Question about the internal audit program requirements for transition prep. We audit all topics on a 1, 2, or 3, year interval based on a risk assessment approach. All audits have been done in the last three years. IMO opinion, most audit topics can be argued to have not be affected by the new standard.
Issue is, I had been under the impression, up until Oct 2017 (our transition/recert is scheduled to start 3/1) that I would update systems/procedures, processes to satisfy the new guideline, go through transition, then train internal auditors and start auditing to the new standard. Since I found out I was wrong, I prepared and performed training for all internal auditors and and can move forward with internal audits.
Question then is, with ~1month to go (I need time to perform the management review, and then audit the management review process?) Do I really need to perform every audit in our 3 year schedule, or can I focus on the topics that are truly affected by the updated standard (internal audit, training, risk-based thinking/corrective action, management review, etc...)
Thanks for your feedback.
Issue is, I had been under the impression, up until Oct 2017 (our transition/recert is scheduled to start 3/1) that I would update systems/procedures, processes to satisfy the new guideline, go through transition, then train internal auditors and start auditing to the new standard. Since I found out I was wrong, I prepared and performed training for all internal auditors and and can move forward with internal audits.
Question then is, with ~1month to go (I need time to perform the management review, and then audit the management review process?) Do I really need to perform every audit in our 3 year schedule, or can I focus on the topics that are truly affected by the updated standard (internal audit, training, risk-based thinking/corrective action, management review, etc...)
Thanks for your feedback.