Notes

• NOTE 1 Internal audits, sometimes called first-party audits, are conducted by, or on behalf of, the organization itself for management review and other internal purposes, and may form the basis for an organization’s declaration of conformity. In many cases, particularly in smaller organizations, independence can be demonstrated by the freedom from responsibility for the activity being audited.
• NOTE 2 External audits include those generally termed second- and third-party audits. Second-party audits are conducted by parties having an interest in the organization, such as customers, or by other persons on their behalf. Third-party audits are conducted by external, independent auditing organizations, such as those providing certification/registration of conformity to ISO 9001 or ISO 14001.
• NOTE 3 When quality and environmental management systems are audited together, this is termed 'combined audit'.
• NOTE 4 When two or more auditing organizations cooperate to audit a single auditee jointly, this is termed 'joint audit'. [ISO 9000:2005]