> Who actually audits that? Is there proof? ISO 9001 requires that there's a document stating "persons from group A do not talk to persons from group B". Audit

> Who actually audits that? Is there proof? ISO 9001 requires that there's a document stating "persons from group A do not talk to persons from group B". Auditors will: a) check that said document exists b) maybe, maybe (if the auditor is really, really thorough) check whether a random person of group A or group B knows about this document That's the extent of typical auditing: assuring that a process is defined and cursory testing whether people actually know about a process and its definition. In no way does any auditing assure that the process is in any way actually followed in practice.