CO · Expiry & renewal tracking
Make sure your company's annual SG-SST audit gets done
Employers in Colombia must audit their SG-SST every year, planning it with the COPASST or OSH Monitor (Article 2.2.4.6.29 of Decreto 1072 de 2015). There is no grace period, and non-compliance is punished under Article 91 of Decreto Ley 1295 de 1994 (Article 2.2.4.6.36).
The employer must carry out an annual compliance audit of the Occupational Safety and Health Management System (SG-SST), planned with the participation of the Joint OSH Committee (COPASST) or OSH Monitor (Vigía). If the audit is done by in-house staff, they must be independent of the activity, area or process being checked (Article 2.2.4.6.29 of Decreto 1072 de 2015). The audit programme must define, among other things, the auditor's competence, the scope, frequency, methodology and reporting, and must take previous audit results into account; auditors must not audit their own work, and the results must be passed to those responsible for preventive, corrective or improvement measures (paragraph).
The audit must cover, among other things, compliance with the occupational safety and health policy, the results of structure, process and outcome indicators, worker participation, accountability, how the system is communicated to workers, SG-SST planning and implementation, management of change, procurement, suppliers and contractors, monitoring and measurement of results, investigation of incidents, work accidents and occupational diseases, the audit process itself and the review by senior management (Article 2.2.4.6.30). Senior management, whatever the size of the company, must then review the system at least once a year, taking into account, among other things, the audit results (Article 2.2.4.6.31).
Resolución 0312 de 2019 (SG-SST Minimum Standards) checks, in companies with more than fifty workers, evidence of internal audits covering all areas carried out at least once a year, the audit programme and its planning with the COPASST, and the annual senior management review with the scope of Article 2.2.4.6.30 (Article 16; standards 6.1.2, 6.1.3 and 6.1.4 in the table of Article 27). For companies with fifty or fewer workers in risk classes I, II or III, those items are scored as not applicable (Article 27), but Article 2.2.4.6.29 of Decreto 1072 de 2015 is addressed to the employer without distinguishing by size.
At a glance
| Frequency | Annual (Article 2.2.4.6.29 of Decreto 1072 de 2015) |
|---|---|
| Planning | With the participation of the COPASST or OSH Monitor (Article 2.2.4.6.29) |
| Auditor | Competent according to the programme; if in-house, independent of the area audited; no one audits their own work (Article 2.2.4.6.29 and paragraph) |
| Scope | Thirteen minimum topics, from the OSH policy to the senior management review (Article 2.2.4.6.30) |
| After the audit | Pass results to those responsible for action; senior management review at least once a year (Articles 2.2.4.6.29, paragraph, and 2.2.4.6.31) |
| Who checks | Ministry of Labour; ARLs carry out delegated supervision (Article 2.2.4.6.36, paragraph; Article 35 of Resolución 0312 de 2019) |
The rule requires an annual audit without fixing a month; the date of the latest audit report is the practical reference for tracking.
Who is responsible?
The obligation lies with the employer (Article 2.2.4.6.29 of Decreto 1072 de 2015), who must plan the audit with the COPASST or OSH Monitor and choose a competent auditor; in-house auditors must be independent of the area or process they audit. Senior management then reviews the results at least once a year (Article 2.2.4.6.31).
If the deadline passes
Decreto 1072 de 2015 provides no grace period for the annual audit. Non-compliance with the SG-SST chapter is punished under Article 91 of Decreto Ley 1295 de 1994, as amended by Article 13 of Ley 1562 de 2012 (Article 2.2.4.6.36), and non-compliance with the Minimum Standards on the same terms (Article 36 of Resolución 0312 de 2019).
Audit, review and self-assessment are separate steps
The annual audit (Article 2.2.4.6.29 of Decreto 1072 de 2015), the senior management review (Article 2.2.4.6.31) and the Minimum Standards self-assessment each December (Article 26 of Resolución 0312 de 2019) are separate obligations. Scheduling the audit before the senior management review lets the review take its results into account.
Tracking it with ExpirySuite
- Add the company as a record and enter as the expiry date one year after the latest SG-SST audit report.
- Email reminders arrive 60, 30, 14, 7 and 1 day before and on the day, in time to plan the audit with the COPASST or OSH Monitor and appoint a competent, independent auditor.
- The auditor or the SG-SST lead can upload the audit report through a secure link that is valid for 14 days and needs no account; then move the expiry date to one year from that report.
- Assign the SG-SST lead or senior management as the responsible person; if the date passes without an audit, managers get further reminders 3, 7 and 14 days later.
Frequently asked questions
- How often must the SG-SST be audited?
- Once a year: the employer must carry out an annual audit, planned with the participation of the COPASST or OSH Monitor (Article 2.2.4.6.29 of Decreto 1072 de 2015).
- Can someone from the company do it?
- Yes, as long as they are independent of the activity, area or process being checked; auditors must not audit their own work, and the audit programme defines the auditor's competence (Article 2.2.4.6.29 and paragraph).
- What must the audit cover?
- At least the thirteen topics in Article 2.2.4.6.30 of Decreto 1072 de 2015, including the OSH policy, indicators, worker participation, management of change, contractors, investigation of incidents and accidents and the senior management review.
- Does it replace the Minimum Standards self-assessment?
- No. The self-assessment is done in December using the form in Resolución 0312 de 2019 (Articles 26 and 27), while the audit is a compliance check of the system required by Article 2.2.4.6.29 of Decreto 1072 de 2015.
Sources
- Decreto 1072 de 2015, Articles 2.2.4.6.29, 2.2.4.6.30, 2.2.4.6.31 and 2.2.4.6.36 (Función Pública, Gestor Normativo; in Spanish)
- Resolución 0312 de 2019 of the Ministry of Labour, SG-SST Minimum Standards, Articles 16, 26, 27, 35 and 36 (Régimen Legal de Bogotá, District Legal Secretariat; in Spanish)
Last checked: Oct 11, 2026 · This page summarises official sources for general information and is not legal advice. Check the linked sources for current rules and fees.
Made for annual OHS management system audit (SG-SST) (Colombia)
A ready template for annual OHS management system audit (SG-SST) (Colombia) with sensible validity defaults, so you enter less and track more.
Reminders on time
Email alerts at 60, 30, 14, 7 and 1 day before each annual OHS management system audit (SG-SST) (Colombia) expires, plus overdue escalation to managers.
Assign an owner
Give each annual OHS management system audit (SG-SST) (Colombia) an owner and let employees update their own via a secure link — no login needed.