Good Audit/ Good Audit Practice NAS Network

Scope of audit body responsibilities may vary e.g. Findings only Findings and recommendations Findings, recommendations and follow-up Not advocating a particular arrangement Contribute to discussion on basis of your personal experience

Findings Positive, negative, or both Compliance Non-compliance Effectiveness Good practice How are these reported/recorded?

Recommendations Do audit reports specifically make recommendations Do recommendations address only non-compliance Do they address effectiveness/opportunities for improvement Do they address good practice Are recommendations implied from findings i.e. is it understood that the auditee should take action in respect of negative findings

Follow-up Who is responsible? Division of responsibility between auditor and auditee Auditees action plan Verification of implementation of follow-up action What if auditee does not follow-up

Good Audit - your experience as auditor Why did you consider it a good /successful audit Feedback from auditee Response of auditee to findings recommendations Why was the audit successful? Planning and preparation Conduct of audit Follow-up Attitude of auditee Hierarchical support

Good Audit - your experience as auditee Why did you consider it a good /successful audit Good audit evidence Good analysis of evidence and findings Constructive and realistic recommendations Conduct of audit Was auditor well prepared, open minded, listened to auditee, thorough in investigation….. What did you gain from audit

What are features of a good audit Consider your responses to previous slides Take into accounts points raised in advance by participants Recommendations and follow-up On site verification at FBO level. Recording/noting good practice in audit reports