Jurassic Methods.

Position:Reader Forum - Letter to the editor

These are all great points in the theoretical world, but in reality it is very difficult to let an auditor simply look for risk and respond. The majority of people require some sort of template, checklist, etc. to work effectively. Unless you are willing to pay for an entire department full of CAE-caliber people, this simply is unrealistic.

Some of the items Chambers mentions as outdated seem to be specifically called for in I1A guidance or desired by management and directors. I would love to do away with this silly audit plan and simply audit based on risk assessments, but, again, it is impractical and hard to prove you have met specific guidelines...

To continue reading