Risk Is A popular word being added to the standards and procedures lexicon, but it's a massive topic that can be confusing. ISO 19011:2011, for example, states that management system auditors should understand risk associated with auditing. The standard includes audit program risk and auditing risk.1 ASQ's 2004 certified quality auditor body of knowledge (CQA BoK) included the topics of evaluating risk that are associated with: 1. Management and the organization as part of the audit purpose or objective.
展开▼