FAQ 53d

The question is related to requirement 8.6.4 where it establishes that “internal audits must be carried out at least once every 12 months” It also defines that the frequency can be adjusted based on the proven effectiveness of the management system and its stability proven”.

What is the justification or criterion for defining an audit frequency as a rule, if it is understood that this activity is control by management to review and evaluate the status of the management system and therefore it would be at their discretion define the frequency taking into account the criteria defined in numeral 8.6.2 and the ILAC P15 guidelines numeral 8.6.4 n1?

STANDARD: ISO/IEC 17020  ·  CLAUSE: 8.6.4  ·  TOPIC: Internal Audits

Answer:

Yes, the management of the Inspection Body is ultimately the one to set the frequency. However, if the Accreditation Body does not feel the extended durations are appropriate (e.g. an audit every 5 years), or that the management system is not stable (high turnover or major NCs cited during assessments), they have the responsibility to address that with the IB. If for some reason the two sides cannot not come to a reasonable agreement, the Accreditation Body has the right to terminate the accreditation.   Refer to ILAC P15, clauses 8.6.4 n1/n2 for guidelines on when it would be prudent to decrease the frequency of internal audits, or when it may be permissible to extend the durations past 12 months.