A buyer social audit readiness plan should begin thirty days before the assessment where possible. At that point, the first task is to establish what will be assessed and where workers or the business face the greatest unresolved risks. Then assign owners, reconcile evidence and start correcting the gaps. A realistic plan must also record what cannot be resolved before the audit and what management will do about it.
For a mid-sized manufacturer, the difficulty is often coordination. HR holds employment records, operations controls production hours, finance holds payment evidence and procurement manages labour contractors. Each team may have documents ready, while no one has checked whether those documents agree.
This plan brings those checks into one sequence. It is a recommended preparation workflow, not an official audit-methodology checklist or a promise of buyer approval. Adjust it to the buyer’s requirements, the audit scope and the conditions at your site.
What you need to know
- Confirm the audit scope before collecting documents.
- Start with worker harm and serious risks, rather than the easiest paperwork.
- Compare records for the same workers, locations and periods.
- Give every gap an owner, deadline and evidence requirement.
- Prepare people to explain their responsibilities truthfully.
- Keep unresolved issues visible and continue remediation after the audit.
What can thirty days realistically achieve?
Thirty days can establish an accurate site profile, identify missing or contradictory evidence, address some immediate problems and give management a credible action plan. It can also improve the way departments coordinate and show whether a corrective action has actually been implemented.
It cannot create an authentic history of controls that were never operated. A newly introduced inspection process cannot prove that inspections happened last year. A grievance channel launched this week cannot demonstrate months of effective case handling.
Some changes need more time, budget or specialist input. Working-hour problems may require production planning and staffing changes. Contractor failures may require a wider payment review. Building alterations may need competent assessment and approvals.
Begin the necessary work now. Keep the implementation date accurate, retain evidence of progress and explain the remaining risk. If an audit outcome affects onboarding or continued orders, confirm the buyer’s acceptance and escalation process directly.
For SMETA specifically, Sedex describes the audit as a continuous-improvement methodology, not certification or a pass-or-fail test. [1] The buyer can still make its own commercial decisions based on findings. Read What Happens in a SMETA Audit? for the broader process.
Days 1–5: Confirm scope and establish ownership
Get the buyer’s request, audit booking information and applicable requirements into one place. Confirm:
- Which legal entity, sites and activities are included.
- The requested methodology, version and scope.
- Whether the audit is announced, semi-announced or unannounced.
- Which workforce categories, shifts and contractor arrangements are relevant.
- Any document periods and submission deadlines communicated by the auditor.
- Previous findings and the status of corrective actions.
- Who receives the report and manages follow-up.
Where SMETA is requested, confirm the scope and arrangements with the appropriate approved audit company. Sedex states that only approved Affiliate Audit Companies conduct SMETA audits. A readiness adviser and the independent auditor have different roles. [1]
Do not assume that a previous customer’s document list meets this customer’s requirements. Check whether environmental or business-ethics topics are included alongside workforce and safety issues, and involve the appropriate internal specialists. Sedex distinguishes the two-pillar and four-pillar scope, with the latter adding environment and business ethics. [1]
Appoint an accountable management sponsor and a preparation coordinator. Assign HR, operations, procurement, finance and EHS their own actions. Create a shared tracker with the gap, risk, owner, due date, evidence required and current status.
Output by Day 5: A confirmed scope, named owners, a previous-findings review and an initial risk register.
Days 6–10: Review workforce coverage and evidence gaps
The ETI Base Code covers employment terms, wages, hours, safety and the use of contracting arrangements. Use those topics, alongside the applicable law and buyer requirements, to organise the evidence review. [2]
Build a current workforce profile covering direct employees, contract workers, temporary personnel and other relevant categories. Check it against site access, departmental rosters and contractor deployment information.
Include night shifts and support functions such as housekeeping, security and loading. Check recent joiners and workers who move between departments or locations.
Then map the evidence available for employment terms, attendance, pay, applicable contributions, safety, grievances, recruitment and corrective actions. Classify each item as:
- Available and checked.
- Available but inconsistent or incomplete.
