures can create immediate life-safety consequences, while payroll deductions create a different form of harm and contract findings may be documentary or substantive. Strong programmes therefore translate category rates into prioritized corrective actions rather than treating every percentage point as equivalent.

Benchmarking also depends on denominators. A 50% rate from a small factory sample or narrow question set is not equivalent to the same percentage from a broader programme. Reports should preserve factory count, reporting period, question coverage and repeat-assessment status whenever those factors affect interpretation.

 

Why Supplier Auditing Requires a System-Based Benchmark

Pass/fail auditing can be misleading. A factory may close easy documentation findings while severe hazards remain unresolved, while another may show more open actions because its programme detects problems more aggressively. Finding count means little without severity, recurrence, root cause and verification quality.

System-based assessment tests whether rules work in practice. Overtime policy should agree with timecards, payroll, production logs and worker testimony; fire procedures should match alarms, drills, exit access and worker knowledge. Supplier-management policy should also be reflected in responsibility, monitoring and corrective-action ownership.

The strongest benchmark keeps category sub-scores visible and allows critical labour-rights or life-safety findings to cap the overall result. That prevents a supplier from offsetting a severe weakness with many minor administrative strengths and keeps management attention on the risks that matter most to workers and business continuity.

Audit Coverage, Factory Sampling and Evidence Quality

Why audit conclusions are only as strong as the assessment base

Audit coverage is one of the largest evidence groups in the database, with 70 statistics classified under programme scope and assessment reach. Egypt alone records 60 assessment reports in the selected reporting period. That scale supports stronger pattern recognition than a handful of supplier visits, but report count is only the beginning. Auditors also need to know whether factories are first-time or repeat assessments, how questions are grouped and how much worker and document evidence supports each conclusion.

Sampling determines how much confidence can be placed in an audit finding. A payroll test based on a narrow employee sample can miss night-shift or temporary-worker issues. Worker interviews limited to management-selected groups can suppress negative evidence, while a heavily prepared announced visit may overstate normal conditions. Strong audits therefore use multiple evidence channels and samples designed to reduce predictable bias.

Repeat assessments show whether suppliers improve or simply prepare for visits. Falling non-compliance can reflect stronger systems, but it can also result from changing questions, factory populations or reporting periods. Trend analysis should preserve the denominator and sample composition.

 

 

The Supplier Audit Risk Architecture

The evidence base concentrates on worker conditions and supplier control. Occupational Safety & Health contributes 75 statistics, Audit Coverage & Programme 70 and Wages & Benefits 68. Core Labour Standards add 34, Working Time 31, Compliance & Management Systems 27, Supplier Market & Industry 23, and Transparency & Audit Effectiveness 10.

This distribution should not be mistaken for a severity ranking. It shows where measurable evidence is most abundant, not where the greatest harm necessarily sits. Core labour violations may appear less often in the dataset yet still require the strongest escalation. Conversely, a large safety question set can contain both minor defects and life-critical failures.

The practical value of the architecture is that procurement and compliance teams can maintain category-level dashboards instead of relying on one total supplier score. Each major category should have its own trend, severity rules and escalation thresholds so that improvement in one area cannot obscure deterioration in another.

Figure 1. The audit dataset concentrates most heavily on occupational safety, audit coverage and compensation, while governance and due-diligence metrics provide the broader supplier-control context.

 

Core Labour Standards and Fundamental Supplier Risk

The threshold issues that sit above ordinary process defects

Core labour standards require a different scoring logic from routine process defects. Credible child-labour, forced-labour, discrimination or freedom-of-association violations cannot be diluted by averaging them with administrative strengths. These findings should trigger defined escalation, investigation and remediation.

Low or zero recorded non-compliance does not automatically mean low underlying risk. A result of 0% means no violation was identified in the assessed sample under the methodology used. It does not prove that the issue is absent outside the sample, in hidden subcontracting or among vulnerable worker groups. Detection capability therefore matters alongside the reported result.

Young-worker protections show why detection systems matter. A programme may identify no child-labour cases while still finding weaknesses in age records or job restrictions. Likewise, no harassment complaint does not prove a harassment-free workplace when grievance channels are weak or workers fear retaliation.

Freedom of association and collective bargaining also depend on practice. A written policy can coexist with subtle barriers to organising, worker representation or negotiation. Auditors therefore need worker interviews, union or representative evidence and dispute records rather than relying solely on management documents.

