There are only actually two reasons to fail an audit:
- You’re not doing the right things.
- You can’t prove you did the right things.
Doing the right things is obvious.
What is less obvious, is proving that the right things were done.
If you work in a regulated organisation, at some point the auditors are going to show up. When they do, they’re going to ask you for your records. Records are your evidence that you did the right things.
If you don’t have a records management program, chances are, you’re failing at capturing the right evidence, or you’re handling the audit process with a massive overcommitment of resources.
A records management program starts with a great records manager. A great records manager will review your regulations, work out what needs to be captured to provide evidence, and then execute a program to ensure that it is.
Then all you need to do is make sure your organisation does the right things.
Information Governance 