Yes, one of the points I would come back to is that I think it's a grave mistake to take on trust that an organization has a functioning management system until you've verified that for yourself in a fairly comprehensive way. If you don't do that, then you run the risk of allowing an organization to maintain a facade. Behind that facade of paperwork and activity, the thing isn't really working the way it is supposed to and they perhaps don't even have the technical capability to do that. I think it would be a very important part of the oversight to do these sorts of comprehensive audits in a very timely fashion, not dragging out over two years, and for that to be a prerequisite for any kind of change in inspection regime this organization is subject to.
On June 1st, 2009. See this statement in context.