Thanks, but I would not go that far. The stated purpose for internal audits (cl. 8.2.2.a) clearly discusses conformity. That has to be part of the internal audit objective. But, (cl 8.2.2.b) seems to move toward allowing for improvement, as does much of the related writings and supporting documents. I don't ever want to take compliance away from the audits. That would give it a whole different tone.
Indulge me for a moment while I fantasize. Let's say that I'm the CEO of a medium-sized company. I just got through listening to
Mike Micklewright, and I'm breathlessly inspired to Do the Right Things. I make sure that processes are carefully designed and proven before being set loose on unsuspecting customers; I preach the Gospel of
Continualous Improvement and make everyone sure that I'm serious about it; I encourage and take seriously
all suggestions for improvement and I am kind to children and small animals.
I initiate an internal audit process with the express purpose of
confirmation of process efficacy. Everyone in the company is charged with continualously improving things--I just need the internal auditors to confirm that everything is working as planned. If, in the course of their audits, they find opportunities, so much the better--after all, they're supposed to be doing that even when they
aren't auditing. If that's the case, why do I need to make OFIs a
purpose of the audit (let alone the
primary purpose)?
Getting back to reality, if the spirit of continuous improvement has really been established, it's
absurd and superfluous to ask internal auditors to look for improvement opportunities. It would be like telling them to make sure their hearts keep beating.