Skip to content

Scope & Resources

Two fields on the program describe the undertaking as a whole rather than any individual audit: where it reaches, and what could get in the way of running it.

In the Scope Org Units (Geltungsbereiche) tab you can assign one or more organisational units to a program to indicate which parts of the organisation are covered. This helps with planning visibility and reporting — it does not restrict which org units individual audits within the program can use.

The org units themselves are maintained in Master Data.

Before releasing a program, it is good practice to think through what could put the program itself at risk — not the organisation being audited, but the program as a planning exercise. Use the Risks and Resources field on the program to note things like:

  • Resource shortages (not enough auditor time to cover all planned audits)
  • Missing auditor competence for certain audit topics or org units
  • Scheduling conflicts with other business activities
  • Risks in the communication process with auditees

This is free-text guidance for the program owner and reviewers — the field shows example prompts as placeholder text to help you get started. It is not a formal, structured risk register.

What you record here is the starting point for the later retrospective: Evaluating a Program.