Resources
This clause of the standard really does me in. No prescription. No maintained or retained documented information, just a bunch of feel good stuff that really challenges the less competent of external auditors and business owners / managers. So stay clear of the rabbit hole.
In our real world, everything starts with the strategic plan and all subsequent plans to ensure the company is resourced. Sure we use a cross-reference table and a quality manual as the minimum, but it is the rubber to the road that demonstrates our understanding. Our key activities in the three main categories areā¦..
People. We outsource everyone and everything. Our main controls are the selection and monitoring of all things people related, which are automated and managed by our key stakeholders.
Infrastructure. An inordinate amount of time is spent on our data and communication. Underpinned by technology that ensures we are agile and can deliver our services in any agreed format. Once again, our stakeholders are best in breed and really look after us.
Environment. And last and by no means least, where we do our work. Anywhere. Anytime. Onsite. Offsite. Virtual. Realtime. We have no barriers here, nor should you.