TAPA EMEA TRAINING What is a remote audit?


A remote audit is the method of conducting an audit without being physically present at the auditee location and typically uses such techniques as video conferencing, file sharing, email and telephone to collect the evidence needed to verify compliance, in the same way you would if you were at the site. More innovative techniques even include the use of drones or body worn cameras. Regardless of the method used, the audit must still verify objective evidence to show that the audit criteria are being met.


Commonly used platforms such as TEAMs, Zoom etc. provide a very good method of completing a remote audit, but it’s important to be aware of the limitations of such methods.


Virtual audits have many benefits, including:


• Compliance with Covid restrictions; no risk of infection associated with physical visits


• No travel expenses for auditors and auditees


REMOTE AUDITING COURSE 20 & 27 August 2021


This TAPA EMEA Remote Auditing Course provides independent professional guidance that supports the use


of TAPA EMEA Remote Virtual Auditing (RVA) Procedure for all current versions of TAPA’s Security Standards.


COST TAPA EMEA members:


€499.00 (+ VAT if applicable) Non-members:


€1,499.00 (+ VAT is applicable) TO BOOK


Places are limited – to book a place on this or future TAPA EMEA Remote Auditing Courses


CLICK HERE or for more information contact us here • Audits can still proceed without interruption


• Reduced carbon footprint through the elimination of travel


• Easier access to a global network of experts


• Ability to engage team members, no matter where they are based


• Reduction of company risk as there is a level of due diligence performed


Naturally, there are some disadvantages to be considered too, such as:


• Relies heavily on ICT (information and communication technologies)


• Not physically present so you do not see everything you would normally see


• Working in explosive areas – no phones allowed, so you can’t see the process


• Harder to gather audit evidence


• How to audit work environment? • Depth of audit in some areas is less


• Level of mistrust


• The points the auditor normally sees during site tours and onsite are removed


• Need greater planning and audit time for the same result as a physical audit


• Direct interaction with the auditee is lost • Greater risk to data security


So, what should we consider before a remote audit is agreed?


The first thing is feasibility. Are you able to audit this location using remote methods and be satisfied that the outcome will provide confidence the audit was effective?


Confidentiality and security issues, as well as data protection are critical. By using the remote methods, are you going to compromise security or confidentiality? What should be put in place to assure the auditee the information they share during the audit is secure? Will the recording of sound and images be acceptable? When documented information is to be analysed in an asynchronous manner (i.e. not in real-time by screen sharing), how will it be shared in a secure and agreed system, such as cloud based, Virtual Private Network or other file- sharing systems? Once the audit is complete, how will the collected data be managed? Auditors should not take screenshots as audit evidence without prior agreement. Any screenshots to be used in a report should be pre-authorised by the audited organisation.


So, before any remote audit is even planned, we need to have a documented agreement between auditor and auditee covering the topics above.


CONTINUED ON PAGE 12 >


11


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24