6. Interview Users
The auditor should interview employees and ask them to explain their work process. Compare the process, as the employee explained it, to what the written policy says. This step is to gain an understanding of employee competence and identify areas that need additional training.
7. Document Results
Document the results and any differences in practice to how the policies are written, when policies are complied with and when they are not. This may also include other information that is gathered from the interview process. Again, the goal is to identify gaps in compliance and to figure out a way to bridge that gap.
8. Report Findings
Create an easy to read audit report. These reports should be reviewed with senior management and an improvement plan should be developed for areas that have gaps in practice compliance. Using a FOCUS PDCA model can help facilitate a structured process for implementing this type of improvement.