Auditors look for evidence that the EMS is documented, implemented, and effective. In practice, common audit findings (nonconformities) often arise in key areas like compliance management, risk assessment, and operational controls.