Firearm discharge at a mine gate: evidence, sampling and classification
You are leading the Stage 2 audit of a private security provider at a copper mine in northern Chile. It is day three of five. The client contract requires immediate notification of any discharge of a firearm, and the provider's use-of-force policy prohibits discharge except where there is an imminent threat to life. While sampling the incident register - 412 entries for the last six months - you select 25 records. One entry, dated 14 March, reads: 'Accidental discharge at Gate 3. No injury. No further action.' It has no weapon serial number, no witness statement, no photographs, and no reference to client notification. The monthly client report for March does not mention the incident. The site supervisor says it was a warning shot at trespassers and that the client's site SOP allows warning shots. The operations manager says the guard was 'new and nervous'. You have four hours left, a night-shift guard to interview, and two sites still to visit.
1. What evidence would you gather to decide whether this is an isolated recording gap or a systemic failure of operational control, and how would you document the audit trail?
Read the worked answer
Purpose of the evidence gathering The immediate question is not whether a shot was fired; it is whether the organisation controlled the firearm, applied its use-of-force rules, notified the client as contracted, and learned from the event. A missing narrative alone proves only a record-keeping lapse; it does not prove a system failure.
Triangulate three sources
- Documents: incident register, weapon issue and return log, ammunition issue log, guard roster for 14 March, firearm licence and serial-number register, use-of-force policy, client contract and site SOP, notification emails or radio log, monthly client report, corrective action file.
- Interviews: the guard on duty, shift supervisor, operations manager, client site representative (with the auditee's agreement), and the person responsible for client reporting. Ask open questions: 'Walk me through what happens after a discharge', 'Who decides whether to notify the client?', 'Show me the last notification you sent.'
- Observation: Gate 3, CCTV retention period, weapon storage, and whether the incident register is completed contemporaneously.
Expand the sample Sample all discharges and all 'warning shots' for at least 12 months, across all sites; compare ammunition issue records with incident records; look for entries marked 'no further action'. This tests whether the 14 March entry is an outlier or the visible tip of a pattern.
Audit trail Record the sample size and selection method, document identifiers, dates, names and roles, exact wording of answers, and any evidence you could not obtain and why. Distinguish evidence (what you saw, heard or read) from the finding (the conclusion against the criteria). If CCTV was overwritten, record that limitation rather than inferring what it would have shown.
2. Classify the nonconformity as major or minor and justify your decision. What evidence would change your classification?
Read the worked answer
Starting point: the criteria The applicable criteria are the client contract notification clause, the provider's own use-of-force policy, and ISO 18788 requirements for operational control, incident management and competence. A discharge that was not notified and not investigated engages all three.
Why a major is likely A firearm discharge is a high-consequence event with potential human rights and life-safety implications. If the organisation cannot show that it notified the client, investigated the event, verified the guard's competence and reconciled the weapon log, the failure is not merely a missing field in a register. It indicates that the control intended to prevent unauthorised use of force is not operating effectively. That is normally a major nonconformity: a system-level failure or a significant risk that the management system did not detect and correct.
When a minor may be justified A minor is defensible only if the evidence shows the control operated and the gap was isolated - for example, the weapon log matches, the client was notified by radio and the notification is recorded elsewhere, the guard was trained and authorised, an investigation occurred, and only the register narrative is incomplete. A single documentation lapse in an otherwise effective process is usually minor.
Evidence that would change the classification
- A dated client notification record or client acknowledgement.
- A completed incident investigation with corrective action.
- A weapon and ammunition log that reconciles to the register.
- Records showing the guard was trained and authorised for armed duty.
- A revised policy and communication showing the conflict between the client SOP and company policy was resolved.
Conversely, if other sites show the same pattern, if warning shots are tolerated in practice, or if management knew and took no action, the finding becomes major and may indicate a wider audit trail to follow.
3. Given the remaining audit time, how would you adjust the audit plan and what would you communicate to the auditee?
Read the worked answer
Prioritise by risk, not by itinerary The firearm discharge outranks routine site visits. I would re-plan the remaining four hours: conduct the night-shift guard interview at shift change or by agreed telephone/video call if the guard cannot attend in person; use the two remaining site visits partly to sample their incident registers and notification records; and ask the auditee to produce the weapon log, ammunition log and client notification record while I am on site.
Communicate the change I would tell the auditee's audit coordinator that the plan is being adjusted because the sample has identified a high-risk event, and that I need access to specified records and people. I would not disclose the tentative finding as a conclusion before gathering sufficient evidence, but I would explain the audit need. Any change to the audit plan should be recorded.
Do not accept unverified promises If the auditee says the records will be sent later, I would agree a specific deadline and record that the evidence was not available during the audit. A later submission can be evaluated, but it does not automatically close the finding. If access is refused, I would record a limitation and escalate to the audit programme manager.
Protect the closing meeting The closing meeting must still present findings against criteria, with evidence. I would avoid presenting a major until I have tested whether the issue is isolated or systemic. If time genuinely prevents sampling other sites, I would state that limitation in the report and consider a follow-up audit rather than overstate the conclusion. The sampling rationale and any limitation belong in the audit report, not only in my notes.