13.13 Audit

The organisation shall plan audits proportionate to risk and intended claims of conformity.

Audit shall use defined criteria, retain evidence and be performed by a person with sufficient independence from the work audited.

Audit results shall identify conformities, nonconformities, observations and improvement opportunities and shall be reported to the responsible authority.