Some BEST practices would include:
- using internal audit role as a development mechanism for "high potentials"
- integrating the quality audit function with other audits (environmental, safety, IT, financial, ...)
- using a formal risk-based approach to planning, carrying out and reporting audits