Businesses often see internal audit as a non-value added activity leading to meaningless findings, bureaucracy, and cumbersome processes. And in spite of having an internal audit program, management is often surprised when they receive a 483, Warning Letter, or even a Consent Decree.
Internal Audit is a required part of an effective quality system. More importantly, it is an incredibly powerful tool to identify areas of non-compliance. A well designed audit program can be an effective tool in understanding, communicating, and reducing compliance risk.
For More Details: http://www.grcts.com/GRC-90059