- Missing and requiring action.
- Not applicable, with the reason recorded.
Check dates and coverage. A training record may be current but exclude contract workers. A grievance policy may exist without a clear receiving officer or case process. A payment receipt may relate to a different month from the wage sheet.
Request missing evidence through the responsible owner. If the buyer’s request contains questions as well as an audit, use one response register so answers can be traced to supporting records.
Output by Day 10: An evidence index and a prioritised gap list showing what exists, what needs checking and what needs to change.
Days 11–15: Reconcile hours, wages and contractor records
The ETI Base Code sets expectations for understandable wage information, deductions, overtime and rest. These buyer-standard expectations must be read alongside applicable legal requirements. [2]
Move from collecting files to testing whether they tell a consistent story. Select a meaningful sample across contractors, shifts, recent joiners, overtime cases and previous concerns. Include busy production periods where relevant to the assessment.
For each sampled worker, follow the record through deployment, attendance, overtime, wage calculation, deductions and payment. Review applicable contribution evidence against worker-level details and the corresponding period.
Ask practical questions:
- Did additional hours approved by operations reach payroll?
- Does the payment evidence match the net amount owed?
- Were failed transfers followed up?
- Are deployed contract workers included in the relevant records?
- Are differences between systems explained and supported?
Do not treat every discrepancy as proof of wrongdoing. Site entry and exit times, for example, may include time that was not worked. Investigate differences against source records and the worker’s experience.
Where a sample reveals a recurring problem, expand the review. If several workers are missing from one contractor’s records, checking another small sample may be insufficient.
Correct worker-impacting issues promptly, with appropriate legal and specialist input. Do not wait for the audit date to resolve a wage shortfall or serious hazard.
For a worker-level comparison tool, read How contract labour governance helps manufacturers prepare for buyer audits.
Output by Day 15: Reconciled samples, documented explanations and an action list for unresolved workforce and payment issues.
Days 16–20: Review site conditions and worker access
The ETI Base Code calls for safe working conditions and regular, recorded safety training. [2]
Conduct a structured site walk with the people who understand the work and its hazards. Include relevant shifts and support areas. Check emergency routes, equipment safeguards, PPE, welfare arrangements and task-specific training, with competent EHS input where needed.
Compare conditions with records. An inspection sheet that reports a clear emergency route should agree with what is visible on site. A training list should correspond to the workers performing the task.
The UN Guiding Principles recommend operational grievance mechanisms for affected people and identify accessibility and predictability among their effectiveness criteria. This is international guidance, not a replacement for a statutory complaint procedure. [3]
Review worker communication and grievance access. Can workers explain how to raise a concern? Can contract workers use the relevant channels? Is there an alternative route when a complaint concerns their supervisor?
Worker feedback should be voluntary, confidential and protected from retaliation. Do not collect individual responses in a general management spreadsheet or turn an internal review into rehearsal for an auditor’s questions.
Prepare managers to explain how their processes operate: who approves overtime, who checks contractor payments, who receives complaints and who escalates overdue actions. If the answer depends on another team, establish the handover.
Output by Day 20: A site-condition action list, a worker-access review and clearer management ownership.
Days 21–24: Implement corrections and escalate systemic risks
OECD guidance sets out a continuing due-diligence process: identify impacts, prevent or mitigate them, track results, communicate and support remediation where appropriate. The following action sequence applies that logic to internal preparation; the specific dates are SVEGA’s recommendation. [4]
Review each open issue according to worker impact, seriousness, recurrence and the time needed for a sustainable solution. These are internal prioritisation factors, not substitutes for the audit methodology’s classification system.
Separate three things:
- Immediate correction: What resolves the current problem or contains harm?
- Corrective action: What changes the process that allowed it?
- Effectiveness check: What will show that the change works?
Moving materials away from an emergency exit corrects an obstruction. Revising storage arrangements and assigning inspection responsibility addresses how it happened. Subsequent checks provide evidence of whether the new arrangement is holding.
