10.16.2 Internal Audits
Internal audits allow the organization to test its own arrangements at planned intervals and after relevant events. Depending on the scope, the audit team may include:
- a competent RF specialist;
- a Responsible Person who is not auditing only their own work;
- safety, engineering, operations, or maintenance personnel independent of the activity reviewed;
- an internal assurance or audit function; or
- another competent person appointed for the audit.
The degree of independence should be proportionate to the risk and purpose of the audit. People responsible for the activity can provide essential evidence, but the conclusions should remain objective.
The internal audit schedule should define scope, criteria, frequency, competence, sampling, reporting, and follow-up. It should reflect source and work risk, previous findings, incident history, change, and the time since the last independent review rather than applying one interval to every installation.
10.16.3 External Audits
An external specialist may provide an independent review of the RF safety program, selected Plans, installations, or technical assessments. The scope may include:
- compliance with legislation, RPS S-1, and other applicable requirements;
- exposure-assessment methods, uncertainty, and reporting;
- source configuration, engineering controls, boundaries, and access;
- document control, record keeping, and management of change;
- training, competence, authorization, and supervision;
- incidents, alarms, near misses, previous findings, and corrective actions; and
- governance, resources, consultation, and overall effectiveness.
External reviewers can bring specialist methods and experience from other installations, but their competence, independence, scope, and access to evidence should be established before the audit.
An external audit may support regulatory, client, or organizational assurance, but it does not transfer the duty holder's responsibility for safe operation or correction of findings.