Wages, Benefits and Payroll Compliance

Where supplier risk becomes visible in payroll records

Wages and benefits account for 68 statistics. Selected Egypt findings show 53% non-compliance for wage information, use and deductions and 53% for overtime wages. Minimum wages and piece rates reach 35%, payroll-record issues about 16%, social contributions 11%, method-of-payment findings 5% and unauthorized deductions 4%.

Payroll auditing is a reconciliation exercise, not a payslip check. Employment terms, time records, overtime calculations, deductions, social-insurance contributions, leave entitlements and actual payments need to agree. A compliant base wage can still conceal underpaid overtime or unauthorized deductions, while a correct-looking payslip can still rest on inaccurate hours.

Worker understanding adds another layer of evidence. Employees should be able to explain what they were paid, why deductions occurred and how overtime or leave was calculated. When payroll is technically correct but workers cannot verify it, the control is fragile because errors may go unchallenged. Transparent pay information is therefore part of the audit trail, not simply an employee-relations issue.

Payroll findings also connect to production pressure. Excessive overtime, late order changes and unrealistic lead times can create wage errors as scheduling stress spreads into timekeeping and pay calculation. Strong corrective action therefore asks why the error occurred, not only how to correct the current payroll entry.

Figure 2. Selected wage and payroll findings show how compensation risk can extend from base wage rules into overtime, records, social contributions and deductions.

 

Working Time, Overtime and Fatigue Risk

Working time contributes 31 statistics and links directly to payroll and safety. Selected Egypt benchmarks show 49% non-compliance for regular hours, 55% for overtime, 18% for legal-limit exceedance, 36% for inadequate breaks, 9% for inaccurate records and 11% for reduced-hours accommodation; another indicator shows 51% of factories failing legal overtime limits.

An overtime rate should never be read without considering its evidence chain. Timecards describe recorded attendance, but production output can reveal activity that does not appear in official records. Payroll shows paid hours, worker interviews describe actual start and finish times, security logs capture entry and exit, and machine or production records can show whether work continued after the stated shift ended. The strongest audit reconciles these sources.

Fatigue risk is the practical reason working-time findings matter beyond legal compliance. Long hours can increase errors, injuries, absenteeism and turnover while also damaging wage compliance when premium calculations are wrong. Breaks and weekly rest are therefore part of the same control system as overtime limits.

Corrective action should examine why excessive hours occur. Production planning, staffing, rework, order volatility and buyer lead-time pressure can all contribute. Fixing timecards without fixing production pressure may simply move the problem elsewhere.

 

Occupational Safety and Health

The largest risk category in the audit dataset

Physical safety is particularly resistant to paper-only auditing. A supplier may have a written lockout or emergency procedure while guards are missing, exits are obstructed or workers do not understand the response. The audit must move from policy to observation and then to worker knowledge, which is why site inspection and interviews matter as much as document review.

Safety management systems determine whether problems recur. Responsibility, training, inspection, incident review and corrective-action verification should operate continuously, not only before customer visits. A mature supplier should be able to explain not just which defects were found, but how it detects deterioration between audits.

Physical safety is particularly resistant to paper-only auditing. A supplier may have a written lockout or emergency procedure while guards are missing, exits are obstructed or workers do not know the response. The audit has to move from policy to observation and then to worker understanding. This is why site inspection and interviews carry equal importance with the document review.

Safety management systems determine whether problems recur. Responsibility, training, inspection, incident review and corrective-action verification should operate continuously rather than only before customer visits. A mature supplier should be able to explain not just which defects were found, but how it detects deterioration between audits.

Severity must remain visible. One missing label may be lower risk than an inaccessible emergency exit, yet repeated chemical-control failures can signal a systemic exposure problem. Risk-based scoring should therefore combine rate, severity and system maturity.

Figure 3. Emergency systems and worker protection dominate the selected safety findings, while chemical, documentation and machine controls reveal the mechanisms driving broader OSH risk.

 

Chemical and Hazardous-Substance Audit Controls

Chemical safety contains linked control points. Selected evidence records 58% non-compliance for chemicals and hazardous substances, 40% for labelling, 35% for safety data sheets, 24% for storage and 22% for washing facilities. Each measures a different part of the control chain.

A robust chemical audit starts with inventory: the factory should know which materials are present, where they are used and who handles them. Containers need labels, workers need usable safety data sheets, storage must prevent spills or incompatibility, and PPE, ventilation and washing facilities must support exposure control.

Training connects physical controls to worker behaviour. Employees should identify hazards, select protective equipment and explain the response to spills or exposure. A complete SDS file has little value if workers cannot access or understand it.

