<?xml version="1.0" encoding="UTF-8"?><toc><section id="foreword.nat"><title>Nationales Vorwort</title></section><section id="foreword.int"><title>Foreword</title></section><section id="introduction.int"><title>Introduction</title></section><section id="sub-1"><label>1</label><title>Scope</title></section><section id="sub-2"><label>2</label><title>Normative references</title></section><section id="sub-3"><label>3</label><title>Terms and definitions</title></section><section id="sub-4"><label>4</label><title>Principles of auditing</title></section><section id="sub-5"><label>5</label><title>Managing an audit programme</title><section id="sub-5.1"><label>5.1</label><title>General</title></section><section id="sub-5.2"><label>5.2</label><title>Establishing audit programme objectives</title></section><section id="sub-5.3"><label>5.3</label><title>Determining and evaluating audit programme risks and opportunities</title></section><section id="sub-5.4"><label>5.4</label><title>Establishing the audit programme</title></section><section id="sub-5.5"><label>5.5</label><title>Implementation of audit programme</title></section><section id="sub-5.6"><label>5.6</label><title>Monitoring the audit programme</title></section><section id="sub-5.7"><label>5.7</label><title>Reviewing and improving audit programme</title></section></section><section id="sub-6"><label>6</label><title>Conducting an audit using remote auditing methods</title><section id="sub-6.1"><label>6.1</label><title>General</title></section><section id="sub-6.2"><label>6.2</label><title>Initiating audit</title></section><section id="sub-6.3"><label>6.3</label><title>Preparing audit activities</title><section id="sub-6.3.1"><label>6.3.1</label><title>Performing review of documented information</title></section><section id="sub-6.3.2"><label>6.3.2</label><title>Audit planning</title></section></section><section id="sub-6.4"><label>6.4</label><title>Conducting audit activities</title><section id="sub-6.4.1"><label>6.4.1</label><title>General</title></section><section id="sub-6.4.2"><label>6.4.2</label><title>Assigning roles and responsibilities of support personnel and observers</title><section id="sub-6.4.2.3"><label>6.4.2.3</label><title>Support personnel</title></section><section id="sub-6.4.2.4"><label>6.4.2.4</label><title>Observers</title></section></section><section id="sub-6.4.3"><label>6.4.3</label><title>Conducting the opening meeting</title></section><section id="sub-6.4.4"><label>6.4.4</label><title>Communicating during the audit</title></section><section id="sub-6.4.5"><label>6.4.5</label><title>Audit information availability and access</title></section><section id="sub-6.4.6"><label>6.4.6</label><title>Reviewing documented information while conducting the audit</title></section><section id="sub-6.4.7"><label>6.4.7</label><title>Collecting and verifying information</title></section><section id="sub-6.4.8"><label>6.4.8</label><title>Generating audit findings</title></section><section id="sub-6.4.9"><label>6.4.9</label><title>Determining audit conclusions</title></section><section id="sub-6.4.10"><label>6.4.10</label><title>Conducting the closing meeting</title></section></section><section id="sub-6.5"><label>6.5</label><title>Preparing and distributing audit report</title></section><section id="sub-6.6"><label>6.6</label><title>Completing audit</title></section><section id="sub-6.7"><label>6.7</label><title>Conducting audit follow-up</title></section></section><section id="sub-7"><label>7</label><title>Competence and evaluation of auditors</title><section id="sub-7.1"><label>7.1</label><title>General</title></section><section id="sub-7.2"><label>7.2</label><title>Determining auditor competence</title><section id="sub-7.2.1"><label>7.2.1</label><title>General</title></section><section id="sub-7.2.2"><label>7.2.2</label><title>Personal behaviour</title></section><section id="sub-7.2.3"><label>7.2.3</label><title>Knowledge and skills</title><section id="sub-7.2.3.1"><label>7.2.3.1</label><title>General</title></section><section id="sub-7.2.3.2"><label>7.2.3.2</label><title>Generic knowledge and skills of management system auditors</title></section><section id="sub-7.2.3.3"><label>7.2.3.3</label><title>Discipline and sector-specific competence of auditors</title></section><section id="sub-7.2.3.4"><label>7.2.3.4</label><title>Generic competence of audit team leader</title></section><section id="sub-7.2.3.5"><label>7.2.3.5</label><title>Knowledge and skills for auditing multiple disciplines</title></section></section><section id="sub-7.2.4"><label>7.2.4</label><title>Achieving auditor competence</title></section><section id="sub-7.2.5"><label>7.2.5</label><title>Achieving audit team leader competence</title></section></section><section id="sub-7.3"><label>7.3</label><title>Establishing auditor evaluation criteria</title></section><section id="sub-7.4"><label>7.4</label><title>Selecting the appropriate auditor evaluation methods</title></section><section id="sub-7.5"><label>7.5</label><title>Conducting auditor evaluation</title></section><section id="sub-7.6"><label>7.6</label><title>Maintaining and improving auditor competence</title></section></section><section id="sub-a"><label>Annex A</label><title>Remote auditing methods (informativ)</title><section id="sub-a.1"><label>A.1</label><title>Types of audits using remote auditing methods</title><section id="sub-a.1.1"><label>A.1.1</label><title>Audits using entirely remote auditing methods</title></section><section id="sub-a.1.2"><label>A.1.2</label><title>Audits using a combination of methods</title></section></section><section id="sub-a.2"><label>A.2</label><title>Technological considerations</title></section><section id="sub-a.3"><label>A.3</label><title>Examples of implementation of methods</title><section id="sub-a.3.1"><label>A.3.1</label><title>Auditing documented information:</title></section><section id="sub-a.3.2"><label>A.3.2</label><title>Auditing the organization’s digital twin</title></section><section id="sub-a.3.3"><label>A.3.3</label><title>Use of surrogate auditors</title></section><section id="sub-a.3.4"><label>A.3.4</label><title>Document reviews</title></section><section id="sub-a.3.5"><label>A.3.5</label><title>Personnel interviews</title></section><section id="sub-a.3.6"><label>A.3.6</label><title>Witnessing of activities</title></section></section></section><section id="sub-b"><label>Annex B</label><title>Useful practices (informativ)</title><section id="sub-b.1"><label>B.1</label><title>Generic useful practices</title></section><section id="sub-b.2"><label>B.2</label><title>Managing the audit programme</title><section id="sub-b.2.1"><label>B.2.1</label><title>Process for investigation</title></section><section id="sub-b.2.2"><label>B.2.2</label><title>Selecting the audit team and ICT</title></section><section id="sub-b.2.3"><label>B.2.3</label><title>Examples of methods</title></section></section><section id="sub-b.3"><label>B.3</label><title>Conducting the audit</title><section id="sub-b.3.1"><label>B.3.1</label><title>Reviewing information</title></section><section id="sub-b.3.2"><label>B.3.2</label><title>Collecting and verifying information</title></section><section id="sub-b.3.3"><label>B.3.3</label><title>Opening meeting</title></section></section></section><section id="sub-annex.bibliography.int"><title>Bibliography</title></section><section id="sub-na"><label>Nationaler Anhang NA</label><title>Literaturhinweise (informativ)</title></section></toc>