MCT Beginning

1. The audit procedure contains, at minimum, instructions on how to:

• Plan the audits
• Conduct the audits
• Ensure auditor competence
• Assign the responsibility for managing the audit programme to a qualified person

2. The extent of the audit program, among other things, depends on:

• Process complexity
• Risks identified
• Follow-up of previous audits
• Commercial policy
• Essential characteristics of products

3. The implementation of the audit program requires:

• Its approval by top management
• Its communication to the concerned parties
• Audit plans to be followed
• Audit follow-up

4. Improving the audit program takes into account the:

• Rate of implementation of the audit plan
• Percentage of trained persons as internal auditors
• Trends of audits
• Proper application of procedures

5. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences