SBS - The best value in QMS software

Audit Findings - The Process/Clause Matrix does not identify all the processes

qusys

Trusted Information Resource
#21
Agree with AndyN.
Pls, provide the verbiage of the non conformities.
As to Quality mgmt as a process, it is not a requirement.
Clause 4.1 is very clear : it is up the organization to identify processes for their QMS and show their interactions:bigwave:
 
Last edited:
Elsmar Forum Sponsor
J

JaneB

#22
having the Process Approach Matrix not completed to his satisfaction was on the list of Stage 2 non conformances that we have to raise a corrective action for....

it was only that we didn't have Quality Management as a key process, which of course it is. We agreed to include this on the chart for the sake of progress....

Other items, (again this would appear to be opinion driven) were relating to lack of specifics noted in our Safety Statement.

Also with regards to vendor Approval, not specifying exactly we had approved a vendor to sell us was a non conformance. We must apparently identify other products that they sell, which we may/would not approve for purchases (from the same supplier).

All in all, an amount of small NC's we feel, but nevertheless, perhaps this was justification for his days pay claimed. We dont want to be setting precedence though for follow on audits with regards to some thing that we could argue as being not requirements....

Comments please. Do you think that this Auditor is OTT, or that perhaps this approach would enhance us as being more disciplined.
As others have said, without having more information - including the actual wording of the NCs raised and against which clause/s, it's scarcely possible to comment.

I would add, however, that if this is how it started, it's extremely unlikely to get better from here.

You should feel, after an audit:
  1. The auditor was firm, but fair
  2. The auditor did not audit according to opinion, but against the Standard
  3. The auditor made a genuine attempt to consider any evidence offered of compliance, even if it wasn't what he 'usually sees' or is accustomed to
  4. You should be clear about what each NC is, why it was raised and what the evidence or lack of it was that caused it to be raised
Are you?

As for 'not having QM as a key process'... words fail me. That's what the whole system is for!
 
X

XIO549

#23
Qusys, JaneB, AndyN,

I totally accept how its hard to comment when you don't have the initial NC wording. I have given 2 NC's below for your comment.

We have since had Stage 2 audit and have subsequently been recommended by the auditor for certification by the CB. I think we managed this by demonstrating that we can jump through the suggested hoops for the auditor.
These NC's are from the Stage 2 audit.

1. Clause 4.1/8.2.3.
"QMS/Management has not been identified as a process, and need to identify inputs, outputs, measurements and targets."
I know you guys reckon I should tell this Auditor that we're not happy with the Process/Clause Matrix chart given to us, (to include as part of our documentation - and we're not), but we decided to roll with the punches on this and get certification for the sake of it, and then revise shortly after (with advice) to a sys that does not rely on this chart. ?

2. Clause 5.6 The Process Metrics were not produced or discussed at the Management Review held."
At this stage we had little or no records of how each process in the firm performs, so without this record, it was hard to proceed with a Management Review (which is required before an audit I think) so we generated a performance chart for each process, that was rated/scored by our factory supervisor - this was the process metrics - (open to interpretation I know, but it was an agreed discussion document for this part of the Management review nonetheless. This chart was provided at Stage 1 Audit. The NC note was the same then.
Since then, we have purchased and installed a project tracking software which records the time taken for each process, and now we have measurable records to discuss at the next MR. However, we haven't had a MR since Stage 1 audit, so this NC not of 'No Process Metrics produced' stands for this Stage 2 audit.

Perhaps you can comment on the above and we may progress through other items that I think are opinion driven after?

Thanks for the view points guys.

Xio
 
J

JaneB

#24
... we decided to roll with the punches on this and get certification for the sake of it, and then revise shortly after (with advice) to a sys that does not rely on this chart.
That sounds like a pragmatic approach and one that I'd go with too.

I still find that first NC you've listed a very strange one for all kinds of reasons (not least the clauses referenced) and have about 20 more questions, but then I'm not there....

2. Clause 5.6 The Process Metrics were not produced or discussed at the Management Review held."
At this stage we had little or no records of how each process in the firm performs, so without this record, it was hard to proceed with a Management Review (which is required before an audit I think)
If you only did a single MR (which this seems to indicate) then I strongly suggest you do some more research and thinking to learn better what management review is and requires, because this answer appears to indicate some lack of understanding on it. (There's a whole heap of threads in the Cove on it - searches should throw up plenty).

