Expert Advice Community

Guest

Audit meetings

  Quote
Guest
Guest user Created:   Oct 16, 2018 Last commented:   Oct 16, 2018

Audit meetings

When going through the ISO 27001 Auditor training I came across the following statement in the documentation:- complex topics like the opening and closing meetings during an audit have been left out of the training as they are not mandatory and not applicable to small & medium size businesses. My question is what size business does need these meetings is it over a certain number of employees or company turnover?"
0 0

Assign topic to the user

ISO 27001 INTERNAL AUDIT REPORT

Document the findings of an internal audit.

ISO 27001 INTERNAL AUDIT REPORT

Document the findings of an internal audit.

Expert
Rhand Leal Oct 16, 2018

Answer:

The need for opening and closing meetings on internal audits are more related to audit complexity than the number of employees (company turnover would not be a good criteria). Good criteria to decide for performing opening and closing meetings on internal audits are if the audit scope falls under the responsibility of more than one person (e.g., the audit scope involves two or more unrelated departments or process), or if there is a great number of people involved in the audit (e.g., there is an audit team, or the auditor will be working with multiple guides from the auditee).

This way the auditor will ensure alignment between all personnel involved in the audit and will save time not repeating the same information multiple times during the audit.

This article will provide you further explanation about internal audits:
- Qualifications for an ISO 27001 Internal Auditor https://advisera.com/27001academy/blog/2015/03/30/qualifications-for-an-iso-27001-internal-auditor/

By the way, the opening and closing meeting are explained in our Lead Auditor course.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Oct 16, 2018

Oct 16, 2018

Suggested Topics