Conducting audits without procedures

Colin

Quite Involved in Discussions
#1
I was recently called in by a company to train up a couple of internal auditors to audit their ISO 9001 certificated system, so we decided to to a bit of theory and then conduct some audits on their own system - also helped because they were well behind on their audit schedule.

When I got to the company I looked at the system and it was of the 'bare bones' variety - i.e. a brief quality manual and the 6 mandatory procedures. Now, I don't have a problem with the system being nice and brief but trying to train new auditors, who know nothing at all about ISO 9001, to prepare for and audit the system was a real challenge.

We identified the key processes in the organisation easily enough but what do they audit against? The QM, ISO 9001, current practice all come to mind but when they don't know the standard and the manual is very brief, it was really tough for them.

Just wondered how other people have handled a similar situation.
 
Elsmar Forum Sponsor

Randy

Super Moderator
#2
They may not have "documented" procedures, but they still have procedures (those things or actions they perform to achieve customer expectation) and the requirements they must meet. Audit that stuff.

Ask about what they are supposed to be doing, the inputs, out puts and measuring and then verifiy what is actually happening.

Look at their "requirements" (contracts, orders and that stuff) and see if they are being fulfilled as required.
 

DannyK

Trusted Information Resource
#3
You can also check if employees are doing the job in a consistent manner.
If there is no consistency, there may be a need to have a procedure.


Danny
 

SteelMaiden

Super Moderator
Super Moderator
#4
Don't forget to ask for things like controls for the process, maybe an external requirement, maybe an internal one, as well as how they know when to put a control into place.
 
C

chergh - 2008

#5
This is a tough situation for persons new to auditing. I approach these situation by getting the auditees to walk me through there process starting at the begining and I look for evidence of things happening, be it forms, database records, meeting notes, emails etc, as we go through the process.

A general rule I hold is when someone tells me they do something I ask them if they have evidence of this.
 

Colin

Quite Involved in Discussions
#8
Thanks for the replies so far.

Randy, you are quite right of course, everyone has procedures but not all are documented. I am quite happy auditing against 'what they do' but it is difficult for a new auditor to do as they have nothing concrete to refer back to.

Fireonce, I do indeed do that myself as I am familiar with the standard and what it requires. However, new auditors rarely know the standard and given that they only perform a few audits per year, will probably never get to the point where they know it well enough to use.

On a similar vein, I have recently been involved in the re-design of an IRCA registered 2 day QMS IA course and they do not include familiarisation with ISO 9001 in the course criteria, just the structure. I find it crazy that we should present this course without going through the standard.
 

MajorBVNaik

Involved In Discussions
#9
Dear Sir
I have read all the suggestions you have received so far. I am an IRCA LA for ISO 9001 & 14001 on panel of many certification bodies far last ten years.
As regards auditing without any documented procedures, that is the challange the third party auditors face all the time. Precisely for this reasons the CBs look for auditors who have work experience in the related industry, which enables them to know what the organization must do meet the customer requirements consistently.
Firstly, if the QM is too sketchy that in it self is bad QMS documentation. Most importantly know organization can work successfully with only six manatory procedures.
Secondly, during the interviews you will able to find lack consistency among the procedures/methods employed various workers. This will mean the organization must establish those procedures/work instructions as part of the QMS documentation.
Finally. based on the industry/work experience you should audit the organization. This should ce coupled with the statutory & regulatory requirements the organization must comply with.
Thanks for raising such an interesting issue.
Major B V Naik
 