Corrective action should therefore preserve the full sequence from inventory through emergency response. Closing only the visible finding can leave the same risk active elsewhere in the chemical lifecycle.

 

Emergency Preparedness and Fire Safety

Emergency preparedness is one of the clearest examples of why a category-level rate should be decomposed. The selected Egypt programme records 91% non-compliance at the broad emergency-preparedness level, while specific questions such as emergency exits or drills can sit much lower. The broad result therefore indicates that at least one control in the category is failing in many factories, not that every emergency safeguard is absent.

Audits should examine alarms, detection systems, exits, evacuation plans, drills, emergency teams, fire-fighting equipment and worker training together. A compliant exit is less useful if workers have not practiced evacuation, and a drill is less convincing if alarm coverage is weak.

Life-safety findings require stronger escalation than routine documentation issues and faster verification because layouts, stored materials and workforce size can change. Mature suppliers conduct internal checks between external audits.

 

Compliance and management systems contribute 27 statistics to the evidence base, but their importance exceeds the count because they determine whether findings recur. Policies and procedures are only the starting point. A functioning system also assigns responsibility, trains staff, monitors controls, investigates root causes, implements corrective action and verifies that conditions actually improve.

Employment documentation defines the formal worker-supplier relationship. Selected Egypt findings include 45% non-compliance in employment contracts, 9% in contracting procedures and 20% in dialogue, discipline and disputes. Haiti records 71% for employment contracts, 68% for termination and 16% for contracting procedures.

The audit should separate the existence of a contract from the quality of the relationship it creates. A signed document is not enough if workers do not understand the terms, if probation periods exceed legal limits or if termination and severance procedures are inconsistent. Personnel files, disciplinary records, grievance mechanisms and termination documents therefore need to be read together.

HR systems also affect the detectability of other risks. Weak records can obscure age, contract status, leave or social insurance, while poor grievance channels can suppress evidence of harassment, discrimination or wage concerns.

Compliance and Management Systems

Why mature suppliers prevent findings instead of repeatedly correcting them

Compliance and management systems contribute 27 statistics to the evidence base. Their importance is larger than the count suggests because they determine whether findings recur. Policies and procedures provide the starting point, but a functioning system also assigns responsibility, trains staff, monitors controls, investigates root causes, implements corrective action and verifies that the action changed the underlying condition.

Reactive suppliers tend to prepare for customer audits. They clean records, repair visible defects and conduct intensive training immediately before the visit. Managed suppliers use routine internal checks, trend repeat findings, involve workers in risk identification and maintain evidence continuously. That difference becomes visible when auditors compare conditions across multiple cycles.

Root-cause analysis prevents superficial fixes. If overtime comes from production planning, changing a timecard will not solve it; if labels disappear because new chemicals enter without approval, relabelling containers one by one will not prevent recurrence.

Verification closes the loop. Photographs, receipts or training attendance can demonstrate implementation, but effectiveness requires evidence that the risk has actually fallen. Repeat audits, worker interviews and trend metrics should therefore sit alongside corrective-action closure rates.

 

Supplier auditing can improve performance, but audit volume should not be confused with audit effectiveness. Visits, findings and auditor counts measure activity. Improvement is better reflected in fewer repeat findings, faster resolution of severe issues, stronger worker outcomes and evidence that management systems have changed.

Transparency and audit effectiveness contribute 10 focused statistics to the dataset, but their strategic role is substantial. Disclosure can raise accountability by making supplier identity, audit performance or labour-standard results visible to buyers, workers and the public. Visibility creates reputational incentives for improvement, particularly when suppliers know that poor performance will not remain buried in private reports.

Transparency works only when data are credible and comparable. Publishing inconsistent scores can create false confidence, and reporting corrective actions as closed means little when verification is weak. Disclosure should therefore include clear definitions, periods and evidence standards.

Worker awareness matters too. Suppliers can publish policies externally while employees remain unaware of grievance channels, wage rules or safety procedures. Effective transparency works in both directions.

Buyer accountability increases when audit data are treated as management information rather than a vendor-compliance file. Procurement, sourcing, compliance and leadership should be able to see where risk is concentrated and how purchasing decisions may be contributing to it.

 

Does Supplier Auditing Improve Factory Performance?

Supplier auditing can improve performance, but audit volume is not audit effectiveness. Visits, findings and auditor counts describe activity; falling repeat findings, faster resolution of severe issues, stronger worker outcomes and better management systems describe improvement.

