EKO Industrials · PRD-IND-002
Playbook d'Audit
A step-by-step guide that takes one person through one internal audit, from being handed the job to agreeing the findings.
Description
Someone has been told to audit something and has never run an audit. The method may even be agreed — and they still do not know what to do on Monday morning.
This playbook is the Monday morning. Seven ordered steps, each with an output that feeds the next: frame the scope, plan what will be tested, prepare the request, gather evidence, test, classify the findings, report.
The longest section is what to do when things go wrong, because that is the audit you will actually have. Ten situations: no written scope, the sponsor is also the auditee, no criterion exists, access is refused, the population is far larger than expected, something serious turns up outside scope, a finding is disputed — and what to do when you realise after issuing that you were wrong.
It assumes no audit qualification and confers none.
Pour qui
The practitioner performing the work, assumed competent in their own job and new to auditing. Not the manager designing the function — that reader wants PRD-IND-003.
Le problème traité
Audits are assigned to people with no method. The result is either an audit that never finishes or a list of complaints that nobody acts on, because the findings carry no cause, no severity and no owner.
Le résultat
An audit conducted against a written scope and a stated criterion, with findings that carry a cause, a severity, an owner and a date — and a working file that defends them a year later.
Ce qui est inclus
| Purpose and reader | Who it is for, stated as a role and an experience level |
|---|---|
| Five prerequisites | Each with what to do when it is missing |
| Seven-step sequence | Each step with its named output |
| Per-step guidance | Scope in one page · sampling decided before seeing the population · four evidence types ranked · interview wording · five-part findings |
| Ten failure situations | The section carrying most of the value |
| Six outputs | With where each is retained |
| Interfaces | What it connects to, and what it deliberately does not need |
Ce qui n’est pas inclus
| Not included | |
|---|---|
| Certification of any kind | EKO certifies nothing, and following this confers nothing |
| Any external audit standard | Standards are named, never reproduced. This is not a substitute for reading one that applies to you |
| A claim of regulatory outcome | Following it produces no compliance status |
| What an audit function must require | That is PRD-IND-003 |
| Templates or working papers | Described in prose. No template product is required and none is bundled |
| Any service, advice or review | None accompanies the file |
Format
One document. Seven required components, ten failure situations, six defined outputs.