Twelve Warehouses, Five Days, Two Auditors
You manage the internal audit programme for a logistics company with 12 warehouses operating three shifts, two newly acquired temporary sites, and a refrigerant management process that handles R-404A and ammonia. The annual ISO 14001:2015 internal audit is due, and top management wants every site covered in a five-day window using two auditors. One auditor qualified last month and has never audited refrigeration; the other has cold-storage experience. The budget provides 10 auditor-days including travel; no overtime is approved. Last year, auditors found four minor nonconformities at three sites, including a repeat refrigerant leak-log gap. The two cold-storage warehouses handle the highest refrigerant charge; the ten ambient warehouses are low-risk. The temporary sites start operations in six weeks. The audit programme owner asks you to just book the days and cover the clause checklist.
1. Design a risk-based audit sample and justify why full coverage of all 12 sites is not supportable within the resource limit.
Read the worked answer
Ten auditor-days including travel cannot support credible audits of 12 sites, two temporary sites, and three shifts. A defensible sample would prioritize the two cold-storage warehouses because of refrigerant charge and the repeat leak-log finding; include one ambient warehouse with a prior nonconformity; include one temporary site to test mobilization controls; and audit the central refrigerant management process and top management. That is roughly four sites plus central processes, with travel and shift coverage built in.
Use ISO 19011 programme principles: risk, significance, and sampling rather than equal coverage. Sample the night shift at cold storage, where leak checks and alarm response may differ. Document the rationale, the coverage achieved, and the residual risk of the sites not visited. Schedule the remaining sites in the next cycle, with the temporary sites added once they are operational. The clause checklist alone is not an audit plan; it does not test process interaction or risk.
2. How would you address auditor competence and resource gaps?
Read the worked answer
Pair the newly qualified auditor with the cold-storage-experienced auditor, and do not assign the new auditor alone to refrigerant or ammonia processes. Engage a refrigeration technical expert for the two high-risk warehouses, or arrange specific training and supervised practice before the audit. The technical expert supports evidence collection but does not replace the auditor's responsibility for conclusions.
Allocate the 10 auditor-days explicitly: preparation and document review, site time, shift sampling, travel, and reporting. Use remote interviews for central-process managers only where the evidence can be verified and the method is justified; do not use remote work to pretend a site was audited. If the competence gap cannot be closed, narrow the audit scope and record the limitation. Resource constraints are a programme risk, not a reason to sign off unverified processes.
3. What would you communicate to top management, and how would you record the decision?
Read the worked answer
Communicate in writing that the requested coverage is not achievable with 10 auditor-days without unacceptable risk of unreliable conclusions. Present the proposed sample, the sites deferred, the reason for prioritizing cold storage and the repeat finding, and the residual risk. Ask top management to approve the revised scope or provide additional resources; do not silently accept the original instruction.
Record the decision in the audit programme, including the sampling rationale, resource calculation, competence arrangements, and any management approval of reduced coverage. Reflect the limitation in the audit report and in management review input. This protects the programme's credibility and gives the next cycle a clear basis for planning. If management insists on all 12 sites, explain that the audit would become a checklist exercise and that findings could not be defended as representative.