Re: Audit Findings: writing against Internal Clause, ISO, both
For example, ISO 9001 requires that internal audits verify 4 different things:
- conformity to planned arrangements
- conformity to requirements of ISO 9001
- conformity to the quality management system requirements established by the organization
- that the QMS is effectively implemented and maintained
You do not need to audit everything every time (nor you should because they would be very distinctive audits), but you need to audit them all in a defined period.
Unfortunatelly, most of the time, people think that they are auditing everything, but if this is not clear on the audit objective, you should not do it (if you find something that you know is not correct but is not part of the specific audit objective, you may mention it, or may require another audit with that specific objective.