Audit types
Choose a single audit or combine them into a programme.
Baseline gap audit
A first look for organisations starting out or after major change. We establish where controls exist, where they are informal and where they are missing, and give you a prioritised starting point.
Independent SMS audit
An objective review of your safety management system: policy, risk management, procedures, records, review and improvement, tested against what happens on the ground.
Master Code-informed control review
For the 2026 Master Code activities relevant to you, we check whether your chosen controls are in place and effective. This is a review of relevant controls, not certification against the Code.
Multi-site programme
Consistent methodology across depots, warehouses and entities, with site-level reports and a group summary that shows patterns and shared root causes.
Accreditation readiness
Preparation ahead of a scheme or customer audit. We test your evidence against the published requirements so there are fewer surprises. Scheme audits themselves are performed by appropriately approved auditors.
Follow-up verification
A targeted return visit or desktop check confirming that corrective actions were completed and are working, with closure evidence recorded.
What we look at
Only areas relevant to your activities are included in scope.
- Governance
- Executive due diligence, accountabilities, resourcing, board reporting and management review.
- Contractors
- Prequalification, onboarding, contract terms, monitoring and how contractor incidents are shared.
- Fatigue and scheduling
- Rostering, delivery windows, dock delays, work diary practice and how schedule pressure is managed.
- Speed
- Journey planning, realistic transit times, telematics review and response to exceedances.
- Mass and dimensions
- Load planning, weighing, axle distribution, permits and how overloads are prevented and reported.
- Load restraint
- Restraint methods, equipment condition, loader competency, sign-off and alignment with the Load Restraint Guide.
- Maintenance and defects
- Pre-start checks, defect reporting, workshop records, service scheduling and roadworthiness follow-up.
- Warehouse and dispatch
- Order release, loading practice, dispatch checks and the handover between warehouse and driver.
- Yards and TMP
- Traffic management plans, exclusion zones, pedestrian separation and site rules for visiting vehicles.
- Competency
- Training matrices, licence and certificate currency, induction and supervision of new starters.
- Evidence integrity
- Whether records are complete, contemporaneous and consistent, and whether they reflect what actually happened.
- Incidents
- Reporting culture, investigation quality, root cause analysis and whether lessons change practice.
From scope to closure
- 1
Scope
We agree sites, activities, audit criteria, time period and sample sizes in a written audit plan.
- 2
Evidence sampling
Records are sampled across the period, such as trips, work diaries, loading sign-offs, defect reports and contractor files, and cross-checked against interviews and site observation.
- 3
Report
A written report with an executive summary, findings referenced to evidence, and practical recommendations. Strengths are recorded as well as gaps.
- 4
Priority findings
Findings are ranked so urgent safety risks are separated from documentation improvements. Anything presenting serious immediate risk is raised on the day.
- 5
Closure evidence
Each finding lists the evidence that would demonstrate closure. Corrective actions can be tracked in COR SMS and verified at follow-up.
Our auditors
We work with an extensive national network of experienced, accredited auditors. The credentials and any scheme-specific approval relevant to your audit are confirmed for each engagement before work begins. Photographs on this site are illustrative and do not depict our auditors.
Important boundaries
NHVR does not accredit CoR or Master Code auditors and does not endorse a Master Code audit scheme. The 2026 Master Code is guidance covering 45 activities; it creates no new obligations. An audit assesses relevant controls at a point in time and does not guarantee compliance.
NHVR 2026 Master CodeAdditional service
Site Traffic Management Plans
Build a traffic management plan for each site inside COR SMS: site profile, annotated yard maps and photos, guided risk prompts, rated actions with owners, review and sign-off, a PDF report and an optional driver brief shared by link or QR code.
The plan supports your risk management. It is prepared from your site information and does not by itself establish compliance with any law or standard.
