Typical Audit Process

1. Prepare and publish the yearly audit calendar (in conslutation with project teams).
2. Publish quarterly audit schedule.
3. Issue audit notification to all relevant stakeholders and the final schedule (1 week prior to audits).
4. Review previous findings and check the project artifacts before the actual audit. Skim thru the VSS folders of each project looking out for discrepencies and note them down (Note down variations in naming conventions also).
5. Take printouts of audit checklist. (Always better to have a checklist for audit rather than a random non-focused check.)
6. Actual Audit

a. Check closure of previous NCs.
b. CM audit check (change requests, CI, )
c. Internal audit report check
d. Check against the organization process

1. Get the affirmation of auditees on the noted NCs.
2. Send the filled in checklist to auditees giving a scope to them to come back with their objections, if any.
3. Prepare audit report. Do a self review. Check for Process Area mappings.
4. Get the audit report peer reviewed.
5. Publish the audit report to project teams, delivery head, sponsor
6. Prepare and conduct follow up audits.
7. Conduct review with higher management once a month and report deviations in process.