Hi all.
I work with a small organisation that uses a qualified external auditor to audit our BRCGS systems on a quarterly basis. At each audit, I sign off the audit schedule beside the auditor's signature to indicate that all sections have been covered adequately. However, this year, we received the following NC against 3.4.2:
3.4.2 Internal audits: The external contractor audits all parts of the BRC standard, including the internal audit section -hence, auditing own work.
I reviewed the interpretation notes of the Standard, and stated that I believed that 3.4.2 wasn't asking for the auditor's work to be itself audited, but that internal audits should be conducted by a suitably qualified independent auditor, but got nowhere with this.
Members' views would be appreciated on this - as would any recommendations as to what a satisfactory corrective might be for this?
Many thanks.