FTA Drug and Alcohol Testing Compliance Audit
Audit a transit agency’s drug and alcohol testing program against FTA Part 655, from policy and covered employee pools to chain of custody, training, and MIS readiness.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Public Transit · Transit Contractors · Municipal Transportation · Regional Transit Authorities
Overview
This audit template is for reviewing a transit agency’s drug and alcohol testing program against FTA requirements, with a focus on the records and controls that support annual certification and MIS reporting. It walks through the program in the same order an auditor would: scope and ownership, written policy and employee notice, covered employee rosters and random testing pools, testing operations and chain of custody, training and record retention, and final findings with corrective actions.
Use it when you need to verify that the program is not only written correctly, but also operating consistently. It is especially useful before an annual MIS submission, after a policy update, when a vendor changes, or when the agency has had roster turnover, transfers, leaves, or terminations that could affect pool accuracy. The template helps you compare source records to reported data and identify deficiencies before they become a certification issue.
Do not use it as a generic HR audit or a substitute for legal review of your agency’s policy language. It is not meant for non-transit drug testing programs that follow a different rule set, and it should not be used to judge clinical or disciplinary outcomes outside the FTA framework. If your agency has multiple covered populations, contractors, or locations, customize the roster and evidence fields so each pool and process is clearly traceable.
Standards & compliance context
- The audit is aligned to FTA drug and alcohol testing requirements under 49 CFR Part 655 and the related DOT testing framework used by transit agencies.
- Record retention, confidentiality, and access control checks support common federal compliance expectations for transportation testing programs and internal audit trails.
- Supervisor readiness and employee education sections help demonstrate that the agency has implemented the training and notice practices expected in a regulated testing program.
- MIS reporting review supports annual certification readiness by reconciling reported data to source records before submission.
- If your agency also uses contractor staff or mixed operations, confirm the same controls are applied consistently across all covered employee groups.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Audit Scope and Program Setup
This section defines exactly what period, agency, and source documents are in scope so the audit can be traced and repeated.
-
Audit period and agency scope documented
Record the audit period, transit service types covered, and the departments or subsidiaries included in scope.
-
Current drug and alcohol program owner identified
Identify the responsible program manager, designated employer representative, or compliance owner.
-
Reference documents available for review
Select the documents reviewed during the audit.
Written Policy and Employee Notice
This section checks whether the policy language, employee notice, and revision control actually reflect the current testing program.
-
Written policy references FTA 49 CFR Part 655
Policy explicitly cites the applicable FTA drug and alcohol testing requirements.
-
Policy includes prohibited conduct, testing triggers, and consequences
Policy addresses prohibited drug and alcohol use, required testing circumstances, and disciplinary or removal consequences.
-
Employee notice and acknowledgment process documented
Agency can show how covered employees receive the policy and acknowledge receipt.
-
Policy revision date is current and controlled
Record the most recent policy revision or effective date and verify version control.
Covered Employee Roster and Testing Pools
This section verifies that the right employees are included and that random testing pools are accurate, separate, and current.
-
Covered employee roster is current and complete
Roster includes all safety-sensitive employees subject to FTA testing and excludes non-covered staff.
-
Random testing pools are maintained separately for drug and alcohol testing
Pools are organized so random selections can be administered according to the applicable testing categories.
-
Pool updates reflect hires, transfers, leaves, and terminations
Evidence shows timely updates when employees enter or leave safety-sensitive status.
-
Random selection records retained for the audit period
Agency can produce selection reports, notification records, and completion evidence for the review period.
Testing Operations and Chain of Custody
This section confirms that collections, specimen handling, result processing, and vendor steps are documented from start to finish.
-
Collection process uses approved procedures and qualified collectors
Collection records show use of proper procedures and trained personnel for drug and alcohol testing events.
-
Chain-of-custody documentation is complete and traceable
Forms and records support specimen integrity from collection through laboratory or testing vendor receipt.
-
Positive, refusal, and other non-negative results are documented and acted upon
Agency can show timely removal-from-duty, referral, or other required response steps.
-
Testing vendor and medical review processes are defined
Third-party roles, result review, and notification responsibilities are documented and understood.
Training, Supervisor Readiness, and Records
This section shows whether supervisors and employees have the training and records access needed to support compliant decisions and retrieval.
-
Supervisors receive reasonable suspicion training as required
Training records show supervisors who make reasonable suspicion determinations are current.
-
Employee education and awareness materials are available
The agency provides training or awareness materials covering policy expectations and reporting obligations.
-
Records retention process supports audit retrieval
Testing, training, and policy records can be retrieved promptly for the audit period.
-
Record storage protects confidentiality and access control
Sensitive records are stored with appropriate access restrictions and confidentiality safeguards.
MIS Reporting and Annual Certification Readiness
This section compares source records to the MIS report and flags issues that could affect annual certification or submission accuracy.
-
Most recent MIS report is complete and submitted on time
The latest annual MIS submission is available and shows timely filing.
-
MIS data matches source records
Reported counts for covered employees, tests, positives, refusals, and other required metrics reconcile to source documentation.
-
Annual certification readiness issues identified
Select any issues that could affect annual certification readiness.
