Conducting the Audit: Techniques and Best Practices
An operator tells you a check happens every hour. A record sheet shows entries every hour, in the same pen, with identical values. Watching the next hour pass without a check tells you more than either source alone. Conducting an audit well means triangulating interviews, observation, and records until a consistent picture forms, and knowing what to do when sources disagree.
Techniques in this area follow ISO 19011 guidance: audit methods depend on objectives, scope, and risk, and evidence should be verifiable. Your conduct matters as much as your method. Auditees who trust your fairness will show you how work really happens. Auditees who expect ambush or blame will perform for you, and performed compliance is the hardest kind to audit.
Opening the audit and setting the tone
Begin with the opening meeting, kept brief and practical. Confirm scope, criteria, timetable, guides, and how findings and the closing meeting will work. Introduce auditors and roles. State plainly that the audit samples evidence and focuses on the system, not on catching individuals. Then start on time and follow the plan, adjusting openly when evidence justifies a change in direction.
On the floor, explain what you are doing as you go. Ask permission before photographing anything, follow site safety and hygiene rules without exception, and avoid disrupting production or giving instructions to operators. If you see an immediate food safety risk, such as product exposed to a serious contamination source, escalate at once through the agreed route rather than saving it for the report. Auditing discipline never justifies standing by while unsafe product proceeds.
Gathering evidence three ways
Interviews that reveal real practice
Ask open questions and let people answer in their own words: “Show me how you check this”, “What happens when a result is out of limit?”, “When did that last happen, and what did you do?” Follow demonstrations rather than descriptions where you can. Interview the person who does the task, not only their supervisor, and allow enough silence for a real answer. Note who said what, and treat interview claims as leads to verify, not as evidence on their own.
Observation that catches what records hide
Observe the process at the point work happens: probe placement, handwashing in practice, segregation of allergenic ingredients, condition of seals and screens, actual storage temperatures against displayed ones. Watch a full cycle of a task rather than a snapshot, and include changeovers and breaks, where controls often lapse. Compare what you see with the procedure step by step; gaps between written and real method are findings in the making.
Records reviewed as trails, not piles
Review records by following trails. Select a batch and pull every linked record: goods-in, storage, production, CCP monitoring, deviations, packaging, dispatch. Check completeness, timing, signatures, corrections made in a traceable way, calibration status of instruments used, and consistency between related documents. Patterns matter more than single slips: entries in identical handwriting across shifts, results always exactly on the limit, or checks recorded during known downtime all question record reliability itself.
Evaluating findings and communicating as you go
Compare evidence with criteria continuously, not in a rush at the end. For each potential nonconformity, confirm the requirement, pin down objective evidence, and check for further examples to judge whether an issue is isolated or systemic. One missing signature is an isolated lapse; missing review signatures across three months of CCP records point to a verification failure.
Keep the auditee informed during the audit. Share emerging findings with your guide as they are confirmed, so nothing in the closing meeting comes as a surprise and factual errors can be corrected while evidence is still at hand. Stay factual and calm when findings are contested. Re-state the criterion and the evidence, listen for new evidence, and adjust if it changes the picture. If disagreement remains, record both positions and let the report carry the evidence.
Closing, reporting, and following up
At the closing meeting, thank participants, restate scope and sampling limits, present findings in order of significance, and clarify corrective action expectations and timescales. Distinguish clearly between nonconformities and any observations or improvement opportunities your system allows you to raise, so auditees do not treat suggestions as requirements.
Write the report promptly, while evidence is fresh. Each finding needs the requirement, the evidence, location, and enough detail for corrective action and later verification. Follow-up then checks that actions were implemented and effective: reviewing a revised procedure alone is weaker than observing the changed practice and sampling new records. Close findings only on evidence, and escalate overdue or ineffective actions through management review.
Note-taking that makes or breaks the report
Reports are written from notes, and weak notes produce weak findings that auditees can rightly dispute. Record evidence at the moment you gather it: document titles and versions, record dates and batch references, names and roles of people interviewed, times, locations, and the exact values or statements that matter. Separate what you observed from what you were told, and mark questions still open so they are resolved before the closing meeting, not discovered while writing up.
Legible, contemporaneous notes also protect you. Weeks later, during follow-up or an external audit, you may be asked how a conclusion was reached. A clear evidence trail answers that question calmly and shows professional care, which is one of the auditing principles ISO 19011 expects in practice, not only in a policy statement.
Key points
- Triangulate interviews, observation, and records; treat disagreements between sources as a signal to dig deeper.
- Use open questions and demonstrations, and interview the people who actually do the task.
- Follow batch trails through linked records and watch for patterns that question reliability.
- Escalate immediate food safety risks at once; never save them for the report.
- Confirm findings as you go, classify isolated lapses differently from systemic failures, and avoid surprises at closing.
- Verify follow-up with evidence of changed practice, not paperwork alone.