1. Establish the audit universe
List legal entities, establishments, contractor names, scope of engagement and periods being reviewed.
Identify the current applicable obligation sources for each location, worker category and contractual arrangement. Record who approved the audit criteria.
2. Gather the evidence in a usable form
- Request registration and licensing evidence where applicable, with issue and expiry information.
- Identify the corresponding deployment, attendance, wage and payment records for the same period and population.
- Where a filing is required, request the relevant submission or remittance evidence and confirm the identifiers and period match.
3. Perform consistency and completeness checks
- Compare worker identity and count between deployment records, attendance and wage information.
- Check that deductions and contributions, where applicable, reconcile to the supporting statutory working and filing evidence.
- Classify each gap accurately: not applicable, not supplied, supplied but incomplete, inconsistent, pending clarification or verified.
4. Track remediation—not just a score
- Document the observation, relevant control or legal source, material evidence and why an action is required.
- Assign an owner and due date; log clarification exchanges and later documents without deleting the original finding.
- Close only against reviewed evidence. Escalate unresolved high-impact observations through an agreed process.
5. Keep the audit current
Refresh the checklist when government notifications, operating activities or workforce arrangements change.
Maintain a record of the last legal review and reviewer, rather than implying a downloadable checklist stays current forever.
Questions we often hear
Does document upload alone make a vendor compliant?
No. Documentary completeness, applicable legal conditions, consistency and appropriate verification must also be reviewed.
What should an audit report include?
At minimum: scope, locations, periods, criteria, observations, evidence, owner, action status and the basis of any closure decision.