3rd Party Audit Comment - Identify ISO Clauses/Sub Clauses to each Process

R

Ron Tollett

#1
Hi, it was brought up in our last audit to "Identify ISO clauses/Sub clauses to each process" I understand this i.e. 7.4 Purchasing, but was wondering if there was a process model that would identify all ISO clauses and sub clauses so I do not miss anything.
 
Elsmar Forum Sponsor

Randy

Super Moderator
#2
Re: 3rd party Audit

I ask whoever wants to know to prove that you even have to refer to a single clause...I know ISO 9001 and ISO 14001 don't look for any reference or even require the use of the standards themselves, they just say the requirements "shall" be met and I've seen more than one organization successfully meet the requirements without referring to a clause in the process.
 
R

Ron Tollett

#3
Re: 3rd party Audit

Hi Randy, To be more specific... the auditor specified, "Review the method adopted to identify those company (Cannot mention the company name) processes which will be subjected to the annual internal audit process - identify those ISO clauses/sub clauses applicable and other company specific requirements to each process (Sales, Purchasing, etc) - see ISO19011 for specifics" - are the exact words.
 

Wes Bucey

Prophet of Profit
#4
Re: 3rd party Audit

Hi Randy, To be more specific... the auditor specified, "Review the method adopted to identify those company (Cannot mention the company name) processes which will be subjected to the annual internal audit process - identify those ISO clauses/sub clauses applicable and other company specific requirements to each process (Sales, Purchasing, etc) - see ISO19011 for specifics" - are the exact words.
Seems ambiguous to me.
Does he expect you to provide a written review or merely review them in your head and make a comparison between processes and clauses (in effect, a mental 'gap analysis')?

If a "written" review, "Show me the shall" seems to be warranted.

If mental, well . . . that's what we all do, more or less, on a continual basis (the "evaluation" that internal audits provide in written form, but even then, there is no requirement in the Standard to tie a process to a clause of the Standard in writing.
 

Paul Simpson

Trusted Information Resource
#5
Re: 3rd party Audit

Hi Randy, To be more specific... the auditor specified, "Review the method adopted to identify those company (Cannot mention the company name) processes which will be subjected to the annual internal audit process - identify those ISO clauses/sub clauses applicable and other company specific requirements to each process (Sales, Purchasing, etc) - see ISO19011 for specifics" - are the exact words.
Looks like your auditor is overstepping his authority. Your audit programme has to cover all your management system but it is down to you how you structure the programme and what is covered in each audit.

It may be you haven't done a good job of showing that the whole system (and the whole standard) has been covered but the auditor has to identify what the problem is.

Good luck!
 

Randy

Super Moderator
#6
I have a small bit of experience using 19011 and I don't seem to remember it saying clauses have to be specified...Oh yeah, 19011 is a Guidance document so unless your management system specifically requires its use, or you're an accredited 3rd party CB you can round file 19011 if you choose and tell whoever to jump through smoke rings
 

howste

Thaumaturge
Trusted Information Resource
#7
What standard is your system certified to? Is the auditor trying to find out what was audited in internal audits?
 
R

Ron Tollett

#8
ISO9001:2008 and yes, the auditor was looking at internal audits and the audit form had i.e. Purchasing but did not identify what part of the standard it covered.
 

Jim Wynne

Leader
Admin
#9
ISO9001:2008 and yes, the auditor was looking at internal audits and the audit form had i.e. Purchasing but did not identify what part of the standard it covered.
As long as the requirements of the standard are addressed in the process, it doesn't matter whether there's explicit reference to the standard or not. Sometimes auditors want people to make things easier for them, and sometimes they're so used to seeing references to the standard that they seem to think it's required.
 

qusys

Trusted Information Resource
#10
ISO9001:2008 and yes, the auditor was looking at internal audits and the audit form had i.e. Purchasing but did not identify what part of the standard it covered.
Did he write a non conformity versus the clause 8.2.2. b) of ISO 9001, because it was not clear what you have done to meet this clause?
As a suggestiom we have put in the internal audit report form a matrix with all the clauses of the standard and we put a cross for related audited clauses when we perform process audit, in addition to the other internal/external requirments( internal procedures, customer requirments).:bigwave:
 