If a change needs more time, record the interim protection, accountable owner, required resources and next milestone. Escalate decisions that exceed the coordinator’s authority.
Avoid marking an issue closed because a document was uploaded. Internal completion and external acceptance are separate states. Some actions may still require verification by the buyer or auditor under the relevant process.
Output by Day 24: Implemented corrections, supported closure decisions and management-approved plans for remaining risks.
Days 25–27: Test evidence retrieval and process understanding
Run an internal readiness review. Choose a few requirements and ask the responsible teams to retrieve the evidence without a prolonged search.
Trace one overtime case through approval, attendance, payroll and payment. Trace one contractor worker through deployment, induction and relevant records. Review one grievance or corrective action through ownership, response and closure, protecting sensitive information.
Ask managers to explain the actual process. If a written procedure differs from practice, investigate and address the gap. Do not teach people a preferred answer that conceals it.
Check whether confidential records can be accessed securely by authorised people. A shared folder containing unrestricted identity documents, bank details and complaints creates a separate governance problem.
This internal exercise is not an independent audit or an assurance opinion. Its purpose is to find remaining weaknesses in evidence, ownership and implementation.
Output by Day 27: A tested evidence index and a final exception list.
Days 28–30: Finalise logistics and the open-action position
Confirm the practical arrangements appropriate to the audit format. For semi-announced or unannounced audits, preparation must support readiness throughout the relevant window rather than depend on one chosen day.
Check that:
- Department owners or suitable deputies are available.
- Records are indexed by site and reporting period.
- Access permissions and document versions are clear.
- Contractor records are available through authorised channels.
- Worker interviews can take place privately, as directed by the auditor.
- Interpreting arrangements, where needed, are agreed appropriately.
- Previous actions and unresolved risks have supporting evidence.
- Management can explain the remediation plan honestly.
Keep normal operations representative. Do not exclude workers, suspend an activity or hide a location to distort what the auditor sees.
Prepare an accurate open-action register. It should show the issue, interim control, owner, target date and evidence available. Follow the buyer’s agreed reporting and escalation requirements. Accurate disclosure supports a credible response; it does not guarantee acceptance.
Output by Day 30: An accessible evidence pack, clear audit-day responsibilities and an honest account of unresolved issues.
The 30-day readiness checklist
Use the owner column as a starting point and adapt it to your organisation. Dates indicate the main review window; urgent action should begin as soon as a serious issue is identified.
| Window | Task | Suggested lead | Completion evidence | Status |
|---|---|---|---|---|
| Days 1–5 | Confirm scope and previous findings | Coordinator and management | Scope record and findings register | ☐ |
| Days 1–5 | Assign owners and escalation routes | Management sponsor | Named responsibilities and tracker | ☐ |
| Days 6–10 | Reconcile workforce coverage | HR and operations | Current workforce profile | ☐ |
| Days 6–10 | Map available and missing evidence | Department owners | Evidence index and gap list | ☐ |
| Days 11–15 | Check hours, wages and payments | HR, operations and finance | Reconciliation and exceptions | ☐ |
| Days 11–15 | Review contractor records | Procurement and HR | Worker-level review and action log | ☐ |
| Days 16–20 | Review site conditions | EHS and operations | Inspection and corrective actions | ☐ |
| Days 16–20 | Check grievance access and communication | HR and relevant case owners | Coverage review and secure records | ☐ |
| Days 21–24 | Correct gaps and approve longer actions | Action owners and management | Implementation evidence and milestones | ☐ |
| Days 25–27 | Test retrieval and understanding | Coordinator and department owners | Review notes and remaining exceptions | ☐ |
| Days 28–30 | Finalise access, logistics and open risks | Coordinator and management | Final pack and open-action register | ☐ |
What should you avoid during audit preparation?
Do not fabricate records, backdate procedures, alter attendance to remove hours or ask workers to give deceptive answers. Do not hide workers or keep a second set of records for the audit.
If historical evidence is missing, state the gap and retain the evidence that does exist. Begin the improved control from its actual implementation date.
