Yeah, that's the other card in my sleeve. I was trained as a shadow auditor in my very first job in the early 90s and I agree, that is a fundamental part of auditor training, which I planned to do with our new to be auditors but I thought to do it after they take some theory training from some one else, so they are just not stuck just hearing one perspective but more than one.. for thoroughness.. Plus this of being the trainer is a new hat I'll be wearing and it's not that comfortable yet.
Be aware that a lot has changed since the early 90s. I would agree that the basics of how to audit may not have changed much, but some early misconceptions may need to be overcome.
Back then, there was an over emphasis on documentation. The attititude back then seemed to be that you had to be able to show either a document or a record for every "shall" in the standard. That never was in the standard but that is how a lot of auditors were trained and much of that "old school" thinking continues today.
Back then the the CB auditors used an element based checklist. Today they audit using the process approach. The standard does not prohibit using an element based checklist, but it is discouraged. You are better off setting up your audit program using the process approach, much like the CB auditors use.
Auditors need to audit your practice. When there are not any documents or records required for that topic, and your company has not added any, then the auditor needs to determine your practice by interview and observation.
There is also a greater emphasis on element 8.2.3, monitoring and measurement of your processes, and along with it the need to have a good set of metrics that show how effective those processes are and how well they work together. This may be the heart of the process approach.
This current approach is much more company friendly, and actually helps the company to have a more effective system overall.
A good internal audit training program should not only focus on how to audit, it should also focus on the requirements of the standard. The better you know the standard and the better you can see how you have applied it to your business, the better the auditor you will be.
Best wishes on your efforts, and keep coming to the Cove when you have questions.
