Audit time calculation to ISO/IEC 20000-6:
For calculating audit time with regard to chapter 9.1.4.2 it is possible to reduce audit time based on the proposed criteria. The max. reduction of the audit must not be more than 30%. A CAB has invented a tool, so that in 95% of all cases the result for the reduction is -30%.
Example:
Criteria for reduction: previously certified (-20%), combined audit with another MS (-20%), identical activities on all shifts (-20%), low level of reliance on third party (-10%) subtotal -70%
Criteria for increase: complex business processes (+10%)
Total would be -60%, however the limit of -30% is respected.
Is this system acceptable using an “overcompensating” mechanism, so it is basically not possible to result in less than 30% reduction?
September 2024
According to ISO 20000-6:2017 #9.1.4.2. “…the maximum reduction shall be 30% of the Table 1 audit time….”. The intention was to establish an acceptable value for the sum of the contributions of reduction factors, in a way that would not compromise audit effectiveness.
It is acceptable that the CB considers multiple factors that could justify more or less audit time for an effective audit, depending on the attributes of the client’s system, processes, and products/services.
The contribution of each individual factor (usually established in terms of % of audit time reduction/increase) shall also be justified and documented by the CB.
However, it is not realistic to consider that, if above requirement did not exist, the sum of different contribution of individual reduction factors applicable to a specific case, could reach a decrease value significantly higher than 30%, without affecting the effectiveness of the audit.
Answer to the question is NO : irrespective of the calculation methodologies used when the contribution of different reduction factors systematically obtains values significantly higher than the 30% limit (which are then “artificially” limited to 30%), are not credible nor feasible.”