Professional Documents
Culture Documents
Chapter 8A Performing Audit1
Chapter 8A Performing Audit1
1.1 The first stage of the audit activity involves establishing the initial contact with auditee
and determining the feasibility of the audit.
The audit team leader should ensure that contact is made with the auditee to:
a) Confirm communication channels with the auditee’s representatives;
b) Confirm the authority to conduct the audit;
c) Provide relevant information on the audit objectives, scope, criteria, methods and audit
team composition, including any technical experts;
d) Request access to relevant information for planning purposes, including information on
the risks and opportunities the organization has identified and how they are addressed;
e) Determine applicable statutory and regulatory requirements and other requirements
relevant to the activities, processes, products and services of the auditee;
f) Confirm the agreement with the auditee regarding the extent of the disclosure and the
treatment of confidential information;
g) Make arrangements for the audit, including the schedule;
h) Determine any location-specific arrangements for access, health and safety, security,
confidentiality or other issues;
i) Agree on the attendance of observers and the need for guides or interpreters for the
audit team;
j) Determine any areas of interest, concern or risks to the auditee in relation to the
specific audit;
k) Resolve issues regarding composition of the audit team with the auditee or audit client.
The feasibility of the audit should be determined to provide reasonable confidence that the
audit objectives can be achieved.
Third Party auditors cannot give advice on how to correct nonconformities. However, auditors
must write nonconformities very clearly. They can only say: “This is the finding, now it is up to
you to decide how you want to correct this.”
1. Trace forward: In this technique, customer order is selected from marketing and the
same is audited in all the stages of process till delivery of material. All records in
between the processes are verified for their compliance with the documented
requirements as well as management system requirements.
2. Trace backward: In this technique, the dispatch records are selected from delivery
area and audited in all the stages of process till the customer order. All records in
between the processes are verified for their compliance with the documented
requirements as well as management system requirements.
3. Random: In case of random audit, all the requirements followed in the particular
section are verified with respect to documented system and management system.
In any organization audit can be conducted in two ways or directions, first Vertical audit and
second Horizontal audit. You can also call them another two techniques of auditing. These
techniques can be used both for internal audit as well as external audit.
In Vertical Audit, one department of the organization is audited against all elements of
standard or procedure. Vertical audit is used to check the requirements of all clauses in one
department. For example: In production department all the elements or clauses related to
production, such as Order receipt, production planning, material planning, manufacturing,
testing, quality assurance etc. are checked. It means all the requirements applicable to this
department are verified in a systematic manner to verify closed loop of activities.
In Horizontal Audit, all departments are audited against one element of the standard or
procedure. For example, any specific element of Quality management System is selected and
its implementation is verified in all departments to ensure its implementation.
This is an illustration of the process approach for the bid/tender activity. It shows how the input
is received, how the output is derived and the details of process requirements.
The Image given below has the filled data, which can be utilized as a ready reference for audit.
This is a classic example of process approach. This is for marketing department having
identified activities as listed in 1, which require input to comply with the requirements from 3, 4,
5, 6, and 7 to deliver the output as mentioned in 2.
Hence, while auditing with process based approach, all such things are verified and then
output is verified before concluding it.
Management Representative
Sales & Engineering and
1. Top Management 4. 7.
Marketing utility services
Packing &
Quality 9. Despatch
3. Purchase 6. Control
Total NCRs
Design &
10.
Development