View source for Audit

{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
| '''1.''' (BCM) Audit is an independent [[Examining|examination]] of an [[Organization|organization's]] BCM plans, [[Procedure|procedures]], documentation so as to assess compliance with specifications, [[Standards|standards]], contractual agreements, or other criteria. 
{{Template:BL-BCM-5Banner}}
'''Notes (1)''': An example is a [[Business_Continuity_Management_(BCM)|Business Continuity Management (BCM)]] audit, it is seen as a method by which procedures and documentation are measured against pre-agreed (BCM) [[Standards|standards]].

'''Notes (2)''': There are three types of audits: [[First_Party_Audit|First Party Audits]] are internal audits. [[Second_Party_Audit|Second Party Audits]] and [[Third_Party_Audit|Third Party Audits]] are external audits.

'''Notes (3)''': [http://www.hc-sc.gc.ca/ahc-asc/pubs/_audit-verif/2011-02/index-eng.php Final Audit Report - Business Continuity Planning]
{{Template:BCM Course}}
<br><br>{{BcmBoK 7 CL 2A}}<br><br><br>
{{Template:BLCoursesBanner}}
{{Bcm Institute Source}}
|}

'''2.''' Systematic, independent and documented process for obtaining [[Audit_Evidence|audit evidence]] and evaluating it objectively to determine the extent to which the [[Audit_Criteria|audit criteria]] are fulfilled
{{Template: BookMGBCMResponse}}
'''''Notes (1)''''': An audit may be an [[Internal_Audit|internal audit]] ([[First_Party_Audit|first party]]) or an external audit ([[Second_Party_Audit|second party]] or [[Third_Party_Audit|third party]]), and it may be a combined audit (combining two or more disciplines).

'''''Notes (2)''''': "[[Audit_Evidence|Audit evidence]]” and “[[Audit_Criteria|audit criteria]]” are defined in ISO 19011.

{{ISO 22301 Source}} - clause 3.2

'''3.''' Systematic examination to determine whether activities and related results conform to planned arrangements and whether these arrangements are implemented effectively and are suitable for achieving the organization’s policy and objectives.

{{NCEMA 7000 Source}}

'''4.''' Audit is a systematic examination to determine whether activities and related results conform to planned arrangements and whether these arrangements are implemented effectively and are suitable for achieving the organization's policy and objectives

('''Source''': ISO19011: 2002 Guidelines for quality and/or environmental management systems auditing, clause 3.1)

'''5.''' Audit is a systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which [[Audit_Criteria|audit criteria]] are fulfilled

('''Source''': ISO19011: 2002 Guidelines for quality and/or environmental management systems auditing, clause 3.1)

'''6.''' The process by which [[Procedure|procedures]] and/or documentation are measured against pre-agreed [[Standards|standards]].

{{BCI Source}}

'''7.''' The [[Process|process]] by which procedures and/or documentation are measured against pre-agreed [[Standards|standards]].

{{HB292 Source}}

&nbsp;

== Related Links ==

*[http://www.isaca.org Information Systems Audit and Control Association (ISACA)] 
*[http://www.theiia.org Institute of Internal Auditors (IIA)] 
*[http://www.aicpa.org The American Institute of Certified Public Accountants (AICPA)] 

[[Category:BCM Institute Audit Glossary]] [[Category:BCM Institute Cyber Security Glossary]] [[Category:BcmBoK 7 CL 2A]]