What level of detail do you feel is necessary on any particular procedure for an audit? Ignoring the operational benefit of a detailed procedure, I mean strictly in a sense of what an auditor wants to see.

Example: Say for onboarding, there’s a badge creation section. Either…

A) The onboarding procedure just has a step that says X person/department creates the badge and logs it. That’s it.

B) The onboarding procedure has a step for badge making that references a whole other document that outlines step by step on badge creation and logging.

Much appreciate any thoughts on this.