You must definitely have a functioning system which includes the function of management review. Saying 'oh well, our system was too new so we didn't really havwe the reocrds, so we didn't consider how our processes were doing ' a/isn't meeting the requirements, presumably 5.6b and b/indicates that lack of understanding I've already mentioned.

I'm confused as to why would you not have any management review after the Stage 1 audit? Apart from anything else, it would have beenadvisable to look at the results and figure out if you needed to do anything before the Stage 2.

But bottom line: yes, get certified first, then sort it out - and argue it out if need be - later. It's not ideal (you should NOT have to implement some document in a particular format etc. just because your auditor wants it!!) but it's pragmatic
 
X

XIO549

#25
Yes Jane,

Management Review was successful and a clear set of inputs and outputs were prescribed and achieved.

However the point made was that whilst a Management Review was required to be carried out before Stage 1 Audit, one of the inputs was process analysis and as such, this being a new system; there were no process records to analyse. Top Management has a good understanding of the QMS requirements, but had to conceed that no actual measurements were present before the MR, so had to agree that for that time, a subjective process metric was discussed.

Since then, we have accurate process metrics to discuss at the next MR. This was demonstrated to the auditor. However the NC was still raised as we had not had a Management Review in between the audits.

I certainly take your point that we could have had one in between, but hind sight is a powerful tool we didnt have the luxury of back then.

Another Non Conformance raised, that we thought was opinionated, was as follows:

Clause 8.2.4 Vendor Assessment.
"Vendor Assessment Record showing late deliveries, does not show the actual date that the late delivery was actually required for."

The record from in place records Name of purchaser, name of supplier, and has a Good/Fair/Poor rating tick box for the vendor under the headings of Quality and On Time Delivery, with a signature box for reporting personnel.
The Auditor raised this NC saying that the record does not show an actual due date. - Is this in the standard? or an auditors opinion of what should be in the standard perhaps?

We have the procedures in place and they work.

This appears (whilst we don't disagree with it) to be splitting hairs in terms of deciding on our compliance, and it typical of the type of items raised in NC's.

What do you think about that Jane?

Xio
 

qusys

Trusted Information Resource
#26
Clause 8.2.4 Vendor Assessment.
"Vendor Assessment Record showing late deliveries, does not show the actual date that the late delivery was actually required for."

The record from in place records Name of purchaser, name of supplier, and has a Good/Fair/Poor rating tick box for the vendor under the headings of Quality and On Time Delivery, with a signature box for reporting personnel.
The Auditor raised this NC saying that the record does not show an actual due date. - Is this in the standard? or an auditors opinion of what should be in the standard perhaps?

We have the procedures in place and they work.

This appears (whilst we don't disagree with it) to be splitting hairs in terms of deciding on our compliance, and it typical of the type of items raised in NC's.

What do you think about that Jane?

Xio

Hi Xio,
what the auditor says it is not a requirement of ISO 9001.
I do not know what kind of evidence he took to raise this non conformity, given that you are saying you are respecting the procedures you set.
I would like to know if you have some issue for your supplier in terms of their delivery and if you have actions on this. This is the classical incident of premium freight.:bigwave:
 
X

XIO549

#27
qusys

Yes, I think you are getting the picture - opinions on what's required V's actual compliance items.

The problem now (since we have gone along with these NC's) is that we have to respond the the NC's with a Chart showing what we thought the Cause was for the NC, the Correction to fix each NC raised and then the Corrective Action for each NC. Certification Issue is pending receipt of this response.

So, now that we've jumped through the hoops, what do we say is the cause of the non conformance? ; when really we think that there is no Non conformance.

We will be stating that we had inadequate procedures or some thing of that nature, which will be conceding to jumping through more hoops.

When it comes to review these 'Corrective Actions' raised - Top Management will be asking questions as to the validity of them, I'm sure.

Xio
:frust:
 

qusys

Trusted Information Resource
#28
qusys

Yes, I think you are getting the picture - opinions on what's required V's actual compliance items.

The problem now (since we have gone along with these NC's) is that we have to respond the the NC's with a Chart showing what we thought the Cause was for the NC, the Correction to fix each NC raised and then the Corrective Action for each NC. Certification Issue is pending receipt of this response.