-
Corrective action plan assigned for findings
Any deficiencies identified during the audit have an owner, due date, and follow-up plan.
Findings, Corrective Actions, and Inspector Sign-Off
This section turns audit observations into assigned corrective actions and closes the loop with formal sign-off.
-
Summary of deficiencies and non-conformances
Summarize all findings, including critical items, root causes, and affected program areas.
-
Corrective action owner and due date
List the responsible owner and target completion date for each corrective action.
-
Inspector signature
Inspector confirms the audit results are accurate and complete.
How to use this template
- 1. Enter the audit period, agency name, program owner, and the reference documents you will use so the review is tied to a defined scope.
- 2. Verify that the written policy, employee notice, and acknowledgment records match the current FTA-based program language and revision date.
- 3. Reconcile the covered employee roster against random drug and alcohol pools, then confirm hires, transfers, leaves, and terminations were updated on time.
- 4. Review sample testing events for approved collection procedures, complete chain-of-custody records, and documented follow-up for positive, refusal, or other non-negative results.
- 5. Check supervisor reasonable suspicion training, employee education materials, record retention, and confidentiality controls before comparing source records to the MIS report.
- 6. Record each deficiency, assign a corrective action owner and due date, and capture inspector sign-off only after the evidence supports closure.
Best practices
- Use a current roster pulled from payroll, HR, and operations records so covered employees are not missed when they transfer or return from leave.
- Separate drug and alcohol random pools clearly and document the selection method so the audit can confirm the right employees were eligible for each test type.
- Photograph or attach the exact record set reviewed, such as policy revision pages, training rosters, and chain-of-custody forms, rather than relying on summary notes.
- Treat missing chain-of-custody fields, unsigned forms, and unexplained result delays as deficiencies until the vendor provides traceable support.
- Verify that supervisors who may make reasonable suspicion decisions have current training records and can explain the observable behaviors they are expected to document.
- Compare MIS source data to the underlying records line by line, especially for refusals, positives, cancellations, and late or incomplete submissions.
- Protect confidentiality by limiting access to testing records and storing them separately from general personnel files when your process allows it.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this audit template cover?
This template covers the core controls in a transit agency drug and alcohol testing program: written policy, covered employee rosters, random testing pools, collection and chain-of-custody records, supervisor training, records retention, and MIS reporting readiness. It is designed to show whether the program is operating as documented and whether the evidence supports annual certification. It also gives you a place to record deficiencies, corrective actions, and sign-off.
Who should use this audit template?
Use it when auditing a transit agency, contractor, or subrecipient that has employees covered by FTA drug and alcohol testing requirements. It is typically run by compliance, safety, HR, internal audit, or a designated program manager. A supervisor or program owner can also use it as a self-check before an external review.
How often should this audit be performed?
Most agencies use it on a recurring cadence that lines up with annual program review, MIS reporting, or internal compliance cycles. It is also useful after a policy revision, vendor change, roster reorganization, or a significant finding. If your agency has repeated errors in random pool management or reporting, a more frequent spot audit is usually warranted.
Does this template replace the FTA annual MIS report?
No. This template helps you verify the source records, controls, and readiness needed to support the MIS report and annual certification. It does not generate the report itself. The value is in catching mismatches, missing records, and process gaps before submission.
What regulatory standards does it align with?
The template is built around FTA drug and alcohol testing requirements under 49 CFR Part 655 and the related DOT testing framework used by transit agencies. It also supports common compliance expectations for record retention, confidentiality, supervisor readiness, and program governance. Where applicable, it can be paired with agency policies, labor agreements, and vendor procedures.
What are the most common mistakes this audit finds?
Common issues include outdated policy language, incomplete covered employee rosters, random pools that are not kept separate for drug and alcohol testing, missing chain-of-custody documentation, and training records that do not prove supervisors were qualified for reasonable suspicion determinations. Agencies also miss discrepancies between source records and MIS data. This template is structured to surface those gaps in a repeatable way.
Can this template be customized for contractors or multiple locations?
Yes. You can add site-specific sections for garages, rail yards, maintenance facilities, dispatch, or contractor oversight if those groups are part of the covered workforce. You can also tailor the roster fields, vendor names, and document references to match your agency’s workflow. The audit structure still works as long as the evidence is tied back to the covered employee population.
How does this compare with an ad hoc checklist?
An ad hoc checklist usually catches only obvious gaps, while this template forces a full walk-through of the program from policy to reporting. That matters because many compliance failures are not isolated events; they are recordkeeping or control failures that show up only when you compare rosters, test results, and reporting data. This template gives you a consistent audit trail and a cleaner corrective action log.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
Frontline workers see what systems miss. This roundup explores why treating internal communication as core—not overhead—prevents costly organizational failures.
-
See how customers use MangoApps Projects Module to collaborate, track progress, and share knowledge across teams.
-
See how connected 1:1 tracking, employee audit history, and LMS completion records turn scattered processes into verifiable workforce documentation.
-
MangoApps in Okta Integration Network automates user provisioning, SSO, and access management for stronger security and less admin work.
Ready to use this template?
Get started with MangoApps and use FTA Drug and Alcohol Testing Compliance Audit with your team — pricing built for small business.
