Audit Management
What is Audit Management?
The administration and coordination of audit activities including planning, scheduling, resource allocation, and tracking of findings and remediation.
Terms that appear alongside audit management
Each of these is named in at least one of the same controls as audit management. The number is how many controls name both.
- management review 7 shared controls
- internal audit 6 shared controls
- corrective action 4 shared controls
- policy 3 shared controls
- nonconformity 2 shared controls
- iso 19011 2 shared controls
- lessons learned 2 shared controls
- remediation 2 shared controls
Frameworks that govern audit management
What the standards actually require on audit management
Requirements naming audit management across 6 standards, quoted from the control text.
Restrict the ability to manage audit logging functionality to a limited subset of privileged users, separate from general administrators.
AU.L2-3.3.9 · Audit Management →Run a defined audit management process covering planning, risk analysis, control assessment, conclusions, remediation timetables, report production, and re-examination of earlier reports and their supporting evidence.
CCM-A&A-05 · Audit Management Process →Clause 9 addresses performance evaluation + monitoring + measurement + analysis + evaluation + internal audit + management review. Conceptual coverage: 9.1 Monitoring, measurement, analysis and evaluation (general + customer satisfaction + analysis);
IATF16949-Clause9-Performance-Monitoring-InternalAudit-ManagementReview · IATF 16949 Clause 9 - Performance Evaluation + Monitoring + Internal Audit + Manufacturing Process Audit + Management Review →Conduct internal audits per ISO 19011 covering all QMS processes annually. Hold management reviews at planned intervals (minimum annually) per ISO 9001 Section 9.3 with mandatory AQAP 2110 inputs (NATO contract performance + GQAR observations + nonconformity t...
AQAP2110-8 · Internal Audit, Management Review, Corrective Action, CofC, and Continual Improvement →Section 820.10 establishes the substantive QMS requirements by incorporating ISO 13485:2016 SECTIONS 4 THROUGH 8 in full. Manufacturers must implement: ISO 13485:2016 SECTION 4 General QMS requirements + documentation (Quality Manual + Medical Device File + co...
QMSR-820.10 · Requirements for a Quality Management System - ISO 13485:2016 Sections 4-8 incorporation (§820.10) →ISO 22000:2018 FSMS Clauses 4-10 implementation (substantive content per the underlying ISO 22000 standard - copyrighted; this control references the structure + the FSSC 22000 scheme requirement that ISO 22000 Cl. 4-10 be implemented).
FSSC-ISO22000-FSMS-Clauses4to10 · ISO 22000:2018 FSMS Clauses 4-10 Implementation (Leadership, Planning, Support, Operation, Evaluation, Improvement) →Questions people ask about audit management
What is Audit Management?
Why is Audit Management important for compliance?
Which compliance frameworks address Audit Management?
Where can I learn more about Audit Management?
See how Audit Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.