Auditing

by

class="csAFEB8F0D"> 

3. System audit – An audit conducted on a management system. It can be described as a documented activity performed to verify, by examination and evaluation of objective evidence, that applicable elements of the system are appropriate and effective and have been developed, documented, and implemented in accordance and in conjunction with specified requirements.
   • A quality management system audit evaluates an existing quality program to determine its conformance to company policies, contract commitments, and regulatory requirements.
   • Similarly, an environmental system audit examines an environmental management system, a food safety system audit examines a food safety management system, and safety system audits examine the safety management system.

Internal & external audits: – first, second and third party audits

• A first-party audit is performed within an organization to measure its strengths and weaknesses against its own procedures or methods and/or against external standards adopted by (voluntary) or imposed on (mandatory) the organization. A first-party audit is an internal audit conducted by auditors who are employed by the organization being audited but who have no vested interest in the audit results of the area being audited.
• A second-party audit is an external audit performed on a supplier by a customer or by a contracted organization on behalf of a customer. A contract is in place, and the goods or services are being, or will be, delivered. Second-party audits are subject to the rules of contract law, as they are providing contractual direction from the customer to the supplier. Second-party audits tend to be more formal than first-party audits because audit results could influence the customer’s purchasing decisions.
• A third-party audit is performed by an audit organization independent of the customer-supplier relationship and is free of any conflict of interest. Independence of the audit organization is a key component of a third-party audit. Third-party audits may result in certification, registration, recognition, an award, license approval, a citation, a fine, or a penalty issued by the third-party organization or an interested party.

 

Phases of an audit

 

1. Audit preparation – Audit preparation consists of everything that is done in advance by interested parties, such as the auditor, the lead auditor, the client, and the audit program manager, to ensure that the audit complies with the client’s objective. The preparation stage of an audit begins with the decision to conduct the audit. Preparation ends when the audit itself begins.
2. Audit performance – The performance phase of an audit is often called the fieldwork. It is the data-gathering portion of the audit and covers the time period from arrival at the audit location up to the exit meeting. It consists of activities including on-site audit management, meeting with the auditee, understanding the process and system controls and verifying that these controls work, communicating among team members, and communicating with the auditee.
3. Audit reporting – The purpose of the audit report is to communicate the results of the investigation. The report should provide correct and clear data that will be effective as a management aid in addressing important organizational issues. The audit process may end when the report is issued by the lead auditor or after follow-up actions are completed.
4. Audit follow-up and closure – According to ISO 19011, clause 6.6, “The audit is completed when all the planned audit activities have been carried out, or otherwise agreed with the audit client.” Clause 6.7 of ISO 19011 continues by stating that verification of follow-up actions may be part of a subsequent audit.