Risk-based auditing techniques and scoring systems

Taken from http://www.ifsqn.com...dit-format-etc/

You will still need to put together a schedule which can demonstrate that the frequency of internal audits is risk based.

I am thinking of a risk-based auditing. It seems that this is complicated but...Does anyone have an idea on how to turn audit criteria into a risk management score? (for example, conformity - strong, medium, weak categories and sample calculation of score for risk management)

Dear MOM,

It rather depends what you mean by risk-based audit, eg audit for what ?.

Many food production audit schemes are safety prioritised for which there are a number of referenced examples in various threads on this forum based initially on a range of parameters like type of product, size of factory, output capacity and subsequently on results, eg point scoring schemes or by scoring defects as critical, major etc and applying (again empirical) combination decision tables to get an overall score. Similar idea I think as used nationally for assessing restaurants in UK. Scores on Doors ? The method of point scoring is usually empirical IMO which is one argument in favour of defect approach.

Theoretical optimum sampling frequencies for general audits hv also been proposed, eg here is 1st page from one such –

JSTOR_ Management Science, ...pdf   104.29KB   173 downloads
(already posted in a thread here somewhere)

Rgds / Charles.C

Dear MOM,

It rather depends what you mean by risk-based audit, eg audit for what ?.

Fav Charles C,
I am referring to internal audit. By risk-based audit, I mean it could be based on status, importance and past performance.

Thanks for the link. I will look at it.