An I-9 audit done wrong creates new violations on top of the ones you inherited. This guide walks through the audit methodology that ICE recognizes — inventory match first, substantive errors second, corrections with proper annotation third — without producing the kind of paper trail that makes things worse if an inspector arrives.

This is the execution companion to our pillar Drowning in Admin. The pillar explains why I-9 cleanup is red-tier exposure. This piece shows you how to actually do it.

Before You Start

Three preparation items are non-negotiable before you touch a single form.

First, decide who is the authorized representative making the corrections. ICE requires that the person making a correction sign and date it. If multiple people make corrections, the audit trail becomes harder to defend. Pick one HR authority and route everything through them.

Second, pull the active employee roster from payroll, not the HRIS. Payroll is the source of truth for “currently employed.” A discrepancy between payroll and your I-9 file is itself a finding.

Third, brief your CEO and your employment attorney before you start. If your audit uncovers a pattern of missing or substantively defective forms, you want legal counsel in the loop from day one — not after you have made fifty corrections.

Step 1: Build the Inventory Match

For every active employee on the payroll roster, locate the corresponding I-9 in your physical or digital file. Three outcomes are possible: I-9 found and matches, I-9 found but does not match the employee record, I-9 missing entirely.

Missing I-9s for active employees are your top priority. ICE penalties for missing forms start at $281 per violation and climb past $2,789 for substantive violations on the most recent schedule. The fix for a missing I-9 is to complete one now using the current date in Section 2, with a clear annotation that the form was completed during a self-audit. Do not back-date.

Step 2: Run the Substantive Error Sweep

For each I-9 in the inventory, check the following items in order. Each item is a yes/no question.

Section 1 — Is the employee signature present? Is the date in Section 1 on or before the start date? Is the citizenship status box checked exactly once? Is the form the current version USCIS has issued?

Section 2 — Is the employer signature present? Is the employer signature date within three business days of the start date? Are List A documents recorded correctly, or are List B and List C documents recorded as a pair? Are document numbers and expiration dates recorded accurately?

Section 3 — For any rehires or work authorization re-verifications, is Section 3 completed with the correct date and document information?

Step 3: Categorize Errors as Substantive or Technical

ICE distinguishes between substantive violations (which cannot be remediated and carry full penalty exposure) and technical violations (which can be remediated within ten business days of an inspection notice without penalty if corrected). Knowing the difference shapes your urgency.

Substantive errors include missing forms, missing employee signature, missing employer signature, employer signature outside the three-day window, and documents that fail to establish identity or work authorization. Technical errors include transcription mistakes, missing middle initials, and most other clerical issues.

Step 4: Make Corrections with Proper Annotation

For each error you fix, follow the ICE-recognized correction protocol. Draw a single line through incorrect information so it remains legible. Write the correct information above or beside it. Initial and date the correction. Add a brief annotation in the margin or attached memo explaining what was corrected and why.

Never erase, white out, or replace pages of an existing I-9. Do not back-date corrections. Do not create a new form to replace an old one — corrections happen on the original.

Step 5: Document the Audit Itself

Produce a written audit memo that describes the scope (which population was audited), the methodology (what you checked), the findings (counts of each error type), the corrections made, and the residual risk accepted. This document is what protects the company if ICE arrives. The memo demonstrates good-faith compliance effort, which is a factor in penalty mitigation.

Step 6: Lock the Forward Process Before Touching the Past

Before you spend a week fixing historical errors, make sure no new ones are being created. Configure your HRIS or I-9 platform to enforce Section 2 completion within three business days, with manager escalation if missed. Train hiring managers on the rules. Put a single-page reference card by every workstation that completes I-9s.

This is the principle from the pillar — stop the bleeding first. A clean I-9 process forward is more important than a perfectly cleaned-up history.

How to Know It Worked

The audit worked if: every active employee has a matching, signed, correctly completed I-9 on file; every correction is annotated with the date and initials of the person who made it; the audit memo is signed, dated, and filed; and the forward process now produces clean I-9s without intervention.

Run a follow-up spot-check 90 days later on twenty randomly selected new hires. If all twenty are clean, the forward process is holding. If any are not, the gating logic in your onboarding workflow needs another pass.

Common Mistakes

Back-dating corrections to make the file “look right.” This is fraud. Do not do it.

Replacing original forms with corrected versions. The original is the legal record. Corrections happen on it, not in place of it.

Auditing without legal counsel in the loop when patterns of missing forms exist. If you find missing forms for ten or more employees, stop the audit and call your attorney before continuing.

Spending a month on historical cleanup while new errors are still being created in your onboarding workflow. Lock the forward process first.

Treating I-9 audit findings as a personnel issue against previous HR staff. The audit produces compliance documentation, not a disciplinary record.

Next Steps

If your audit produces more than a handful of missing forms or substantive errors, escalate to your attorney before continuing. For the broader triage framework that explains where I-9 cleanup fits in your ninety-day plan, return to the pillar. For tooling that prevents recurrence, see our tools list.