TMP software and site services
TMP creator software is AUD $499 + GST per organisation per year, billed annually. TMP inclusion in a wider CORSMS subscription is by separate agreement, not automatically included by tier. Where your agreement already includes TMP access, no additional standalone subscription is required.
Self-managed site profiles, annotated maps, risk prompts, actions, review/sign-off, PDF reports and driver QR briefs. Consultant preparation and engineering are not included.
Consultant-led TMP site work is AUD $2,200 + GST per consultant day (up to 8 hours), subject to an agreed site scope and estimated days. Travel, accommodation, engineering and specialist traffic design are quoted separately. A day rate does not promise a completed plan in one day or include software access.
Site work requires an agreed scope, not online checkout. Already a CORSMS customer? Request TMP access under your existing agreement rather than buying a replacement subscription.
External audit services
External audits are scoped per engagement and quoted transparently. Add the service that fits your goal — our team will confirm logistics and finalise pricing before any charge.
Desktop / Gap Audit
A fully remote review of your existing digital Safety Management System against HVNL Section 26C and the Critical 6 pillars.
Scope
Our auditor connects to your SMS Vault read-only, reviews 12 months of pre-start, fatigue, incident and maintenance records, samples your contractor assurance folders, and benchmarks against the current Master SMS Framework.
Turnaround: 5 business days from kick-off.
Deliverables
- Branded Master Gap Report with traffic-light pillar scores.
- Prioritised remediation register (must-fix / should-fix / advisory).
- 30-minute virtual debrief with your Tenant Admin and WHS lead.
Best for
Operators preparing for a prime-contractor review, a tender response, or before stepping up to a full on-site audit.
On-Site Verification Audit
An independent CoR Australia auditor on-site, observing operations, interviewing staff, and verifying that documented controls are actually in use.
Scope
Yard walk, vehicle and load inspections, driver interviews, document sampling against the Critical 6, and verification of contractor sign-on and pre-start workflows. Findings logged live with timestamped photo evidence in the platform.
1–3 days typical. Logistics quoted separately (see table below).
Deliverables
- Branded Master Audit Report with HVNL legal citations against each finding.
- Live NCR (Non-Conformance Report) workflow opened in the platform for every issue.
- Closing meeting with site management on the final day.
Best for
Operators who need real-world verification — not just paperwork — and a defensible position with regulators or insurers.
Full Certification Audit
End-to-end certification across governance, operational risk and contractor assurance — the full Master SMS Framework executed by a senior CoR Australia auditor.
Scope
Combines desktop preparation, multi-day on-site verification, board minute review, contractor sample audits, and post-audit remediation tracking. Issues a Master Certification badge valid for 12 months.
2–4 weeks end-to-end depending on fleet size and depot count.
Deliverables
- Master Audit Report + Executive Compliance Summary for the board.
- 12-month CoR Australia Certification badge for your tenders and procurement packs.
- Quarterly check-ins for the certification period to keep the badge current.
Best for
Enterprise operators and prime contractors who need an external assurance product, not just an internal audit.
| Logistics Category | Configuration | Pricing Logic |
|---|---|---|
| Travel (Air / Rail) | Variable | At cost + 10% admin fee |
| Regional Multiplier | Tiered by Zone | Metro $0 / Regional $250 / Remote $500 |
| Accommodation | Per Night | Standard $220 or Remote/Mining $350 |
| Vehicle Hire | Daily Rate | Standard Sedan $110 or Site-Ready 4WD $220 |
| Per Diem (Extras) | Fixed Daily | $95 per day for meals and incidentals |
Logistics multipliers are managed by CoR Australia and shown to clients on every audit quote.
The Master Audit Report
Every audit completed under the CoR Audit SMS Framework produces a fully branded Master Audit Report, ready for executive review and regulator scrutiny.
- "Traffic light" executive summary of compliance posture.
- Legal citations from the HVNL for every finding.
- Direct recommendations to bridge "Reasonably Practicable" gaps.
- Live NCR (non-conformance) tracking once the report is issued.