Explain to workers what an audit involves, their opportunity to speak honestly and the protection against retaliation. That is appropriate communication. Telling them what to say about wages, hours or complaints is not.
Management should make these expectations clear to employees, contractors and external advisers. Preparation should improve conditions and evidence, rather than conceal the difference between them.
Build the next ninety days into the plan
OECD guidance includes tracking implementation and results, rather than treating a review as the end of due diligence. [4] The audit should feed into an ongoing operating process. Schedule the post-audit work before the preparation team disperses.
First 30 days after the audit: Review findings, assign ownership, contain urgent risks and agree actions through the applicable buyer or auditor process.
Days 31–60: Implement changes to workforce records, contractor oversight, production planning, evidence retention and grievance handling. Address the process failures behind repeated findings.
Days 61–90: Check effectiveness, review overdue actions and establish a recurring management review. Keep implementation, verification and external acceptance separate in the tracker.
The aim is to reduce the amount of chasing required before the next buyer request. Evidence should be produced through ordinary operations and reviewed regularly.
Frequently asked questions about buyer social audit readiness
Can a manufacturer become ready for a social audit in thirty days?
Thirty days can improve evidence, ownership and some operating controls. The achievable result depends on the starting position and seriousness of the gaps. Structural changes and historical evidence cannot always be resolved within that period, so the plan must include genuine remediation and accurate reporting of open issues.
What should a company do first when a buyer social audit is approaching?
Confirm the scope, methodology, sites, buyer requirements and previous findings. Appoint an accountable sponsor and coordinator, then identify urgent worker risks and evidence gaps.
Does a complete document pack guarantee buyer approval?
No. Documents must reflect actual practice and agree with other evidence. Audit findings and the buyer’s commercial requirements can affect the outcome independently of whether the requested files were supplied.
How should a company prepare workers for audit interviews?
Explain the purpose of the audit and encourage truthful participation without retaliation. Follow the auditor’s arrangements for confidentiality and access. Do not prescribe answers or pressure workers to conceal concerns.
What should a manufacturer do if a problem cannot be resolved before the audit?
Address immediate harm, put appropriate interim protection in place and record a realistic action plan. Retain evidence of progress, assign an owner and follow the applicable reporting requirements. An open plan does not guarantee that a buyer will accept the risk.
Is a SMETA audit a certification or a pass-or-fail assessment?
No. Sedex describes SMETA as a continuous-improvement methodology rather than certification or a pass-or-fail test. [1] Buyers may still use the findings to make their own sourcing decisions.
Who should coordinate social audit preparation within a manufacturer?
Use a coordinator supported by an accountable management sponsor. HR, operations, finance, procurement and EHS should own their respective evidence and actions, rather than leaving all preparation with HR.
Start with a clear view of the gaps
If the audit date is approaching, identify the requirements, risks and owners before asking every department to send its documents. That gives the business a basis for deciding what must happen immediately and what needs a longer implementation plan.
SVEGA’s Social Compliance and Governance Readiness Review can help clarify gaps, evidence weaknesses and priorities. Discuss your audit timeline and current position to scope a practical readiness review. SVEGA provides advisory support; it does not conduct independent SMETA audits or guarantee buyer approval.
References
[1] Sedex. SMETA audit. See scope, approved audit companies, how SMETA works and the certification distinction. Read the overview.
[2] Ethical Trading Initiative. ETI Base Code. Clauses 3, 5, 6 and 8 address safety, wages, working hours and recognised employment relationships. Read the Base Code.
[3] OHCHR. Guiding Principles on Business and Human Rights. 2011, Principles 29 and 31: operational grievance mechanisms and effectiveness criteria. Read the Guiding Principles.
[4] OECD. OECD Due Diligence Guidance for Responsible Business Conduct. 2018, section II, the due-diligence process, particularly steps 2–6. Read the guidance.
References checked: 5 October 2026. The 30-day schedule, checklist and 90-day follow-up sequence are SVEGA’s practical recommendations, not an official audit timetable. Adapt them to the buyer, site and applicable requirements.
