I'm auditing a group who is not familiar with me - a different site than usual.
I have asked a process owner to show me how he controls his documentation, as this process group has decided to internally define and manage controls for their SOPs and policies. The response to my request to review his internal document control process, with examples, was a polite (paraphrased) "No thank you, we talked about enough already - you asked me all you are supposed to ask me yesterday; more, in fact."
Of course we must routinely audit control of internal documents, and I told him that, assuring him it was a normal part of almost every audit we do, and straightforward.
I'm rather amused, yet bemused at this outright refusal. Has anyone else experience with this? What did you do? He's highly placed in the organization.
I have asked a process owner to show me how he controls his documentation, as this process group has decided to internally define and manage controls for their SOPs and policies. The response to my request to review his internal document control process, with examples, was a polite (paraphrased) "No thank you, we talked about enough already - you asked me all you are supposed to ask me yesterday; more, in fact."
Of course we must routinely audit control of internal documents, and I told him that, assuring him it was a normal part of almost every audit we do, and straightforward.
I'm rather amused, yet bemused at this outright refusal. Has anyone else experience with this? What did you do? He's highly placed in the organization.