The Overloaded Lead Auditor and the Two-Week Window
You manage a four-person internal audit function for a mid-sized manufacturer with three sites. Your only certified lead auditor, Priya, is scheduled to lead the ISO 14001 surveillance audit at the largest site in 14 days. Yesterday the operations director emailed requesting that Priya also lead a rushed supplier audit at a newly acquired warehouse in 10 days, because the acquisition due-diligence flagged unlabeled chemical drums. Priya is currently finishing a corrective-action verification and has 30 hours of available time in the next two weeks; the surveillance audit alone requires an estimated 40 auditor-hours including preparation and reporting. The supplier audit would need roughly 18 hours. Priya has not been trained on the warehouse's processes, and the surveillance audit is a committed external obligation with a fixed date. Your annual audit plan was approved in January and lists both activities, but the supplier audit was scheduled for next quarter.
1. What should you do about the competing demands on Priya's time, and what does this reveal about your audit program's resourcing assumptions?
Read the worked answer
The arithmetic alone shows the plan is infeasible: 40 + 18 = 58 auditor-hours against 30 available, before the corrective-action verification is counted. The right move is to protect the committed surveillance audit, since it is an external obligation with a fixed date and Priya is the only certified lead auditor. The warehouse audit should be re-scoped rather than simply dropped: bring in a qualified second auditor or contract resource for the supplier audit, or defer it with a documented risk justification and a compensating interim control (for example, a site walkthrough by a trained non-lead auditor to confirm drum labeling and containment).
The deeper issue is that the approved plan assumed a single lead auditor could absorb unplanned demand. Good program management builds a capacity buffer, tracks auditor-hours by competence and availability, and defines a documented prioritization rule for ad hoc requests. The acquisition should have triggered a risk-based re-planning step, not an email request to overload the one person the program depends on. Record the decision and its rationale so the audit committee can see the trade-off.
2. The operations director escalates, arguing the unlabeled drums are a regulatory risk that outranks a routine surveillance audit. How do you respond, and what documentation do you produce?
Read the worked answer
Acknowledge the legitimate risk without conceding the resourcing conclusion. The two needs are not actually in conflict if the response is proportionate: a focused, short-notice inspection of the warehouse to confirm labeling and containment can be done by a competent (not necessarily lead-certified) auditor within days, while the full supplier audit is deferred. That addresses the immediate regulatory exposure without cannibalizing the surveillance audit.
Document a risk-based prioritization memo: the regulatory exposure identified, the interim inspection scope and date, who performs it, the deferral of the full audit with a new target date, and the residual risk accepted and by whom. Escalate the capacity constraint to the audit committee or sponsor so the decision is owned above your level. This keeps the judgment transparent and defensible rather than letting urgency silently override the plan.