Taken from http://www.ifsqn.com...dit-format-etc/
I am thinking of a risk-based auditing. It seems that this is complicated but...Does anyone have an idea on how to turn audit criteria into a risk management score? (for example, conformity - strong, medium, weak categories and sample calculation of score for risk management)
You will still need to put together a schedule which can demonstrate that the frequency of internal audits is risk based.
I am thinking of a risk-based auditing. It seems that this is complicated but...Does anyone have an idea on how to turn audit criteria into a risk management score? (for example, conformity - strong, medium, weak categories and sample calculation of score for risk management)