Repeated assessments reveal whether corrective action lasts. A factory that receives the same machine-guarding, wage or overtime findings across cycles has a system weakness even if each action was formally closed. Recurrence should therefore be prominent in supplier scorecards.

Training is similar. Counting training sessions says little about whether managers or workers changed behaviour. Audit programmes should look for evidence that competency improved: correct PPE use, better timekeeping, accurate wage calculations, safer storage or effective grievance handling.

The final test is whether assurance reduces risk without driving problems underground. Intense audit pressure can encourage falsified records, unauthorized subcontracting or worker coaching. Strong programmes combine audit evidence with commercial dialogue and worker-access channels.

 

Supplier Audit Standards and Certification

Formal standards can improve consistency in audit criteria, management systems, auditor competence and documentation. They provide a framework for how evidence is gathered and how internal or external audits are governed.

Certification should remain one input rather than an exemption from verification. A certified system can coexist with local failures in wages, emergency preparedness or working time when controls are implemented inconsistently.

Auditor competence also matters. Labour, payroll and safety findings require different technical skills, and the auditor needs enough independence to challenge management evidence. Consistency in training, severity rules and sampling improves comparability across suppliers and audit cycles.

 

Country-level comparison works best when it identifies different risk profiles rather than creates a league table. Egypt and Haiti provide directly comparable signals in several selected categories. Both show very high emergency-preparedness risk, at 91% in Egypt and 97% in Haiti. Worker protection stands at 65% and 97% respectively, while health services or first aid reach 60% and 100%. Employment-contract findings are also material at 45% in Egypt and 71% in Haiti.

Regional comparisons are most useful when they explain operating context rather than rank countries as good or bad suppliers. National labour law, programme design, industry mix, workforce structure and reporting periods can all change the meaning of a non-compliance percentage. A country profile is therefore a risk map, not a universal quality score.

Egypt provides broad evidence across emergency preparedness, wages, overtime, worker protection, chemical safety and contracts. The spread shows why buyers need multi-category oversight: a wage-focused review can miss serious safety weakness, while a safety-only review can miss overtime or contract issues.

Jordan represents a more established supplier-assessment context in the selected evidence, with attention to OSH management, welfare facilities, accommodation, worker protection and working environment. The programme structure demonstrates why workforce composition and living conditions can matter alongside conventional factory-floor controls.

Uzbekistan provides an emerging-programme perspective. The selected framework includes 71 OSH compliance questions, 17 working-time questions and 24 contract or HR questions, highlighting the importance of building repeatable assessment and management systems as programme coverage expands.

Haiti shows severe selected signals in several categories, including emergency preparedness at 97%, first aid at 100%, worker protection at 97% and employment contracts at 71%. These rates should be interpreted within the programme’s factory sample and period, but they clearly indicate why safety systems and employment controls deserve priority. Multi-country research is better used to study audit effectiveness, while European Union data provide a broader due-diligence and buyer-responsibility context.

 

Country-Level Supplier Audit Comparison

Country-level comparison works best when it locates different risk profiles rather than creates a league table. Egypt and Haiti provide directly comparable signals in several selected categories. Both show very high emergency-preparedness risk, with 91% in Egypt and 97% in Haiti. Worker protection stands at 65% and 97% respectively, while health services or first aid reach 60% and 100%. Employment-contract findings are also material at 45% in Egypt and 71% in Haiti.

These differences should not be read as a pure supplier-quality ranking because factory populations, laws, programme maturity and reporting periods differ. The stronger conclusion is that both programmes reveal material safety and employment-control risks.

Jordan and Uzbekistan add useful context without forcing questionable rate comparisons. Jordan’s evidence focuses on established programme controls across OSH, welfare and worker conditions. Uzbekistan’s selected assessment framework shows the breadth of questions being built into OSH, working-time and HR verification. These are different stages of programme development and should be evaluated accordingly.

Figure 4. Selected Egypt and Haiti categories illustrate different audit risk profiles. The chart is not a country ranking and should be read within each programme’s sample and reporting period.

 

A practical Supplier Audit Benchmark Index should reward verified control rather than surface-level audit performance. Occupational safety and worker protection receive the largest proposed weight at 18%, followed by core labour standards at 17% and wages and benefits at 15%. These categories carry direct consequences for worker welfare and legal exposure.

Supplier Due Diligence and Buyer Responsibility

Why factory auditing is moving into broader supply-chain governance

Supplier auditing is one evidence channel inside wider due diligence. Buyers still need to map suppliers, identify and prioritize adverse impacts, prevent or mitigate harm, support remediation, monitor results and communicate progress. Governance determines how audit evidence is used.

