ISO Auditing

---

As defined in ISO 19011:2011—Guidelines for auditing management systems, an audit is a “systematic, independent and documented process for obtaining audit evidence [records, statements of fact or other information which are relevant and verifiable] and evaluating it objectively to determine the extent to which the audit criteria [set of policies, procedures or requirements] are fulfilled.”

Auditing types

Product audit – An examination of a particular product or service (hardware, processed material, software) to evaluate whether it conforms to requirements (that is, specifications, performance standards, and customer requirements).

Process audit – A verification that processes are working within established limits. It evaluates an operation or method against predetermined instructions or standards to measure conformance to these standards and the effectiveness of the instructions.

System audit – An audit conducted on a management system. It can be described as a documented activity performed to verify, by examination and evaluation of objective evidence, that applicable elements of the system are appropriate and effective and have been developed, documented, and implemented in accordance and in conjunction with specified requirements.

A quality management system audit evaluates an existing quality program to determine its conformance to company policies, contract commitments, and regulatory requirements.

Similarly, an Information Security Management System examines an information security system, an Information Technologies Service Management examines a IT Service management system.

Internal & external Audits

First party audit : A first-party audit is an internal audit conducted by auditors who are employed by the organization being audited but who have no vested interest in the audit results of the area being audited.

Second party audit : An external audit performed on a supplier by a customer or by a contracted organization on behalf of a customer. A contract is in place, and the goods or services are being, or will be, delivered. Second-party audits are subject to the rules of contract law, as they are providing contractual direction from the customer to the supplier. Second-party audits tend to be more formal than first-party audits because audit results could influence the customer’s purchasing decisions.

Third party audit : It is performed by an audit organization independent of the customer-supplier relationship and is free of any conflict of interest. Independence of the audit organization is a key component of a third-party audit. Third-party audits may result in certification, registration, recognition, an award, license approval, a citation, a fine, or a penalty issued by the third-party organization or an interested party.

Our support

Our auditor empaneled on various accreditation board and certification bodies for ISO standards. We support in audit preparation, consulting, internal audit for ISO 9001, ISO 27001, ISO 20000-1 and ISO 22301.