What does a management system audit actually sample?

A management system audit samples real work. It does not grade the thickness of a manual. The auditor follows a few jobs from the request to the result, and checks whether the people who do the work describe the same job.

What does a useful sample follow?

A useful sample is one customer job, or one piece of work that stands for the system. The auditor asks how the requirement was understood, how the company checked it could deliver, and what happened when something changed. Then they look at the result: was the work checked, was the customer told the truth about a delay, and did a problem change anything the next time?

That trail crosses sales, planning, operations, and whoever handles problems. If those groups describe four different versions of the same job, the finding is about the system, not about one person's memory.

When do documents count as evidence?

Procedures matter when they are the way the work is controlled. A procedure that nobody uses is a finding. A short instruction that people actually follow is not a weak system. Auditors ask to see records because records show that the control happened on a real date, for a real job.

Internal audits and management review are part of the sample too. They are how the company notices its own gaps between certification visits. A review that only restates targets, with no decision, is easy to see.

What does a finding you can close look like?

A Stage 2 finding should be specific enough to close. "The process is not effective" is not enough to act on. "These three accepted orders have no record of the change the customer asked for" is. Closing it means correcting those orders and making the next change visible. Writing a new policy that repeats a requirement does not, by itself, close it.

The sample still sits inside the same pipeline as every other IAF Consultancy audit: application, offer, Stage 1, Stage 2, then a certificate from an accredited certification body. The surveillance visits later ask whether the sampled processes are still used. The path is set out in how certification works. To begin, submit an application.