What are the general steps for conducting an audit according to ISO 19011? 6.1 GENERALITIES 6.2 INITIATING THE AUDIT 6.3 PREPARATION OF AUDIT ACTIV...

What are the general steps for conducting an audit according to ISO 19011?
6.1 GENERALITIES
6.2 INITIATING THE AUDIT
6.3 PREPARATION OF AUDIT ACTIVITIES
6.2.1 Responsibility of the audit should correspond to the audit team leader until the audit is completed.
6.2.2 Contact with the audited party should be established to confirm the authority to carry out the audit, information about audit objectives, scope, criteria, methods, and audit team composition, access to information for planning purposes and risks and opportunities, applicable legal and regulatory requirements and other requirements, and to resolve issues related to the composition of the audit team with the audited party.
6.2.3 The availability of information to plan and carry out the audit, adequate cooperation from the audited party, and the time and resources for the audit should be taken into account to determine the viability of the audit.
6.3.1 The documented information of the management system should be reviewed to determine conformity with audit criteria and detect areas of interest.
6.3.2.1 The audit planning should facilitate the scheduling and efficient coordination of audit activities to achieve the audit objectives effectively, and the audit plan should reflect the audit scope and complexity, risks of not achieving the audit objectives, the audit team composition and competence, appropriate sampling techniques, opportunities to improve the efficiency and effectiveness of audit activities, and risks for achieving the audit objectives and risks for the audited party generated by the audit.
6.3.2.2 The audit planning should address audit objectives, audit scope, audit criteria and documented information, locations, dates, times, and duration of audit activities, audit team familiarization with the audited party's facilities and processes, audit methods, roles and responsibilities of the audit team, allocation of resources according to the risks and opportunities of the activities to be audited, identification of the audited party's representatives, language of work and audit report, confidentiality and information security issues, actions to address risks and opportunities in achieving the audit objectives, and follow-up activities from a previous audit.