This is an old revision of the document!

OCAP – Complexity

While there is really nothing that a company can do to alter its complexity (without major changes in how it operates), the remaining “Risk Factors” are completely in control of the business. However, if there are changes in your organization, the graphic image below is essentially the same as the one shown in AS91041A, “Figure 2 - Organization complexity risk level”. The risk level for your organization should coincide with the criteria contained in the quadrant that best describes your organization.

AS91041A, "Figure 2 - Organization complexity risk level"

The AS91041A, “Figure 2 - Organization complexity risk level” simply expands IAF MD 5, “Figure QMS 1 – Relationship between Complexity and Audit Time” by adding “Risk Levels”.