I use a summary from the standard itself for auditing the system requirements, but after that it will all stem from your own procedures - you are after all auditing your 'reality' in comparison to what your say you should be doing. It is therefore difficult to use something from another location/site/industry etc...