Extent Of An Audit Program

The extent of an audit program can vary and will be influenced by the size, nature and complexity of the organization to be audited, as well as, by the following:

  1. The scope, objective and duration of each audit to be conducted
  2. The frequency of audits to be conducted
  3. The number, importance, similarity and locations of the activities to be audited
  4. Standards, statutory, regulatory and contractual requirements and other audit criteria
  5. Conclusions of previous audits or results of a previous audit program review
  6. Any language, cultural or social issues
  7. The concerns of interested parties
  8. Significant changes to an organization or its operations
Audit program objectives

Objectives should be established for an audit program to direct the planning and conduct of audits. These objectives should be based on consideration of:

  1. Management priorities
  2.  Commercial intentions
  3. Management system requirements
  4. Statutory, regulatory and contractual requirements
  5. Need for supplier evaluations
  6. Customer requirements
  7. Needs of other interested parties
  8. And risks to the organization
ISO 9001 Audit Program Responsibilities

The responsibilities for managing an audit program should be assigned to one or more individuals with a general understanding of audit principles, of the competence of auditors and the application of audit techniques. They should have management skills, as well as, technical and business understanding relevant to the activities to be audited. Those assigned responsibility for managing the audit program should:

  1. Establish the objectives and extent of the audit program
  2. Establish the responsibilities and procedures, and ensure that resources are provided
  3. Ensure the implementation of the audit program
  4. Ensure the appropriate audit program records are maintained
  5. Monitor, review and improve the audit program
Audit Program Procedures

Audit program procedures should address:

  1. Planning and scheduling audits
  2. Assuring the competence of auditors and audit team leaders
  3. Selecting appropriate audit teams and assigning their roles and responsibilities
  4. Conducting audits
  5. Conducting audit follow-ups, if necessary
  6. Maintaining audit program records
  7. Monitoring the performance and effectiveness of the audit program
  8. Reporting to top management on the overall achievements of the audit program

For smaller organizations, Eurocert addresses activities above in a single procedure.

Audit Program Implementation

Implementation of the Audit Program address mainly cover following:

  1. Communicating the audit program to relevant parties (Client)
  2. Coordinating and scheduling audits and other activities to the audit program
  3. Establishing and maintaining a process for the evaluation of auditors and their continual professional development
  4. Ensuring the selection of audit teams
  5. Providing necessary resources to the audit teams
  6. Ensuring the conduct of audits according to the audit program
  7. Ensuring the control of records of the audit activities
  8. Ensuring review and approval of the audit records and their distribution to the audit client and other specified parties
  9. Ensuring follow-up if applicable
Eurocert Audit Program