So, now that we've jumped through the hoops, what do we say is the cause of the non conformance? ; when really we think that there is no Non conformance.

We will be stating that we had inadequate procedures or some thing of that nature, which will be conceding to jumping through more hoops.

When it comes to review these 'Corrective Actions' raised - Top Management will be asking questions as to the validity of them, I'm sure.

Xio
:frust:
Take this as an opportunity to improve and not as a burden.
Whan you write the root cause, I would suggest to mention a process issue not clear or not completely defined as well as records not clearly analized rather than procedures.
Pls, consider my questions of the previous post. Given that I have only the elements that you described, I do not what the auditor sees on his eyes and check vs audit criteria. Hope this helps:bigwave:
 
X

XIO549

#29
qusys

Good suggestion on the Root cause. This is the item that I need to be careful with so as not to give the auditor a stick to beat me with at the next inspection audit.

Yes, another colleague here commented on petty NC's and so to look at it more like OFI rather than NC's. Its just to follow the rule book now and structure the documentation so that it does what its supposed to - create improvement.

Cheers mate.


=========================

Other NC for discussion? -
Client gives us a sample of their paint for trial use on product at trial stage before product is allowed to be shipped.
We keep old tins of this material supplied.
This paint is worthless - kept only in case it may be needed again.
It has a 1 yr shelf life.

When we establish that a sample (which the customer has disregard at this stage) is now past its shelf life, we are advised by the auditor that we must (a) notify the customer of our intention to bin this 'customer property' and
(b) fill out a scrap record for allowing the material to be binned (this happens perhaps 5-6 time per year, maybe).

Does this seem extreme on the auditors part to bring this up as a non-conformance?

Extreme or well founded? You tell me.

We're doing it any way to ensure compliance, but it will be up for review at next Management Review meeting and will no doubt be revised at that stage.

Xio.
 

qusys

Trusted Information Resource
#30
qusys

Good suggestion on the Root cause. This is the item that I need to be careful with so as not to give the auditor a stick to beat me with at the next inspection audit.

Yes, another colleague here commented on petty NC's and so to look at it more like OFI rather than NC's. Its just to follow the rule book now and structure the documentation so that it does what its supposed to - create improvement.

Cheers mate.


=========================

Other NC for discussion? -
Client gives us a sample of their paint for trial use on product at trial stage before product is allowed to be shipped.
We keep old tins of this material supplied.
This paint is worthless - kept only in case it may be needed again.
It has a 1 yr shelf life.

When we establish that a sample (which the customer has disregard at this stage) is now past its shelf life, we are advised by the auditor that we must (a) notify the customer of our intention to bin this 'customer property' and
(b) fill out a scrap record for allowing the material to be binned (this happens perhaps 5-6 time per year, maybe).

Does this seem extreme on the auditors part to bring this up as a non-conformance?

Extreme or well founded? You tell me.

We're doing it any way to ensure compliance, but it will be up for review at next Management Review meeting and will no doubt be revised at that stage.

Xio.
Appreciated to have been of help for you, thanks!
As to the other NC what was the violeted clause? Was it 7.5.4?
I do not know if the sample of paint can be considered as a customer property, it depends on what you have established with your customer in the contract or in the purchase order. As per my understanding on what you wrote, the sample of the paint is not incorporated in the final producu you supply. Again, based upon the contact with, the sample could be yours.
Did the auditor verify this?
I do not know if you have also established with your customer that you shall use the sample paint with due date not expired. This could be a requirement.
I should have more detail and make other question to see if this is a ncn.
Hope this helps:bigwave:
 
