Integrating ISO 9001/27001 External Audits - Audit Time Reduced? Discounts?

[Bifften]

Hi everyone.

My first post for many years. Good to see this place up and so active.

Wondering if anyone has experience of integrating external audit visits and has received a discount in 'man hours' or similar?

Background: We hold 2 standards (9001 / 27001). Traditionally managed very separately in the business. Separate Internal Audit Schedules, action logs and external audit programs etc.

We now plan to combine external audits at some sites externally and wonder if we should expect an overall reduction in audit time (and therefore cost!) for this from our certification body?

Interested to hear anyone's thoughts or personal experiences.

Thank you

Best regards,
Bifften

 

[Sidney Vianna]

We now plan to combine external audits at some sites externally and wonder if we should expect an overall reduction in audit time (and therefore cost!) for this from our certification body?

The rationale and protocol for potential audit time reduction is covered in the IAF Mandatory Document # 11 for the Application od ISO 17021 for Audits of Integrated Management Systems.

In principle, the possible audit time reduction depends on the level of integration of the discipline-specific management systems, such, as, for example, do both systems rely on the same corrective action process? Do both systems share the same document control, competence-development, management review, etc. processes?

According to the IAF document, a maximum 20% audit time reduction would be allowed.

Good luck.

 

[Bifften]

The rationale and protocol for potential audit time reduction is covered in the IAF Mandatory Document # 11 for the Application od ISO 17021 for Audits of Integrated Management Systems.

In principle, the possible audit time reduction depends on the level of integration of the discipline-specific management systems, such, as, for example, do both systems rely on the same corrective action process? Do both systems share the same document control, competence-development, management review, etc. processes?

According to the IAF document, a maximum 20% audit time reduction would be allowed.

Good luck.

Excellent help thank you.

Aside from Document Control and some high level monthly Corrective Action reporting our current internal integration levels are low. Internal audit schedules are run entirely separately.

It is worthwhile asking and very helpful to have those guidelines. Thank you.

 

[Kronos147]

I just learned about this.

In an integrated audit, the assessor has been qualified to all of the applicable standards.

A combined audit is just two or more standards being assessed at the same time, not necessarily with the same assessor.

 

[Sidney Vianna]

In an integrated audit, the assessor has been qualified to all of the applicable standards.

Only if s/he is performing the audit alone. If you have 2 (or more) auditors in the team, not all auditors have to be deemed competent for all disciplines.

A joint audit is when two or more auditing organizations cooperate to audit a single auditee organization.

A combined audit is when an organization is being audited against the requirements of two or more management systems standards together.

An integrated audit is when an organization has integrated the application of requirements of two or more management systems standards into a single management system and is being audited against more than one standard.