Step 1 of 8
Set the calendar by risk
What happens
Give each supplier an audit frequency based on its risk. Review that frequency when the product, process or site changes.
Good looks like
A producer moves to a shorter cycle after a poor result, and the calendar shows who is due and who is late.
How it goes wrong
A supplier adds a high-risk line, its rating stays low, and the schedule still shows full coverage.
Who
Technical
Base frequency on risk and use people who know the product and process. No text or Australian law sets a universal frequency. Your scheme, your customer or your own risk assessment does, and more frequent audits should actually change something for the riskiest suppliers.
§2.3.4; §13.7