Thread starter Similar threads Forum Replies Date
Pmarszal ISO 19011:2018 - Risk Based Approach for planning, conducting and reporting of internal audits Internal Auditing 8
dubrizo Internal Audit Value - What is the point of conducting internal audits to a checklist Internal Auditing 40
M Conducting Limited Internal Audits of QMS Elements - Simple question I hope ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
D Anyone use an iPad for conducting Audits? Internal Auditing 18
D Forms and Templates used for Conducting Internal Audits (API Q1/TS 29001) Oil and Gas Industry Standards and Regulations 5
Marc Conducting Internal Audits vs. Third Party (Registrar) Audits Internal Auditing 11
M Lean: Conducting Capacity Study, calculating Cycle times on laser cutting machines Lean in Manufacturing and Service Industries 2
atitheya Need of conducting medical trials in European Union EU Medical Device Regulations 2
M Informational IMDRF draft document – Requirements for Regulatory Authority Recognition of Conformity Assessment Bodies Conducting Medical Device Regulatory Reviews Medical Device and FDA Regulations and Standards News 0
T Results from conducting a Capability Studies Statistical Analysis Tools, Techniques and SPC 4
P Suggestions on conducting Internal Audit of a new site Internal Auditing 15
S Conducting an MSA study for ICT(HP3070) and Functional Testing Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 3
Q AS9100 Repairs - Approval from a non-aerospace customer prior to conducting a repair AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 14
M Conducting a Project for Safety Improvement Misc. Quality Assurance and Business Systems Related Topics 4
A Is conducting of all MSA studies required, even if not required by the customer? IATF 16949 - Automotive Quality Systems Standard 23
B Best Methods for conducting Shadowgraph MSA Studies Quality Manager and Management Related Issues 2
M Sample size when conducting capability analysis with OK and NOK parts Statistical Analysis Tools, Techniques and SPC 3
N Who is responsible for conducting Root Cause investigation? Problem Solving, Root Cause Fault and Failure Analysis 8
H What information do I need to collect when conducting 2nd party audit? General Auditing Discussions 6
drgnrider Suggestions for conducting a Spill Clean-up Exercise Miscellaneous Environmental Standards and EMS Related Discussions 8
O Conducting MSA on Multiple Measurement Mystems Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 1
C What kind of information you provide when conducting QMS Orientation? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 18
G Conducting a Bias Study for a CMM with no Traceable Master or Reference value Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 4
K Conducting ISO 9001:2008 and ISO 14001:2004 New Supplier Audit Supplier Quality Assurance and other Supplier Issues 5
T Conducting the "are all points within the control limits" test when there is no LCL? Statistical Analysis Tools, Techniques and SPC 2
J Need help calculating actual Ppk - Result of % GR&R=11.8% when conducting MSA Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 11
automoto Excel (xlsx) spreadsheet for conducting Type 1 MSA Analysis. Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 23
L Conducting Gap Analysis for ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 4
A Conducting a DOE in Minitab - Improving Surface Finish of an Impeller Using Minitab Software 10
K Advisable Period of Records to be Checked in Conducting an Audit Food Safety - ISO 22000, HACCP (21 CFR 120) 2
B Conducting a study on Hexagon Nuts "turned" on a multi-spindle automatic lathe Statistical Analysis Tools, Techniques and SPC 9
W Conducting Audit and Audit Report in accordance to 21 CFR 820 and ISO 13485 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 13
Q Design of Experiments Using Subgroup Data - Conducting a 2^3 factorial DoE Quality Tools, Improvement and Analysis 6
M Send a Supplier an Audit Plan prior to conducting an audit at their premises? General Auditing Discussions 8
P Suggestions on conducting an Internal Audit on 7.5.1.6 Production Scheduling IATF 16949 - Automotive Quality Systems Standard 2
S Time Study Std/Books that define minimum requirements for conducting time study? Capability, Accuracy and Stability - Processes, Machines, etc. 9
Y Conducting a Mock Recall on a Medical Device Product ISO 13485:2016 - Medical Device Quality Management Systems 6
H Gathering the Data before Conducting GR&R (Gage R&R) Study Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 3
J Conducting Gage R&R - 300 plug gauges - Different diameters - One for each plug gage? Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 10
F Conducting an ISO 9001, Clause 5.xx audit General Auditing Discussions 12
T Conducting an Energy Usage Audit - Seeking template or form Miscellaneous Environmental Standards and EMS Related Discussions 3
P Conducting a MSA - Measurement of plaster by use of a scoop - I need Help Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 6
A Goods-In Process Audit - Any pointers or hints for conducting a 'good' audit? Process Audits and Layered Process Audits 3
J ISO 9001 'Compliant' Company - Conducting a supplier audit on a major supplier Supplier Quality Assurance and other Supplier Issues 17
L Conducting general overview training on ISO 14001 Training - Internal, External, Online and Distance Learning 1
lanley liao How to understand this words that the planning of internal audit shall take into consideration the results of previous audits? Oil and Gas Industry Standards and Regulations 10
J External third party audits Registrars and Notified Bodies 1
B How many nonconformances have you received on average during IATF audits? General Auditing Discussions 24
M ISO13485:2016, MDSAP and Internal Audits ISO 13485:2016 - Medical Device Quality Management Systems 8
G 0 non conformities in registrar audits over 4 years Management Review Meetings and related Processes 12

Similar threads

Top Bottom