I always like to make friends with the Internal Audit and the Compliance teams. You will be audited by both groups to make sure your policy meets practice. Yes, you will have both internal and external audits of various types depending upon your industry vertical. Having said that, your organization's Internal Audit and Compliance teams are your best QA process.
If you have the appropriate tone-from-the-top (by in by your board and senior management team) you can meet with both Internal Audit and Compliance and make sure they understand what you're trying to achieve and the regulations you are supporting with your vendor management program. They will both develop audit plans for your team and your organization to help ensure everyone is playing of the same page.
And if someone has gone rogue, it will be Internal Audit or Compliance that corrects the deviant behavior. What does everyone else do in this instance?
Original Message:
Sent: 06-09-2020 08:56 AM
From: Jeff Bater
Subject: Quality Control Procedures
Very good question. I would also be interested in knowing how others monitor adoption and adherence to policy and procedures.
Original Message:
Sent: 06-08-2020 02:21 PM
From: Anonymous Member
Subject: Quality Control Procedures
This message was posted by a user wishing to remain anonymous
Does anyone have a quality control procedure they utilize to ensure that users are following written procedures for the program and vendor management system?
Thank you.