If I understand and remember correctly maybe the auditor wanted to emphasize that requirement is take place in the scope of 7.1.5.2.1 clause h....
Separate names with a comma.