T
Andy,
That is because like any other part in QMS, internal audit is a process (or like a machine itself) and has its own structure. If we consider ISO 19011 compliance, there will be even more to think about. The job of internal audit of the IA process is to ensure that the machine works properly. In addition to what new/changed/not working, we need to do maintenance to ensure the old/unchanged/working is still working at the time of the audit and document the evidence to prove it. However, I do agree with you
that the focus of an audit should be the new/changed/not working. Given the general average time spent and the quality of auditors in the real world, an audit would likely be sloppy if it were asked to audit the whole thing and also dig deep in every aspect.
Summary: We should audit the IA process in the same way we do with other processes in the QMS because all processes are "equal" abstractly. At least, we have to have documentation to prove that the process is working.
That is because like any other part in QMS, internal audit is a process (or like a machine itself) and has its own structure. If we consider ISO 19011 compliance, there will be even more to think about. The job of internal audit of the IA process is to ensure that the machine works properly. In addition to what new/changed/not working, we need to do maintenance to ensure the old/unchanged/working is still working at the time of the audit and document the evidence to prove it. However, I do agree with you
Summary: We should audit the IA process in the same way we do with other processes in the QMS because all processes are "equal" abstractly. At least, we have to have documentation to prove that the process is working.