We've recently added Information Systems to our schedule of Quality Systems Audits. If anyone has performed the like in the past or is planning to do so, I would be interested in your approach.

Thanks.

The only thing I have seen audited by registrars in IS has been version control of code. Most registrars never address the IS folks. As far as auditing in general, you would want to look at process audit - audit the departmental procedures.