Quality system audits are costly and time consuming. Make them count by using a risk-based approach to auditing by prioritizing high-risk processes and focus on effectiveness, not compliance.