ORGANIZATIONAL RESILIENCE
160
Most of us have been involved in inspections, either as participants
or as the person conducting the inspection. You look for current plans
and documents at the security posts and note any problems (e.g., electrical
concerns, HVAC or water issues, faulty or nonworking equipment, etc.) as
you walk around inspecting the facility. This sort of activity takes a few
hours and does not take into consideration the complexity of a manage-
ment system. An internal management system audit is about evaluating
the effectiveness of the management system and the risk treatment mea-
sure to identify opportunities for improvement.
An audit, as stated above, is a carefully planned process of collect-
ing factual evidence leading to ...