Thread starter Similar threads Forum Replies Date
M Document Review Audit Findings - Design and Process Approach Design and Development of Products and Processes 2
Ajit Basrur Track audit findings on Excel tracker Excel .xls Spreadsheet Templates and Tools 9
I What kind of wine best complements the Friday that you close out your external audit findings? Opinions are welcome. Coffee Break and Water Cooler Discussions 12
shimonv Rigid rules for handling supplier audit findings ISO 13485:2016 - Medical Device Quality Management Systems 11
J Any diverging opinions regarding audit findings or conclusions must be resolved no later than the closing meeting ISO 13485:2016 - Medical Device Quality Management Systems 13
XRAY_3121 Informational MDSAP Audit Findings - Document change orders Other Medical Device Regulations World-Wide 12
G Web based tool for benchmarking audit findings Benchmarking 6
Albert G. What are general examples of audit findings with ISO 9001:2015? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15
A Internal Audit - Findings - Recent Internet Audit (Prior to Certification) IEC 27001 - Information Security Management Systems (ISMS) 7
M Increase in Major TS16949 Audit Findings IATF 16949 - Automotive Quality Systems Standard 14
dubrizo Are you documenting Internal Audit findings as NCRs? Internal Auditing 18
dubrizo Audit Findings: Writing against Internal an ISO Clause Internal Auditing 10
K Definition of Repeat Audit Findings Internal Auditing 11
Q Writing appropriate ISO 13485 Audit Report Findings Internal Auditing 15
M Do all findings (nonconformities) in an internal audit require a corrective action? Quality Management System (QMS) Manuals 55
Mikey324 Questionable Audit Findings after Rules 4th Edition Release IATF 16949 - Automotive Quality Systems Standard 4
R Root Cause for "Simple" External Audit Findings ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
S Internal Audit Findings Summary Rewrite by an Auditee ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
M Help with Internal Audit Findings ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
M Internal Audit Findings and Issuance Problem Internal Auditing 4
E Corrective Actions Root Causes from Surveillance Audit Findings Nonconformance and Corrective Action 3
A Audit Report Findings for an audit conducted yesterday General Auditing Discussions 10
M External Audit Findings - TS 16949 IATF 16949 - Automotive Quality Systems Standard 3
R Root Cause Analysis of Audit Findings - New Quality Manager Quality Manager and Management Related Issues 20
I Types of Internal Audit findings based on ISO 9001 Clause 8.2.2 Quality Manager and Management Related Issues 10
C No findings from External Audit - Should I be worried? General Auditing Discussions 7
K External Auditor asking for other Audit Findings ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 36
6 ISO 9001 Audit Findings Sept 2011 - Critique and Comments ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
D Management Review Analysis of Internal Audit Findings Quality Manager and Management Related Issues 8
B Mining Nonconformance Data for Potential Missed Audit Findings Misc. Quality Assurance and Business Systems Related Topics 2
A How to Address Internal Quality Audit Findings Internal Auditing 8
B Critical Action Limits (CAL) for All Internal and External Audit Findings General Auditing Discussions 17
X ISO 9001:2008 Internal Audit - Classification of Audit Findings Internal Auditing 5
AnaMariaVR2 Pros & Cons of FDA viewing QAU Audit Report Findings US Food and Drug Administration (FDA) 7
S External Auditor Findings when an Internal Audit found a Nonconformance Yesterday Document Control Systems, Procedures, Forms and Templates 11
D ISO 10001:2007 - Critical Audit Findings Other ISO and International Standards and European Regulations 6
A ISO 17020 Audit Findings - Calibration from Accredited Laboratory required Other ISO and International Standards and European Regulations 8
L Categorizing Internal Audit Findings Internal Auditing 10
B Writing Techniques for Audit Findings, Reports, etc. Internal Auditing 15
Michael Malis For Internal Audit findings, would you open a CAPA for every observation? Internal Auditing 31
W Audit Findings - Refusing outside audit findings Internal Auditing 14
F Responding to Audit Findings - Procedures not being followed to the letter ISO 13485:2016 - Medical Device Quality Management Systems 28
T TS 16949 Recertification Audit - No negative findings! Covegratulations 23
E Internal Audits - Presenting Audit Findings to Upper Management General Auditing Discussions 19
V Documenting the Root Causes for Internal Audit Non-Conformance Findings Problem Solving, Root Cause Fault and Failure Analysis 5
B AS9100 & Safety Audit Findings - Para 6.4 Work Environment - Fork lift records AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 8
S Does anyone know if ISO publishes audit findings/results much like the FDA ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 14
C Internal Audit Findings - Do I need to raise NC for amendments/revisions? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
eternal_atlas Review on Internal Audit Findings ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 20
eternal_atlas Internal Audit Findings in C&M works (HVAC, Firefighting, etc.) - Your Comments? General Auditing Discussions 6

Similar threads

Top Bottom