Oil and gasaudits on record
Service companies in Nigerian oil and gas answer to operators, regulators and their own HSE systems, often in the same quarter. Orisynx keeps the audit programme, the findings and the evidence behind them in one record you can show.
- Clause ISO 45001 8.1Critical
Lifting slings in use past their inspection due date
- Clause ISO 14001 8.1High
Bund drain valve left open on the diesel day tank
- Clause ISO 45001 7.2Medium
No HSE induction record for three contract riggers
The audit landscape
Two regulators under the PIA
The Petroleum Industry Act 2021 created the Nigerian Upstream Petroleum Regulatory Commission (NUPRC) for upstream activity and the Nigerian Midstream and Downstream Petroleum Regulatory Authority (NMDPRA) for midstream and downstream activity.
Nigerian Content
The Nigerian Oil and Gas Industry Content Development Act 2010 established the Nigerian Content Development and Monitoring Board (NCDMB).
Prequalification can ask for evidence
A 2026 prequalification notice issued through NipeX asked respondents for NOGIC JQS registration, a valid ISO 9001 certificate and evidence of an HSSE management system on major projects. Requirements vary from tender to tender, so the records behind them are worth keeping ready.
Data protection audit returns
Under the Nigeria Data Protection Act 2023 and the GAID 2025, oil and gas companies are listed in the Ultra-High Level tier of data controllers, which file Compliance Audit Returns with the Nigeria Data Protection Commission on or before 31 March each year.
Audits you’ll run
Against ISO 45001, ISO 14001 and ISO 9001, and your own templates for anything else.
- Internal HSE audits at bases, yards and work sites
- Vendor prequalification readiness reviews
- Subcontractor and supplier audits
- Permit-to-work and lifting operations audits
- Environmental audits of fuel storage, waste and spill controls
- Follow-up audits on client and certification body findings
One programme for every base and site
Every planned audit in Orisynx belongs to a department or site, with a priority, a risk level and a status from tentative to scheduled to confirmed. Progress is shown per department: planned, scheduled, confirmed, percentage complete and overdue.
If the programme already lives in a spreadsheet, import it from .xlsx or .csv. Every row is validated before anything is created, and errors are reported by row and cell.
- Internal, external, supplier, surveillance, certification and follow-up audits
- A shared calendar of audits and due dates, including overdue work
| Audit | Standard | Date | Status |
|---|---|---|---|
| Purchasing | ISO 9001 | 12 Mar | Confirmed |
| Warehouse, Leeds | ISO 45001 | 3 Apr | Scheduled |
| Kestrel Metals | Supplier | 21 May | Tentative |
| Access control | ISO 27001 | 9 Jun | Scheduled |
7 of 18 audits confirmed
Evidence kept where the work happened
Audits can be started against ISO 45001, ISO 14001 and ISO 9001, or as a custom audit from your own template. Each checklist answer is recorded as in order or as an exception.
Files, links and notes can be attached as evidence to audits, findings, corrective actions and tasks, and controlled documents sit in a separate document library. Orisynx does not prequalify you or guarantee a certificate; it keeps the record in a state you can show.
- XLSXsupplier-evaluations-2026.xlsxFile · J. Okafor · 22 Apr
- LINKPurchasing procedure, rev. 7Link · document library
- NOTEReview added to calendar, every 6 monthsNote · J. Okafor · 24 Apr
Task “Re-evaluate suppliers” completed
Actions that close on verification
The person responsible for a corrective action accepts it or disputes it with a reason, and work cannot start until they do. Actions break down into tasks with an assignee, priority and due date.
Every action passes through verify before it can close, and its effectiveness is recorded on the action. A daily email digest shows each person what is overdue, what is due soon and what is waiting on them.
- Open
- In progress
- Verify
- Closed
Oil and gas services: questions
Does Orisynx include HSE audit checklists?
No. There is no pre-loaded clause library. You build templates from your own criteria, and they can follow the clause structure of ISO 45001, ISO 14001 or ISO 9001. Fields can be text, numbers, dates or choices.
Can we audit our subcontractors?
Yes. Supplier is one of the audit types, so subcontractor audits sit in the same audit plan as your internal audits. Follow-up is an audit type too, for the return visit.
Will Orisynx get us through prequalification?
Orisynx does not prequalify anyone or guarantee certification. It keeps your audits, findings, corrective actions and evidence together, and audit history exports to CSV, so the records behind a submission are easier to find.
Can we audit ISO 9001, 14001 and 45001 together?
Audits can be started against each of these standards, or from a custom template that covers shared clauses once. Findings and corrective actions follow the same process whichever standard they come from.
Keep reading
Guides
Sources: aluko-oyebode.com, mondaq.com, tenderdetail.com, templars-law.com.
See it with your own audits
Bring an audit you have already run. We will walk it through Orisynx with you, from the plan to the last closed corrective action.