Last edited:
Thread starter Similar threads Forum Replies Date
L Evaluation of Readiness of Organization for 3rd Party Audit ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
L 3rd party audit issues - No audit agenda received a week before the audit Registrars and Notified Bodies 7
Mikey324 External calibration - Finding in our 3rd party audit General Measurement Device and Calibration Topics 58
D Auditing Our Outsourced 2nd-3rd Party Internal Audit Company ISO 13485:2016 - Medical Device Quality Management Systems 6
M IATF 16949 - Multiple Locations - 3rd party audit scope IATF 16949 - Automotive Quality Systems Standard 1
Sidney Vianna Proposed Change to 3rd Party Audit Process - Limiting Scope of Audit Registrars and Notified Bodies 19
armani How to 3rd Party Audit ISO 9001 Clause 7.1.6 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
Stijloor Calculating (3rd Party) Audit Days for Company with Seasonal Employees General Auditing Discussions 3
L Release of Audit Results Report to 3rd Party ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
C Looking for 3rd party audit firm for unique contract, have RFP General Auditing Discussions 1
Manix Should a 3rd Party Auditor Audit against IATF rules and not just the ISO standard? General Auditing Discussions 4
A 3rd Party Audit Finding Not Clear - 4.1 Outsourced Processes AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 36
S ANVISA Audit by 3rd Party? Other Medical Device Regulations World-Wide 4
S Customer Requesting 3rd Party Audit Report (AIB) - Help! Quality Manager and Management Related Issues 17
somashekar A question on 3rd Party Sustainability Audit Cost Misc. Quality Assurance and Business Systems Related Topics 5
L IS/TS 16949 Initial Cert. Audit - placed on 3rd party containment with Customer IATF 16949 - Automotive Quality Systems Standard 3
J Adding Value to a 3rd Party Audit - What does 'Value Added' mean to you? General Auditing Discussions 25
armani ISO 14001 3rd party Audit Plan example wanted ISO 14001:2015 Specific Discussions 5
D Major vs. Minor Nonconformance - TS 16949 3rd Party Audit Question IATF 16949 - Automotive Quality Systems Standard 4
D Gap Analysis - Three months until our ISO/TS 16949 3rd party surveillance audit IATF 16949 - Automotive Quality Systems Standard 4
A ISO 9001 3rd Party Audit Preparation - Open Issues Aspects General Auditing Discussions 81
C Standards off Limits during a 3rd party audit? General Auditing Discussions 31
Jeff Putman Meeting the 3rd Party Lead Auditor Prior to the 1st Audit IATF 16949 - Automotive Quality Systems Standard 4
T 3rd party audit time - Does working lunch count as audit time? General Auditing Discussions 66
C Getting Out of 3rd Party Audit for Certification/Registration IATF 16949 - Automotive Quality Systems Standard 12
K Customer Specific Requirements - Which ones are subject to 3rd party audit? IATF 16949 - Automotive Quality Systems Standard 4
K Audit of off line sites such as Sales offices by 3rd Party Assessor IATF 16949 - Automotive Quality Systems Standard 11
A " I, as a 3rd party auditor, retain the obligation to determine whether or not the process is "effective"... Discuss. Registrars and Notified Bodies 5
L Acquiring software from 3rd party company IEC 62304 - Medical Device Software Life Cycle Processes 8
K 3rd party auditor for ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 4
H Starting my own 3rd party inspection company Service Industry Specific Topics 6
A Becoming an ISO27001 3rd Party Auditor Career and Occupation Discussions 4
A Non-Conformances Found After 3rd Party Sorting Supplier Quality Assurance and other Supplier Issues 12
G Do HIPAA Rules Apply to a 3rd Party Logistics Shipper? Other US Medical Device Regulations 2
J Extent of 2017/745: providing 3rd party mass produced devices to NHS patients EU Medical Device Regulations 0
S AIAG CQI Auditor Qualification and 3rd Party Certification Requirements General Auditing Discussions 2
W Internal Auditing carried out by a 3rd party - Review of previous audits AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
M 3rd Party Sorting and Inspection Company Certification Service Industry Specific Topics 4
M CE self-certify, or needs testing by 3rd party? CE Marking (Conformité Européene) / CB Scheme 12
A CAR from 3rd party AS9100D auditor - Root cause dilemma AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 45
S ISO 9001:2015 Gap Analysis - In-House or 3rd Party? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
O IATF 16949 3rd party auditor training sources IATF 16949 - Automotive Quality Systems Standard 1
J 3rd Party Certification and QMS Revisions Registrars and Notified Bodies 4
armani How to approach ISO 9001:2015 Clause 7.1.6 when 3rd Party Auditing ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
C 60601-1 13.1.2 - Passive Device Energized by 3rd Party Device IEC 60601 - Medical Electrical Equipment Safety Standards Series 2
S AAMI EC57 for ECG Medical Device - Seeking 3rd Party Test Laboratory US Food and Drug Administration (FDA) 5
V Is the CQI-9 Heat Treat Assessment performed by a 3rd Party Auditor APQP and PPAP 1
D AS 9104/1 has New Requirements for 3rd Party Auditors AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 6
J Contents of DMR (Device Master Record) when manufacturing is by 3rd party 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
C Measuring Equipment on Injection Machine should be Calibrated by 3rd party? General Measurement Device and Calibration Topics 21

Similar threads

Top Bottom