AUDIT GUIDE 09: Conducting the Audit: Methods, Evidence Collection, and Audit Sampling Explained

Introduction

Conducting an audit is a systematic process of collecting, verifying, and evaluating information to determine conformity with audit objectives and criteria. A structured audit approach ensures objectivity, consistency, and reliable audit conclusions. Check out our blog on Conducting On-Site Audit  Execution 

Systematic Approach to Audit Preparation and Information Collection

A well-prepared audit will, under most circumstances, run smoothly. With increasing experience, the auditor will develop their own method of performing the audit within the established framework. This framework, defined in company procedures, ensures that the auditing organization experiences the audit in a consistent manner, regardless of how the audit team conducts the audit. Visit our blog to know about Audit Findings and Meeting process.

An experienced auditor develops a systematic way of working, enabling the successful application of all necessary methods to achieve audit objectives. A systematic approach also demonstrates to the auditee that the audit results have been obtained objectively and are useful and acceptable. Since a systematically conducted audit almost guarantees success, significant emphasis is placed on preparation and on collecting and verifying information.

Collecting, Verifying, and Evaluating Audit Evidence

Overview of the Audit Process

Overview of the Audit Process

The sources of information may vary according to the scope and complexity of the audit and may include:

  • Interviews
  • Observations of activities and work environments
  • Documents (policies, objectives, procedures, licenses, permits, contracts, etc.)
  • Records (inspection records, meeting minutes, audit reports, complaints, monitoring results)
  • Data summaries, analyses, matrices, and performance indicators
  • External reports, customer feedback, supplier ratings
  • Databases and websites

Applying Audit Methods

Do’s and Don’ts During the Audit

Do
  • Ensure audit scope is clearly defined and agreed upon
  • Ensure documentation status matches what was submitted
  • Keep minutes
  • Be flexible
  • Obtain authorization before taking photographs or videos
  • Obtain permission before copying documents
  • Avoid collecting personal information unless required
Do Not
  • Mention names
  • Discuss financial issues
  • Discuss contracts
  • Discuss other suppliers

Methods for Collection of Audit Evidence

Audit methods vary based on:

Extent of Interaction
  • Human interaction
  • No human interaction
Location
On-site
  • Interviews
  • Checklist completion with auditee participation
  • Document review with auditee participation
  • Observation of work
  • Sampling
Remote
  • Interviews via interactive communication
  • Remote document review
  • Data analysis
  • Surveillance-based observation (subject to legal and social requirements)

On-site audits occur at the auditee’s location, while remote audits occur elsewhere. Interactive activities involve personnel interaction; non-interactive activities do not.

Interviewing Personnel

Interviews assess personnel knowledge, understanding of documented requirements, and effectiveness of system implementation. They also reveal attitudes and operational effectiveness.

Interviewing Techniques
  • Interview appropriate personnel within audit scope
  • Conduct interviews during normal working hours and workplaces
  • Put interviewees at ease
  • Explain the purpose and note-taking
  • Begin with open-ended questions
  • Avoid leading questions
  • Thank interviewees
Questioning Guidelines
  • Use a gradual approach
  • Ask one question at a time
  • Use closed questions only for confirmation
  • Avoid challenging respondents
  • Remain flexible
  • Listen carefully and restate answers if needed
  • Request records for verification
  • Summarize results and allow corrections
  • Record results immediately

Verifying Information

Document Review
  • Verbal information must be verified using objective evidence. Deviations must be discussed, clarified, and evaluated.
Observation
  • Observing processes provides insight into system effectiveness.
Recording Data
  • Information that cannot be immediately verified should be recorded for later confirmation.
Objective Evidence
  • Objective evidence is information that can be verified through observation, measurement, testing, or records. When evidence may change later, copies or signatures should be obtained to preserve accuracy.

Audit Sampling

Auditing is a sampling-based process. The goal is to gain sufficient confidence that audit objectives are achieved.

Audit Sampling Steps
  • Establish sampling objectives
  • Define population
  • Select sampling method
  • Determine sample size
  • Conduct sampling
  • Evaluate and document results

Auditors cannot guarantee detection of all deficiencies. Adequate sample size and auditor experience reduce risk, and sampling limitations should be communicated to the client.

Sampling Techniques

Ensure samples:

  • Are relevant to audit objectives and scope
  • Are representative
  • Include more than one sample
  • Include recent data
  • Link to audit trails
  • Are not selected by the auditee
Judgment-Based Sampling

Relies on auditor experience and considers:

  • Previous audit results
  • Requirement complexity
  • Process interaction
  • System changes
  • Identified risks and improvements

A limitation is the lack of statistical certainty.

Statistical Sampling

Based on audit objectives and population characteristics. Key factors include:

  • Organisation size
  • Auditor availability
  • Audit frequency
  • Audit duration
  • Required confidence levels

Statistical sampling must be documented, including population description, criteria, parameters, sample size, and results.

Conclusion

Conducting an audit requires systematic information collection, objective verification, effective sampling, and clear communication. When performed correctly, audits deliver reliable findings that support compliance and continual improvement.

Popularcert supports organisations with professional audit execution, auditor competence, and management system compliance services. Partner with Popularcert to ensure your audits deliver accurate, consistent, and internationally accepted results.

GET A FREE CONSULTATION NOW

FAQ

To verify conformity with audit objectives, scope, and criteria using objective information.

Audits cannot examine all data; sampling provides reasonable confidence in audit conclusions.

Trace forward, trace back, and random department methods.

They assess personnel understanding, system implementation, and process effectiveness.

New-logo-tiny

Start Your Certification Journey Today

Get Free Consultation and a Clear Roadmap Tailored to your Business