Audit is a Four-letter Word
I also use the same methods as some of the others ... post all of the appropriate data on the company Intranet, and let the auditor pull whatever they require.
Looks like the subject of "audit" being a four-letter word has come up in this thread too. A common problem. I'm looking at resolving this issue by conducting what I term as a "continuous audit (or review)". No more twice a year or four times a year formal audit. Instead I would conduct reviews whenever I got the chance such as talking to an employee during the course of the normal business day, or using the data obtained from other meetings to count as an audit of the QMS. Keep a log of all issues rasied, problems encountered, suggestions made, etc.. Every 3-4 months use the log notes to create a formal audit report (cut-n-paste) and process this report as normal.
This way information is captured continuously instead of only every 6 months. Continuous improvement requires continuous data and information if the QMS is truely to be providing value to the company ... instead of keeping some registrar employeed.
I've posted the attached draft generic continuous audit plan on another thread, but I'll add it here just in case anybody is interested. I think this method adds real value to the QMS. Comments???