The auditor needs to dedicate time for detailed discussions with top management, to define their expectations for the QMS, and to incorporate these expectations into the audit criteria.