What an HR process audit actually checks, with a self-scoring checklist

The word audit makes people defensive, which is unfortunate, because an HR process audit is not an inspection and nobody fails it. It answers one question: when this process runs, what actually happens, and how would you prove it a year later?

Most founders expect the findings to be dramatic. They rarely are. The same three gaps turn up in almost every business — no named approver, no cut-off date, and no single place the record lives — and they turn up in four or five different processes at once.

The three questions asked of every process

1. 1

   Is it written?

   Not whether a policy exists somewhere, but whether a manager who joined last month could find the rule and apply it without asking anyone. A rule that lives in one person's head is not written, however well that person knows it.

2. 2

   Is it followed?

   This is where evidence matters. Take a real month, or five real joiners, and trace them through the written rule. Divergence is normal; the useful finding is whether people diverged the same way, which means the rule is wrong, or differently, which means nobody knew it.

3. 3

   Does the record survive?

   If the person who approved it left tomorrow, could you reconstruct what was decided and by whom? A chat message is evidence until the phone is replaced.

What gets examined, process by process

An audit walks the employee year end to end. The specifics differ by business, but the trail is broadly this.

• Hiring and offer — how a vacancy gets approved, who fixes the salary, and whether the first written record of a new role is something other than the offer letter.
• Joining — which documents are collected, who checks completeness, and whether payroll receives joining inputs before the cut-off or after the first salary.
• Attendance and leave — how a working day is recorded, who may correct a missed punch, how leave balances are computed and whether an employee can see their own.
• Payroll input — what reaches payroll, from whom, by when, and who signs the register off before release.
• Confirmation and movement — whether probation dates are tracked, and whether confirmations, transfers and promotions produce a letter or only a conversation.
• Performance — whether the appraisal draws on anything recorded during the year, or on memory of the last quarter.
• Grievance and discipline — whether there are two distinct routes, and whether similar cases have been treated similarly.
• Exit — the sequence from resignation to relieving letter, who clears what, and whether assets and access actually come back.
• Records and compliance readiness — whether, if asked, you could produce the registers and records your business is expected to maintain.

Score yourself first

Before commissioning anything, run this on your own business. Answer only yes or no, and answer about what is true rather than what is intended.

WRITTEN
[ ] A manager hired last month could find the leave rule without asking
[ ] Approval limits exist in writing, by role, not by person
[ ] There is one current version of each policy, and you know where

FOLLOWED
[ ] Last month closed on the published cut-off date
[ ] The last five joiners had the same induction
[ ] Two similar discipline cases in the last year were handled alike
[ ] Every probation in the last year was confirmed on or before its date

RECORDED
[ ] You can produce any employee's letters within ten minutes
[ ] Every leave approval in the last month has a name against it
[ ] Exits in the last year have a completed clearance on file
[ ] One person can state what compliance falls due this month

0-4   informal. Expect the same question to get different answers.
5-8   partly written, unevenly followed. The usual place to be.
9-11  solid. Worth auditing the gaps rather than the whole.
12    check your answers with a manager before believing it.

The value is not the number. It is that the no answers cluster — and the cluster tells you which part of the employee year to fix first.

What an audit produces

A good HR process audit ends with an ordered list of gaps, each with what is missing, what it costs and what closing it involves. Not a percentage score, and not a document describing best practice in the abstract.

It should also name which complaints are the same problem. Founders typically arrive with six or seven grievances; they usually resolve to two or three underlying gaps. Knowing that changes what you do next, because fixing two things is a plan and fixing seven is a wish.

When it is worth doing, and when it is not

It is worth doing when you cannot tell which problem to solve first, when the same problem keeps returning after being fixed, or when something external — a customer questionnaire, a lender, an investor — is about to ask questions you cannot currently answer.

It is not worth doing when you already know the answer. If every complaint you have is about attendance, you do not need an audit to tell you that; you need to go and fix attendance, shift and leave. An audit earns its keep when the diagnosis is genuinely uncertain, or when the fix needs to be sequenced across several processes — which is where HR process consulting picks up afterwards.

What to do with the findings

A gap list is not a plan, and the most common failure after an audit is to accept all of it and start none of it. Take the ordered list and draw a line after the third item. Everything above the line is this quarter; everything below it is recorded and deliberately not being done yet.

Three is not arbitrary. A small business can hold about three process changes in its head at once while also delivering its actual work. A fourth means all four move slowly, and slow process change is the kind that gets abandoned when something urgent arrives — which it will.

For each of the three, agree the four answers before touching anything: who does it, who approves it, by when, and where the record sits. Then run one full cycle and see what the cycle exposes. Findings from a real cycle are worth more than any amount of design, because they are about your business rather than about processes in general.

Re-auditing every year is usually unnecessary. What is worth repeating is the self-scoring checklist above, once a year, by the same person — the movement between years tells you more than either score on its own. And when the gaps span several processes at once, sequencing them is its own piece of work, which is where HR process consulting continues after the audit finishes.