Audit sampling for compliance audits: how many samples is enough?
Sample sizes for testing controls depend mainly on how often the control runs. Here are the sizes auditors commonly use, and how to handle an exception.
Audit practice
The auditor's side: sampling, writing findings, remote audits and certification body impartiality.
ISO 27001
ISO 27001 nonconformities: major vs minor, with worked examples
Whether a finding is major or minor decides whether you get certified on schedule. The difference is about the management system, not the size of the mistake.
Management systems
ISO 9001:2026 transition audits: a planning guide for certification bodies
Every ISO 9001:2015 certificate must move to the 2026 edition by 30 September 2029. For certification bodies that means three years of transition audits to schedule, staff and evidence.
India compliance
SEBI CSCRF cyber audit: what the audit covers and how often
Under SEBI's Cybersecurity and Cyber Resilience Framework, regulated entities need cyber audits by CERT-In empanelled auditors, half-yearly or yearly depending on their category.