Funny you should ask.....
I was just out doing a HSE compliance audit today. We produce a questionaire with a sampling of questions that is sent to the site in advance of the visit. On the questionaire we highlight those questions that are going to be scored on the ranking form. The ranking form uses yes,no, and NA answers to those questions to generate a score for the audit. Each year the questionnaire changes and also the ranking form.
The guidance document follows the questionnaire questions and tells the auditor what to look for and the specific internal reference document that lists the requirement. Like GPP 506. We've incorporated various regulatory requirements into our internal documents so that we reference external sources as little as possible.
Health and Safety is essentially a healthy dose of OSHA req's combined with hazard hunting. Grounding/bonding, training, electrical safety, eyewash and showers, extinguishers, open paths to exits, securing of compressed gas cylinders, labeling, segregation of incompatible materials, certification of lifting gear,etc. These are easy to check when you're doing the tour and verifying other records.
We don't combine quality into the audit.
edit: Oops, Randy is right. You may need to reference ...COSH? rather than OSHA.