Classification of Findings in Audits to the new standard

V

VickiC - 2006

#1
From an auditing standpoint, I never want to issue a corrective action request (CAR) unless I can clearly identify an element from the standard relative to what I observed. Now, I understand and subscribe to the concept that most often if an employee is observed to be operating inconsistently with documented procedures, that somehow it is a "system" issue. It appears that the structure of the new 2000 std supports this concept tremendously because I cannot comfortably identify a clause to use if I really wanted to issue a CAR for this situation. Any thoughts, suggestions, or ideas?
 
Elsmar Forum Sponsor
R

Rick Goodson

#2
Hi Vicki,

A couple of thoughts.

4.1.c) "The organization shall determine the criteria and methods needed to ensure that both the operation and control of these processes are effective,...", with emphasis on the control.


7.5.1 Control of production and service provision, The organization shall plan and carry out production and service provision under controlled conditions. Controlled conditions shall include, as applicable....7.5.1.b) the availability of work instructions, as needed...

The standard allows the organization some latitude in implementation but does require 'control of processes'. If the organization decides that operators need to use documented procedures then not using them is evidence of lack of control.
 
T

tomvehoski

#3
Vicki,

I don't see it specifically stated in ISO 9K2K that "thou shall follow documented procedures", but how about 8.2.2.a "The organization shall conduct internal audits at planned intervals to determine whether the quality management system a) conforms to planned arrangements (see 7.1) ..." Planned arrangements under 7.1 include documented procedures.

You might also look at 6.1.a - "...provide the resources needed to a) implement and maintain the quality management system ..."

It is strange that 7.5 requires availability of information and work instructions, but not compliance with them.

If the nonconformance did not fit some other specific section of ISO, I would probably just reference 7.1 and failure to follow planned arrangements. I tend to worry more about the problem than what part of ISO it fits into.

Tom
 
T

tomvehoski

#4
tomvehoski said:

It is strange that 7.5 requires availability of information and work instructions, but not compliance with them.
I missed the words "carry out" under 7.5.1, so I guess ISO does require compliance with instructions.
 
V

VickiC - 2006

#5
Thanks for all the feedback. Good ideas and thoughts.

I agree with your last statement, Tom, regarding focus on the problem vs the ISO clause. However, I am relatively new in this company and I don't think some of the people I visited in my first audit were used to an internal auditor approaching them and they "put up a fight" for identified concerns or issues (not saying I wouldn't do the same :) ), but I have a stronger leg for discussion with an identified ISO reference.
 
N

Nosmo King

#6
Re: finding classification

VickiC said:
I never want to issue a corrective action request (CAR) unless I can clearly identify an element from the standard relative to what I observed. ?
Just for interest, Vicki, what is the purpose of linking CAs to the standard?

What business benefit does that give to your organization?
 
V

VickiC - 2006

#7
I hesitate to say this because it sounds like I am slamming my company, when actually we have a lot of good systems in place. However, I came in very new to this auditing position about 5 months ago and actually started with the company a little over a year ago in a position that had little exposure until this. So, perhaps its my delivery (although I would hope not), but the culture here is very requirement oriented and if it (whatever the expectations is) is not spelled out in writing like a PO, statement of work, specification, or....ISO 9000, there is a lot of resistance to even accepting responsibility for a corrective action request. So, I tie them into ISO since I am the designated ISO 9000 corporate quality auditor. I must say, I welcome suggestions as I find I learn and grow all the time by this type of dialogue!

My quality heart, and some others in our organization, understand that what we are really striving for is an effective business system that focuses on profits AND customer satisfaction and not just an ISO compliant system. Then, there are some who seem to not understand the big picture. Does this make sense?
 
#8
VickiC,

Here is what I recommend. All CAR's need three components. First, they need to be understandable. The auditee must be able to determine what was wrong and how it needs to be fixed.

Secondly, CAR's need to be actionable, that is they must be written in a manner where the auditee can take action.

Thirdly, they must be unarguable (yes, I know that isn't a word). This is where we link to the requirement. It might not always be to the standard, but quite often to a specific procedure or work instruction.

A good CAR will give the auditee enough information, so he/she will know how the requirment has been violated, and what to do to meet the requirement. (this may involve changing the requirement in some cases).

Hope this helps!
 
V

VickiC - 2006

#9
Well here is another element to the quality system I am "designing" - tell me what you all think of this:

In an effort to quantify, chart, monitor, and measure results of the audit function and any other system issues that enter the CAR system, I have developed a "defect code" to capture and create a database of information. This is helpful to present a summary of the results to upper management as required every other month.

What are some of the other ways you auditors are capturing your audit results?
 
#10
Hi, Vicki,

Sounds good. Here are some of our ways and means:

We use a home made Access application to manage the entire audit process.

I post the following data from it to our intranet and to the management review):

Lists of:
  • All current CAR's
  • CAR's with a deadline within a month (Early warning)
  • Overdue CAR's (Somehow people seem to dislike ending up on this list ;))
and graphs covering the above. That way the trends can be easily spotted.

All audit reports are accessible via the intranet. Every coworker can read them.

I keep trying to improve the audit process at all times and once a year I evaluate it all the way through.

