Auditing processes followed by employees placed on client's site


Starting to get Involved
Hi all,

I tried to find a response here, but haven't find one.
We have this situation:
- our company (C1) was bought by another one based on another country (C2), a while ago,
- we still have separate QMS and been ISO 9001:2008 certified separately,
- for ISO 9001:2015 certification, we will go also separately, with different registrars,
- C2 provide business services for a client (also ISO certified),
- because they (C2) are understaffed, they asked our branch/office to place some of our employees on client site,
- these employees are now working under client's QMS and follow those procedures, not C1, nor C2 QMS procedures,
- after a training period they came back home and start working remotely (offshore),
- still, these employees are C1 employees, they still send their timesheet to C1 managers for approval (well, they ask also C2 supervisor for approval),
- C1 QMS have no defined procedure for staffing,
- we are in the middle of C1 internal audit program and wonder how to proceed further

- besides creating a procedure for staffing, what other processes should be developed by C1 Quality team, to comply with the new ISO 9001:2015 requirements?
- how these employees could be audited by C1 auditors? What processes can be audited by these auditors? We cannot audit client's processes...

With many thanks and kind regards,
Maximics - a puzzled auditee
Elsmar Forum Sponsor

Sidney Vianna

Post Responsibly
Staff member
From what I understand, the C1 employees are performing work on behalf of C2 at a customer site.

If C1 scope of certification does not comprise staffing services, from an external audit perspective, they are not part of the CB audit. From an internal audit perspective, does C1 QMS scope include staffing services? If it doesn't, apparently you have to manage the change in the scope of the QMS, including the context of the organization and interested parties..

Remember one thing: we don't audit people; we audit processes and systems. If C1's QMS does not acknowledge the provision of staffing services, you don't have a process to verify against during your internal audit. For all practical purposes, those people are outwith of the scope of the QMS and, thus, outside the internal audit program, as I see it.
Last edited:
Companies can be engaged in business activities that are outside of their scope of registration.

There is nothing to keep a company from helping another company with their internal audit. Actually, in the past it was a common practice.

I won't comment on if this particular application is a good business practice or not, but there is nothing in ISO 9001 that would preclude it from happening.


Starting to get Involved
Thank you Big Jim,

It is not about a company helping another with internal audit - it is about auditing an out of scope process, because staffing process is not even mentioned in our QMS. Therefore I questioned our Quality Manager about this particular audit, because I feel is not right.

Thread starter Similar threads Forum Replies Date
R Auditing support and management processes General Auditing Discussions 7
B Auditing Senior Management to determine the Effectiveness of Management Processes IATF 16949 - Automotive Quality Systems Standard 6
S Auditing Sales and Marketing Processes and Technical Support Canada Medical Device Regulations 2
I Auditing HR (Human Resources) Processes Process Audits and Layered Process Audits 7
A Process Approach to Auditing Undocumented Processes at the System Level Internal Auditing 7
R Documenting Processes such as Receiving Inspection, and Auditing to Turtle Diagrams Process Maps, Process Mapping and Turtle Diagrams 20
R Process Auditing - Identifying/Monitoring "Key" Processes Sufficient? Process Audits and Layered Process Audits 5
S Auditing the Internal Business Processes / Sub-Processes of Engineering Industry Internal Auditing 0
R Changing auditors - How do I know I'm getting one experianced in auditing processes Registrars and Notified Bodies 7
Q Auditing - Ideological battle with our Manager regarding Suitability of Processes General Auditing Discussions 6
N Internal Auditing Processes - Example or Explaination Internal Auditing 9
R Auditing COT's Suppliers / First Post Supplier Quality Assurance and other Supplier Issues 2
K ISO 9001 Auditing in a Healthcare setting Process Audits and Layered Process Audits 15
S ISO 9001:2015 Internal Auditing Internal Auditing 8
H Auditing Santa's workshop General Auditing Discussions 0
C List of MDSAP Auditing Organizations Medical Device and FDA Regulations and Standards News 1
A What are the pros and cons of using an audit software for internal auditing? General Auditing Discussions 7
cscalise Suggestions for MDR Auditing tools EU Medical Device Regulations 1
J Auditing of Support Function IATF 16949 - Automotive Quality Systems Standard 9
D ISO 13485, FDA 21 CFR 820 and Auditing the Accounting Department ISO 13485:2016 - Medical Device Quality Management Systems 5
S Risk based internal auditing Internal Auditing 6
Randy Remote auditing (for disaster, disease, disturbance etc...) during the Neo Coronavirus Pandemic and Social Distancing Registrars and Notified Bodies 7
K ANVISA B-GMP Auditing requirements for Contract Manufacturers Other Medical Device Regulations World-Wide 1
F AS9100D Internal auditing requirements Internal Auditing 11
R Does any here use an internal auditing tool that works on different platforms? Internal Auditing 3
W Does anyone have an API Q2 checklist for internal auditing? Oil and Gas Industry Standards and Regulations 1
G Best Practices for IT auditing - Is a session-id necessary for a complete audit trail? IEC 27001 - Information Security Management Systems (ISMS) 0
I Questions to ask when auditing for Organizational Leadership and Planning for the QMS? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
C CE marking for general IVD (self-certified) & ISO 13485 QMS requirements - auditing EU Medical Device Regulations 6
blackholequasar Internal Auditing Inspiration - Getting volunteers to perform internal audits. Internal Auditing 22
W Internal Auditing carried out by a 3rd party - Review of previous audits AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
tony s What is the automotive process approach for auditing? IATF 16949 - Automotive Quality Systems Standard 2
S Internal Auditing for API Spec Q1 - auditor qualification requirements Oil and Gas Industry Standards and Regulations 6
R I've been auditing for a CB for 18 years General Auditing Discussions 10
P Consultant Auditing Qualifications Requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 23
E Informational Internal Audits - Wear multiple hats what can and can't I audit (so I'm not auditing my own work) Internal Auditing 149
M We still have not received our certificate due to a 'backlog' with our auditing body Registrars and Notified Bodies 25
N Online Internal Auditing Course for ISO 13485 - Suggestions ISO 13485:2016 - Medical Device Quality Management Systems 8
A Agenda for 8D audit on Supplier's side - Auditing Corrective Actions General Auditing Discussions 5
U Internal auditing - Company employees or contract second party Internal Auditing 10
J Recomended Values - Auditing process in a supplier IATF 16949 - Automotive Quality Systems Standard 18
M Canada - Registrars that allow e-auditing for ISO 9001? Registrars and Notified Bodies 4
K Internal Auditing - Umbrella QMS and Multiple Standards Oil and Gas Industry Standards and Regulations 4
D Auditing Our Outsourced 2nd-3rd Party Internal Audit Company ISO 13485:2016 - Medical Device Quality Management Systems 6
supadrai Auditing Organization dragging their heels on issuing our MDSAP Surveillance Audit Confirmation Letter - everyone is nervous ... are we the only ones? Canada Medical Device Regulations 13
Ed Panek Supplier Auditing - No purchases from our key suppliers in the last 24 months ISO 13485:2016 - Medical Device Quality Management Systems 5
P Auditing "process validation" process 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
qualprod Effective Auditing advice needed ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
M Acceptance of remote auditing techniques - Can you help me with my research? General Auditing Discussions 0
GStough Auditing Against Criteria Unfamiliar to Auditee - Yea or Nay? General Auditing Discussions 11

Similar threads

Top Bottom