Direct supplier focus can miss risk beyond the first tier. Raw-material production, subcontracting, labour brokers and outsourced processes may sit outside the audited factory, so due diligence asks where harm can occur across the value chain and whether the buyer can act.

Commercial decisions belong in the same conversation. Lead times, order volatility, price pressure and last-minute changes can influence overtime, subcontracting and wage risk. Corrective demands are weaker when purchasing practices recreate the same pressure.

Grievance and remediation mechanisms complete the framework because audit findings sometimes describe harm that has already occurred. Responsible assurance requires a pathway to correct conditions for affected workers rather than simply improve future documentation.

 

Building the Supplier Audit Benchmark Index

A practical Supplier Audit Benchmark Index should reward verified control. Occupational safety and worker protection receive the largest proposed weight at 18%, followed by core labour standards at 17% and wages and benefits at 15%, reflecting their direct consequences for worker welfare and legal exposure.

Working time and compliance management systems receive 12% each, contracts and HR 10%, and audit transparency, evidence quality, corrective action and due diligence 8% each. The weights total 100%, but sub-scores should remain visible.

Scoring bands can translate the framework into operating language: 0–39 critical or poorly controlled, 40–59 basic with high improvement need, 60–74 developing or partially controlled, 75–89 advanced supplier control and 90–100 exceptional verified supplier assurance.

Critical-risk rules are essential. A credible forced-labour, child-labour or major life-safety finding should cap the overall score regardless of strengths elsewhere. This prevents a supplier from averaging severe harm against a large number of minor administrative successes.

Figure 5. The proposed Supplier Audit Benchmark Index gives the greatest weight to occupational safety, core labour standards and compensation while preserving management-system and due-diligence controls.

 

Supplier Audit Market Challenges

Supplier auditing has structural limitations. Audit fatigue grows when multiple buyers request overlapping inspections, and factories may spend time preparing for visits instead of improving the systems that operate between them.

Announced audits can temporarily improve housekeeping, staffing and records. Unannounced visits reduce some bias but still cannot observe every shift or subcontractor, so periodic inspection should be combined with ongoing monitoring and accessible worker channels.

Record falsification and coaching can undermine evidence. Auditors should compare timecards, payroll and production records with interviews, security logs and physical conditions; major inconsistencies are a risk signal themselves.

Severity scoring also varies across programmes. A high rate can reflect a broad category with many questions, while a low rate can conceal a rare but critical issue. Transparent definitions and scoring rules are therefore essential.

Corrective-action closure can become a false endpoint. A photograph, invoice or revised procedure may prove implementation but not effectiveness. Programmes should revisit repeat findings and worker outcomes to confirm that corrective action actually reduced the risk.

 

90-Day Supplier Audit Benchmark Plan

Days 1–30 should establish a common supplier baseline: sites, country, product category, worker count, audit history, certifications, labour, wage, working-time and safety findings, contracts, HR issues, open actions and high-severity risks. The aim is one comparable view shared by sourcing, compliance and quality teams.

Days 31–60 should verify high-risk controls, prioritizing emergency preparedness, worker protection, chemical safety, wages, overtime, young-worker protections, contracts and grievance mechanisms. Documents, interviews, observation, payroll, time and production records should be triangulated before escalation decisions are made.

Days 61–90 should test corrective action through closure rate, repeat findings, severity reduction, overdue items, worker confirmation and management ownership. Suppliers with unresolved critical issues should move into escalation rather than routine follow-up.

The cycle should end by resetting the next assessment frequency according to risk. Low-risk suppliers with stable systems may require less intensive oversight, while suppliers with recurring or critical findings need more frequent verification and stronger buyer involvement.

 

Metrics Procurement and Compliance Teams Should Track

Audit metrics should include first versus repeat assessments, findings per audit, critical findings, category non-compliance, duration and coverage. These measures describe the intensity and composition of assurance activity, not just visit volume.

Worker metrics should include wage compliance, overtime, leave, grievances, harassment indicators and freedom-of-association signals. Safety metrics should include emergency preparedness, PPE, machine guarding, chemical controls, first aid and fire systems so major risk categories remain visible.

Corrective-action metrics should show open and overdue actions, closure time, repeat findings and verified effectiveness. A supplier that closes most actions but repeats the same serious issue should not be viewed as high performing.

