Abstract: An audit method and system is provided that can be customised to suit a variety of processes, and enables an auditor to focus on compliance criteria rather than standards, legislation, regulations and codes. The method includes receiving an audit definition, the audit definition including a plurality of compliance criteria; providing the compliance criteria to an auditor according to the audit definition; receiving audit data in response to the compliance criteria; and generating a compliance report based upon the received audit data.