3.2 You are conducting a third-party, ISO 27001 audit of a food processing company’s internal audit process.
You determine that the organization’s internal audit programme has been the same for the past four years. Each department is audited once every year and audit objectives have been limited to hecking that work activities are carried out as described in documented procedures.
