Someone introduces themselves as an overseas customer's auditor and says the visit must be unannounced. An organisational card alone does not establish which site or audit they have been assigned to. Equally, arriving without notice does not make the request fraudulent; some commercial audit arrangements may include such visits.
This article concerns commercial visits conducted for customers or certification bodies. Statutory inspection powers of public officials require separate treatment. The aim is to identify the appropriate business owner promptly and apply the valid visit scope, rather than obstruct an audit.
Research distinguishes levels of trust
Zaheer, McEvily and Perrone's 1998 research distinguishes interpersonal and interorganisational trust in electrical-equipment buyer–supplier relationships. Its findings support that distinction; the study does not measure auditor identity checks or the reception process proposed here. [1]
Our operational recommendation is to avoid confusing a recognised organisation's name with a particular individual's current assignment. Even a visitor representing a trusted customer needs an identifiable role, purpose and scope.
Answer four separate questions
- How is the person's identity established through the appropriate method?
- Which organisation do they say they represent?
- How is that organisation's assignment for this visit confirmed?
- Who within the business is authorised to agree the visit scope?
An organisational card may help with the first two questions, but should not be treated as the answer to all four. Alongside details supplied by the visitor, the business can seek host confirmation through its known, approved corporate channels. The process should reflect contractual and legal obligations.
Distinguish an organisation's name from the technical scope
ISO develops standards and explains that it does not itself perform certification or issue certificates. [2] The everyday phrase ISO auditor therefore does not adequately identify the certification body or the assignment involved.
Procurement audits, quality assessments and a particular customer's supplier review may also have different scopes. Security does not determine technical conformity; it applies reception and escort arrangements authorised by the relevant business owner.
For example, confirmation that a visitor represents a customer may still leave an unanswered question about which activity is being examined. The host should resolve that question rather than asking reception to infer it from the visitor's professional title.
Keep the waiting process respectful and traceable
Explain plainly which confirmation is outstanding. Record the requested meeting, the authorised person notified and the resulting decision. Accent, citizenship or confident presentation should not substitute for the access decision.
If the owner cannot be reached, use the business's predefined process. Commercial pressure should not lead an officer to expand their assignment independently. EGM's official materials provide a starting point for Turkey's private-security framework; authorised owners should verify the current requirements relevant to the particular action. [3]
Review the process after the visit
The audit's commercial outcome and the quality of reception can be considered separately. Was the correct host identified? Was assignment confirmation clear? Did the decision about scope and escort reach the officer accurately?
Where improvements are needed, update the authorised-contact list or reception instruction. Assess the provider through accurate verification, consistent communication and traceable application of the approved scope, rather than through making legitimate audits difficult.
