If an audit is not planned sufficiently and coordinated with all the affected employees of the organisation in question, the required contact persons may not be present during the on-site audit. As a result, it may be impossible to audit individual areas at all. If the auditor has set too tight a schedule for the individual areas, the audit might only be performed superficially due to a lack of time.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)