Not to get into a pissing match, but I have *several* clients whose internal audit schedule is nothing more than penciled in dates on a standard, every day calendar on a wall in an office (granted these are relatively small [<200 souls] companies). It is controlled - it is in the office of the person controlling it. No other employee is expected to come into the office and change dates (why, prey tell, would they short of the intent of sabatoge which we all know one can only go so far to prevent). On the other hand, they outsource internal audits so there's not typically any changes in the schedule.
I think this is a case where folks are over reaching in defining document control. Control alone is not so complex as it seems some folks think. If I have a document on my computer and I back it up and if I change it I let everyone know about changes who should know about changes, it is controlled. I know many companies where some process documents are controlled locally by the engineer responsible for the line.
All you have to do is be smart and make sure your level 2 acknowledges local control.
Don't over complicate this issue, folks. Let's look at the intent. The intent is to ensure audits are scheduled. If some audits are rescheduled, that is not an issue. Big deal, that's business and that's life. The issue is whether you get them done or not, and if not that you do a corrective action.