/Claes
 
Thread starter Similar threads Forum Replies Date
X ISO 9001:2008 Internal Audit - Classification of Audit Findings Internal Auditing 5
A IEC 62304 safety classification, External Controls and off-label use related risks IEC 62304 - Medical Device Software Life Cycle Processes 5
R Classification of USB DC operated medical equipment IEC 60601 - Medical Electrical Equipment Safety Standards Series 1
D Surgical Instrument Tray Classification EU Medical Device Regulations 5
S Classification of a product according to MDR EU Medical Device Regulations 3
L Classification under MDR EU Medical Device Regulations 1
shimonv Classification of a cloud- base viewer for the output from a medical device US Food and Drug Administration (FDA) 7
K Biological indicator system classification under MDR EU Medical Device Regulations 2
A FDA Class Classification for a cabinet 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
dinaroxentool Question about FDA Classification of a Device 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
N What is our product classification? (Does Unclassified classification still exists) Other US Medical Device Regulations 14
nadhar2 Classification of Action Items Misc. Quality Assurance and Business Systems Related Topics 3
A Class medical device (MDD) - Classification help EU Medical Device Regulations 1
D IEC 62304 Risk Classification - With and without hardware control IEC 62304 - Medical Device Software Life Cycle Processes 2
M Classification of Clean Rooms Other Medical Device Related Standards 9
A ISO 10993-7:2008/ Amd.1:2019 - Classification of special populations Other Medical Device Related Standards 3
DuncanGibbons Classification of aerospace parts depending on their risk and criticality etc. Federal Aviation Administration (FAA) Standards and Requirements 3
M Barrier cream classification EU Medical Device Regulations 2
N Medical Device Classification under MDR - Rule 21 EU Medical Device Regulations 11
M Risk Classification For Supplier - Clinical Research Organisation (CRO) Supply Chain Security Management Systems 3
D Classification of Syringe (nozzle) of needle free injection system. EU Medical Device Regulations 8
S CE Mark - Classification Confusion EU Medical Device Regulations 12
S Medical Device Product Classification in South Korea Other Medical Device Regulations World-Wide 1
M Informational US FDA – Ear, Nose, and Throat Devices; Classification of the Self-Fitting Air-Conduction Hearing Aid Medical Device and FDA Regulations and Standards News 0
D MDR 2017/745 Classification Guide EU Medical Device Regulations 8
M Informational EU – Guidance on Qualification and Classification of Software in Regulation (EU) 2017/745 – MDR and Regulation (EU) 2017/746 – IVDR Medical Device and FDA Regulations and Standards News 2
dgrainger Informational MDCG 2019-11: Guidance on Qualification and Classification of Software in Regulation (EU) 2017/745 – MDR and Regulation (EU) 2017/746 – IVDR Medical Device and FDA Regulations and Standards News 0
M Informational EU MDR Classification Rule 11 – what??? Medical Device and FDA Regulations and Standards News 9
M Informational US FDA Final Guidance – Acceptance Review for De Novo Classification Requests Medical Device and FDA Regulations and Standards News 1
A Fire hazard classification - Clause in IEC 60601 about gauze and electricity ISO 14971 - Medical Device Risk Management 0
J MDR Annex VIII, Rule 6 Classification - Implication for lower risk CV products? CE Marking (Conformité Européene) / CB Scheme 3
A Device Classification - India CDCSO - How to classify the device? Other Medical Device Related Standards 1
B ASTM F2924-14 /ASTM F3001 - Room temperature classification criteria Other US Medical Device Regulations 0
M Informational EU – MANUAL ON BORDERLINE AND CLASSIFICATION IN THE COMMUNITY REGULATORY FRAMEWORK FOR MEDICAL DEVICES Version 1.22 (05-2019) Medical Device and FDA Regulations and Standards News 2
E Wristwatch Skin-proximal glucose sensor - Classification under MDR EU Medical Device Regulations 4
K MEDDEV 2.4/1 rev. 9 Classification EU Medical Device Regulations 1
M Informational USFDA – Medical Devices; Anesthesiology Devices; Classification of the Ventilatory Electrical Impedance Tomograph Medical Device and FDA Regulations and Standards News 0
N Medical Device Re-Classification EU Medical Device Regulations 2
B Class IIB Device - IEC 62304 Software Classification IEC 62304 - Medical Device Software Life Cycle Processes 13
C Suppliers re-classification from Critical to Significant or from Significant to Non-critical Supply Chain Security Management Systems 0
J Medical Device re-classification and marketing ISO 13485:2016 - Medical Device Quality Management Systems 13
M APQC PCF (Process Classification Framework) and ISO 9001 - Processes Based Approach ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
M Informational TGA – Several proposed changes to classification to better align with the EU MDR Medical Device and FDA Regulations and Standards News 0
N Medical Device Accessory Classification - Software as a Medical Device Other Medical Device Regulations World-Wide 5
G EU MDR 2017/745 Rule 11 interpretation - Re-classification of a Software as Medical Device Other Medical Device Related Standards 0
M Medical Device News Manual On Borderline And Classification In The Community Regulatory Framework For Medical Devices Medical Device and FDA Regulations and Standards News 0
M FDA News USFDA Final Rule – Medical Device Classification Procedures: Incorporating Food and Drug Administration Safety and Innovation Act Procedures Medical Device and FDA Regulations and Standards News 0
M FDA News The FDA Issues Final Rule on Medical Device Classification Procedures Medical Device and FDA Regulations and Standards News 0
K Biocompatibility classification for Lancet CE Marking (Conformité Européene) / CB Scheme 7
sagai Classification for compiler's runtime libraries IEC 62304 - Medical Device Software Life Cycle Processes 3

Similar threads

Top Bottom