The audit process for the Veiligheidsladder (Safety Culture Ladder)
A Veiligheidsladder audit does not measure paperwork. The auditor looks at behaviour and culture: is work really done safely, or only when someone is watching? They do this through interviews at all levels of the organisation and observations in the workplace. Documents play a supporting role; the conversations are the core.
The audit is carried out by a certification body (CI) accredited by the Raad voor Accreditatie (RvA) (Dutch Accreditation Council) . Well-known CIs are Kiwa , DNV , DEKRA and TÜV . For a complete overview of recognised CIs, see NEN .
This is what makes the audit process different from a VCA check. With VCA, the question is: do you have the right documents and certificates? With the Veiligheidsladder, the question is: does a mechanic on the shop floor dare to speak to their supervisor when something is wrong? Both audits have their own value; they measure different things. You can read more about the difference on the page Veiligheidsladder vs. VCA.
How audit scope differs per certification type
The certification type you choose determines how intensive the audit is.
| Type | Audit scope year 1 | Years 2 and 3 | Auditors |
|---|---|---|---|
| SCL Original | 100% of the organisation | 100% per year | 2 (four-eyes principle) |
| SCL | 40% of the organisation | 40% per year | 2 (four-eyes principle) |
| SCL Light | 40% of the organisation | Behaviour check + action plan | 1 auditor |
SCL Original and SCL always use two auditors working together. This four-eyes principle guarantees objectivity and consistency. With SCL Light, one auditor is enough in years 2 and 3. They check progress on the action plan and behaviour goals.
How the audit process works
Preparation: SAQ and document submission
Before the auditors visit, your organisation completes the SAQ (Self Assessment Questionnaire) via the mandatory NEN SCL Web tool. This is the online baseline measurement that covers all 5 themes of SCL 2.0 . The result gives the auditor a first picture.
Note: SCL 2.0 has applied since 1 January 2024. That version replaced the old structure of 6 business aspects with 5 themes. If you still work with an older document, check whether it follows the current structure.
In addition, you submit documents in advance: safety policy, records of incidents and near misses, reports of internal audits, and evidence of workplace inspections. Not to tick them off, but as context for the conversations.
Document review
The auditor checks whether there is a working system. Are there procedures? Are they up to date? Are near misses recorded and followed up? Are there results from internal audits?
At level 3, this is the point where your system must be right. At level 4, this is only the basis; what follows is the conversations and observations.
Interviews at all levels
This is the core of the audit. The auditor speaks with people at all levels: board, middle management and operational staff. They do this separately, so they can compare what the board thinks with what the shop floor experiences.
Typical questions to an employee: “If you find something unsafe, what do you do?” “Have you ever reported a near miss?” “What happened next?” “Would you dare to speak to your supervisor if they did something unsafe?”
It is not about the right answers. It is about consistency. If the director says “our people always report near misses” and a mechanic says “I never report anything, nothing is done with it anyway”, there is a culture gap. The auditor sees that immediately.
Workplace observations
The auditor also goes to the workplace: a building site, a machine hall, a trench along the railway. They watch how work is done when no supervisor is present. Are safety measures followed? Do people speak to each other about safety?
For example: a groundworks company has a procedure on paper for working in trenches. During the workplace observation, the auditor sees that the trench shoring has not been installed. Then the paper has no value.
Assessment per theme
After the interviews and observations, the auditor assesses all 5 themes: leadership and policy, knowledge and skills, primary and secondary processes, working with external parties, and learning and improving. For each theme, they determine which level applies based on the behaviour found.
Level determination and report
The final level is the weighted result across all 5 themes. There is no simple sum. If one theme lags well behind, it pulls the final level down. The official guidance ViA 3.0 (Dutch guidance document) uses the term “niveaus” (levels) rather than “treden” (rungs). In substance, that means the same thing.
After the audit, you receive an audit report with findings per theme, the level determined, and improvement points for the coming period.
Annual cycle: years 1, 2 and 3
A certificate is valid for 3 years, but it is checked every year. In year 2 and year 3, a follow-up audit takes place. This is lighter than the first audit, but the CI checks whether your organisation continues to develop.
Your level can also drop. If in year 2 it turns out that behaviour has got worse or systems no longer work, the CI can lower your level. Getting a certificate is the start, not the finish line.
What auditors look for
Consistency is the key word. Between what the board says and what the shop floor experiences. Between what is written in procedures and how work is done on site. Between the figures in the reporting system and employees’ attitudes towards reporting.
A specific example of level 4 behaviour: an employee stops work because they find a situation unsafe. They speak to their supervisor. And the supervisor thanks them. If that kind of behaviour is normal in an organisation, you are at level 4. If it only exists in the procedures, you are at level 3.
More about the Veiligheidsladder
- Requirements per level - What does an auditor test per theme?
- Certification types - How does audit intensity differ?
- The 5 levels - What does each level mean?
- Behaviour and culture - Why culture is central
- VCA audit - How does a VCA audit differ from an SCL audit?