Hi All,
Would appreciate your thoughts on a minor NC we picked up on a recent recert audit.
The auditor was not satisfied we comply with 6.1.2.3 - contingency plans. Specifically clause e - "periodically test the contingency plans for effectiveness (eg simulations where appropriate)"
We could demonstrate compliance with all other clauses, but the auditor was not happy with the lack of testing of our plans.
Our contingency plan is a top level document, focusing on major risks (factory burns down, severe flooding of a site, a main supplier goes bust, another Covid outbreak, etc). Smaller risks are managed through the FMEAs.
For many of the risks, it is impossible, or incredibly expensive to actually test the plan (eg ship tools to another site, buy from another supplier abroad, etc).
The auditor also drove the point that they must be tests and therefore proactive, not reactive. So any current actions wouldn't satisfy the requirement.
Can anyone share some real world advice on how we would go about testing for these major events without spending 5 figures?
Would appreciate your thoughts on a minor NC we picked up on a recent recert audit.
The auditor was not satisfied we comply with 6.1.2.3 - contingency plans. Specifically clause e - "periodically test the contingency plans for effectiveness (eg simulations where appropriate)"
We could demonstrate compliance with all other clauses, but the auditor was not happy with the lack of testing of our plans.
Our contingency plan is a top level document, focusing on major risks (factory burns down, severe flooding of a site, a main supplier goes bust, another Covid outbreak, etc). Smaller risks are managed through the FMEAs.
For many of the risks, it is impossible, or incredibly expensive to actually test the plan (eg ship tools to another site, buy from another supplier abroad, etc).
The auditor also drove the point that they must be tests and therefore proactive, not reactive. So any current actions wouldn't satisfy the requirement.
Can anyone share some real world advice on how we would go about testing for these major events without spending 5 figures?