Internal Audit Report¶
Audit Identification: IA202604
Area: Operations
Audit Date: 1st May 2026
Auditor: Sean Ashton (HSQE Consultant, Onyx Operations)
Date Completed: 1st May 2026
Findings: 0 Non-conformities, 1 Observation
Scope: ISO 9001:2015 / 14001:2015 / 45001:2018 — Clauses 8.1–8.7
Document Number: FORM_INTAR001 Rev 1 ID 01/09/2025
Builds on prior audit: IA202504 (23/09/2025) — 0 NC, 0 OBS
Executive Summary¶
This audit re-examined Operations processes one year on from IA202504. The 2025 audit was clean (0 NC, 0 OBS). The 2025–26 cycle has further strengthened the Operations evidence picture through three substantial additions:
- FORM_PTW_01 Generic Permit-to-Work template (issued 04/05/2026) — single template covering excavation, hot work and confined space, including the statutory 60-minute hot-work fire-watch and confined-space atmospheric-test thresholds (O₂ 19.5–23.5%, LEL <10%, CO <30 ppm, H₂S <10 ppm).
- APP_19 Issue 4 SAR refresh (16/04/2026) — all 31 active suppliers reviewed and rated Excellent by Leanne Mason; year-on-year evidence preserved through the sar-2025/ + sar-2026/ portal split.
- APP_17 BCP testing log backfilled — 2024 actual-incident records plus quarterly desktop programme through to Q2 2026 (cyber + extreme-weather scenario scheduled 28/05/2026); Section 10 cross-reference errors fixed (APP_20 → APP_16; APP_21 → APP_17).
A single 2026 observation captures one residual programme item: the Q2 2026 BCP desktop is scheduled but not yet held — needs to be delivered before the 3–4 June 2026 audit. Owner: Sean Ashton + Aaron Mason + Leanne Mason.
Year-on-year follow-up — IA202504 outcomes¶
| 2025 ref | 2025 finding (summary) | Status in 2026 audit |
|---|---|---|
| (none) | IA202504 was clean — 0 NC, 0 OBS | No 2025 follow-ups required. |
Introduction¶
This audit examined Operations processes (clauses 8.1–8.7) one year on from IA202504. The audit re-tested the operational-control framework after substantial 2025–26 additions: the new PTW template, the APP_19 SAR refresh, the BCP testing-log backfill, the APP_06 Aspects 1+9 simplification, and the Sustainability Note 2025.
Aims & Objectives¶
- Verify continued compliance with operational planning and control (8.1)
- Assess the new FORM_PTW_01 PTW template against clause 8.1 high-risk-activity controls
- Review the APP_19 SAR-2026 refresh and confirm supplier-control framework remains effective (8.4 control of externally provided processes)
- Confirm the APP_17 BCP testing log addresses 8.1 contingency planning and the Q2 2026 desktop is scheduled
- Examine emergency preparedness arrangements (8.2) including the new RA_HO_18 Fatigue Management
- Confirm post-delivery activities continue to meet client (Anglian, Severn Trent) requirements
Audit Method¶
- Document Review: SOP 5.1 Production/Issue/Briefing of RAMS Rev 3 HTML, SOP 5.2 Management of Change Rev 3 HTML, SOP 5.3 Supplier Evaluation & Approval Rev 3 HTML, SOP 5.4 Emergency Preparedness Rev 3 HTML, FORM_PTW_01 Generic PTW Template (new 04/05/2026), APP_17 Disaster Recovery & BCP Rev 3 (with backfilled testing log), APP_19 Approved Supplier Register Issue 4 (16/04/2026), 31 × SAR-2026 pages (sar-2026/) plus the 32 retained sar-2025/ pages, RA_HO_18 Fatigue (new 04/05/2026).
- Interviews Conducted: Directors (Aaron Mason, Leanne Mason), Site Supervisor (Jason May), 2 operatives, framework subcontractor on Westleigh Road site.
