Richdewtan
Starting to get Involved
I have always taken the approach of "Go deeper than what the 3rd party auditor may or may not do." when I perform an internal audit. It has worked and never left me hanging. But what if it creates more work than the organization is ready for. How do I satisfy and ensure we are not only meeting the standard but the intent of the standard as well, without overloading those impacted by the findings?
My initial thought is to identify the critical areas and focus on those for reporting and corrective actions and continuous improvement. Still look into the other areas that fall under the requirements and deal with them informally on the side as it were. Even that seems to go against how it should be done.
Nevertheless, I must find a balance. How?
My initial thought is to identify the critical areas and focus on those for reporting and corrective actions and continuous improvement. Still look into the other areas that fall under the requirements and deal with them informally on the side as it were. Even that seems to go against how it should be done.
Nevertheless, I must find a balance. How?