Supplier-management metrics should add high-risk supplier count, training completion, audit recurrence, escalation status and remediation progress. Procurement and compliance can then see whether supplier risk is declining and whether commercial decisions support or undermine corrective work.

 

How Supplier Auditing Changes by Business Model

Raw-material suppliers often require greater focus on origin traceability, labour conditions, subcontracting and environmental controls because risk can sit far upstream from the assembly factory. Source and ownership documentation becomes especially important where buyer visibility is limited.

Manufacturing suppliers are more heavily exposed to working conditions, wages, hours, safety and production pressure. These sites generate the richest factory-level audit evidence because workers, records and production systems are concentrated in one operating environment.

Brands and buyers control supplier selection, audit requirements, corrective-action escalation and sourcing decisions, while also influencing risk through lead times, price pressure and order volatility. Procurement therefore belongs inside the assurance conversation.

Audit firms shape evidence credibility through auditor competence, consistency, sampling and impartiality. Compliance teams then translate findings into risk prioritization and reporting, while sourcing teams determine whether suppliers receive enough time and support to improve.

The strongest assurance models treat supplier compliance as a shared value-chain responsibility. Factory management remains accountable for legal and safe conditions, while buyer practices, audit quality and governance determine whether improvement is reinforced or undermined.

 

The Supplier Audit Report FAQ

What is a supplier audit?

A supplier audit is a structured verification of whether a supplier’s operating conditions, records and management controls meet defined requirements. It normally combines document review, physical observation, interviews and evidence sampling rather than relying on management statements alone.

What areas should a supplier audit cover?

A complete programme usually covers core labour standards, wages and benefits, working time, occupational safety, employment contracts, HR procedures, management systems, corrective action and the quality of audit evidence. Depending on the supply chain, environmental and traceability controls may also be included.

What is a non-compliance rate?

A non-compliance rate describes the share of assessed factories, questions or compliance points that failed a defined requirement. The denominator matters. A 50% result based on a small sample is not equivalent to the same percentage generated across a much larger programme.

Is a low audit score always a bad supplier?

Not necessarily. The meaning depends on which categories created the score, how severe the findings are and whether the supplier has an effective corrective system. A supplier with one critical life-safety issue may require stronger action than a supplier with many low-severity documentation findings.

What are the most important safety findings?

Emergency preparedness, worker protection, chemical safety, first aid, fire systems, machine guarding and safe facilities are among the most consequential controls. The selected evidence shows category rates that can exceed 90%, illustrating why safety must remain visible as a separate sub-score.

Why should payroll be checked against time records?

Because wage compliance depends on the hours actually worked. Payroll, timecards, production logs and worker interviews should reconcile. If the underlying hours are wrong, even a mathematically correct payslip may conceal underpayment or excessive overtime.

Can a supplier pass an audit and still be high risk?

Yes. Audits are samples in time. Hidden subcontracting, coached workers, altered records or later deterioration can create risk that the visit does not capture. Repeat assessments, worker-access channels and management-system monitoring reduce that blind spot.

How often should supplier audits occur?

Frequency should be risk based. New, high-risk or repeatedly non-compliant suppliers need closer follow-up, while mature suppliers with stable verified systems may justify a longer interval. Critical findings should trigger faster reassessment regardless of the normal cycle.

What is the difference between an audit and due diligence?

An audit collects and verifies evidence at a point in the assurance process. Due diligence is broader and ongoing: it identifies risks across the value chain, prioritizes adverse impacts, prevents or mitigates them, supports remediation and monitors whether actions remain effective.

What makes corrective action effective?

Effective corrective action addresses root cause, assigns ownership, sets a realistic deadline, implements the fix and verifies that the risk has actually fallen. Closure evidence should demonstrate effectiveness, not merely completion of a task.

Final Takeaway

Supplier auditing is an evidence system for testing whether policies, records and factory conditions agree. Strong programmes combine documents, worker voice and physical observation so that apparent compliance can be challenged when evidence conflicts.

The database contains 345 verified statistics across 11 categories, with the largest evidence groups covering occupational safety, audit coverage and wages. Selected programmes range from low single-digit findings to category-level non-compliance above 90%, showing why one overall score cannot describe supplier risk.

Emergency preparedness, wages, overtime, contracts, chemical safety and worker rights carry different consequences and require different responses. Their sub-scores should remain visible, and critical labour-rights or life-safety findings should cap any headline rating.

Premium supplier assurance is verified control: credible evidence, prioritized risk, corrective action that addresses root causes, and repeated proof that safe, lawful and responsible conditions remain in place after the audit is over.