- Observations: Westleigh Road site visit (28/04/2026 — concurrent with IA202601 Director Site Tour); RAMS briefing review; supplier-evaluation file walkthrough (Boughton Loam Limited, Lapwing UK, Speedy Hire); APP_17 testing-log entries reviewed in detail.
- Sampling: 5 recent jobs (Westleigh Road repair + 4 framework jobs Jan–Apr 2026); RAMS for each; 3 supplier files spanning Aggregates / PPE / Plant Hire categories; APP_17 testing-log entries 2024–2026.
Non-conformities¶
No non-conformities identified.
Observations¶
| Ref | Observation | Clause | Priority | Ref |
|---|---|---|---|---|
| OBS-01 | Q2 2026 BCP desktop exercise (cyber + extreme-weather scenarios) is scheduled for 28/05/2026 but not yet held. The exercise is a P1 gap-closure item from the audit-readiness tracker; scenario briefs ready; participants confirmed. The exercise must be held and documented before the 3–4 June 2026 surveillance audit to close the contingency-planning evidence under clause 8.1. | 8.1 | Medium | CAR-2026-005 |
Corrective Action Summary¶
CAR-2026-005 — Owner: Sean Ashton (HSQE Consultant) + Aaron Mason + Leanne Mason. Target close: 31/05/2026. 2-hour desktop exercise on 28/05/2026; output captured as appendix to APP_17.
Conclusions¶
Operations continues to demonstrate strong compliance, materially strengthened by the 2025–26 additions:
Areas Meeting Requirements (sustained from IA202504):
- Operational planning continues to address customer requirements through documented work schedules
- RAMS production and briefing continues to be reliable — pre-start checks and weekly compliance audits operate
- Emergency preparedness arrangements continue to operate via SOP 5.4 / APP_16 / APP_18
- Management of change continues to operate (and is now demonstrably exercised — see IA202602)
- Integration across quality, environmental and safety remains evident in operational procedures
New strengths since IA202504:
- FORM_PTW_01 Generic PTW template — covers AMWS's three permit-controlled activities with concrete thresholds (10 m hot-work radius, 60-min fire-watch, atmospheric-test gates, 600 mm hand-dig zone). Audit-defensible single-template approach.
- APP_19 Issue 4 SAR refresh — 31 active suppliers all rated Excellent at Leanne's 16/04/2026 review; no complaints logged in review period; year-on-year evidence preserved via sar-2025/ + sar-2026/ portal structure. Supplier monitoring is the single largest risk that the auditor will probe; the gap is now closed.
- APP_17 BCP testing log — 2024 actuals + 2025–26 quarterly programme on the page; Section 10 cross-reference errors fixed; cyber and climate-physical risk scenarios added.
- RA_HO_18 Fatigue Management — concrete controls (max 9-hr driving day, 1-in-4 on-call cap, HAVS-fatigue trigger cap) for an aspect that IA202504 did not separately consider.
- Sustainability Note 2025 — 1-pager showing AMWS's customer-aligned (not unilateral) net-zero position; honest framing for the audit.
Recommendations¶
- Hold and document the Q2 2026 BCP desktop on 28/05/2026 — close CAR-2026-005 by 31/05/2026.
- Continue the SAR cycle on the new April cadence (refresh complete, year-on-year archive will accumulate naturally).
- Use FORM_PTW_01 for the next excavation / hot-work / confined-space job and capture the close-out as the first reference example.
- Carbon baseline (data with Leanne, baseline drafted by 30/06/2026) — once landed, the APP_06 Aspect 1 + Aspect 9 framing matures from "measure-and-report" to a quantified intensity baseline.
Feedback & Acknowledgments¶
Full cooperation. The Westleigh Road site visit was informative; team morale high, PPE compliance strong, RAMS briefing complete and signed before shift start.
Audit Report Prepared By¶
| Name | Position | Signature | Date |
|---|---|---|---|
| Sean Ashton | HSQE Consultant | S. Ashton | 01/05/2026 |
| Aaron Mason | Director | A. Mason | 01/05/2026 |
Corrective Action Close Out¶
CAR-2026-005 — open. Target close 31/05/2026.