Could I issue major finding for Inadequate Procedures

SGquality

Quite Involved in Discussions
#1
I performed a supplier audit for ISO 9001 requirements. The supplier has established a QMS compliant to ISO 9001 but is not certified. Whilst, the procedures are in place, they are deficient and do not "fully" meet the ISO 9001 requirements. For example, the internal audit procedure does not state requirements for internal auditors, does not state that the auditors can not audit their own work etc. Then in the Management Review procedure, the review inputs and review outputs are not defined.

Under these circumstances, as the supplier is not ISO 9001 certified, would these be considered as minor findings ?

Please advise.
 
Elsmar Forum Sponsor

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#2
Re: Could I issue major finding ?

Good day SGquality,

Do you require your suppliers to be ISO 9001 registered in order to be approved?

When I audit as a 3rd party, my issuance of majors is based on a complete absence of controls and conformity within a particular element group. Partial gaps result in minors unless they are judged likely to imminently allow bad product going to customer (you).

Certainly internal auditor qualifications are worth attention. Did their lack of education/skill result in ineffective audits? What is the basis of your perspective?

Are the management reviews including all the required parts, despite the procedure not defining this requirement?

I would like to understand these things before commenting further.
 
Q

QAMTY

#3
Re: Could I issue major finding ?

Being certified or not the severity of nc are the same.
On the other hand,it seems that this system is full of non conformities,depending on the quantity of ncs you may decide to stop the audit not wasting time on that, informing that the system does not meet the main requirements of the ISO.
Hope this helps
 

SGquality

Quite Involved in Discussions
#4
Re: Could I issue major finding ?

Thanks for your responses.

Do you require your suppliers to be ISO 9001 registered in order to be approved?

Certainly internal auditor qualifications are worth attention. Did their lack of education/skill result in ineffective audits? What is the basis of your perspective?

Are the management reviews including all the required parts, despite the procedure not defining this requirement?
No, our organization does not require this supplier to be ISO 9001 certified.

Internal audits are performed by competent personnel however the procedure does not mandate any requirements. Likewise, the management review procedure does not state the review inputs and review outputs and hence not discussed. Most of the management review meetings are towards addressing production related issues.

Being certified or not the severity of nc are the same. On the other hand,it seems that this system is full of non conformities,depending on the quantity of ncs you may decide to stop the audit not wasting time on that, informing that the system does not meet the main requirements of the ISO. Hope this helps
This supplier is not required to be ISO 9001 certified by my organization. The supplier is a small machining shop, and the President said that they want to have QMS elements in place without going through the cost of certification which is not mandated by most of their customers. The supplier was very receptive to all my findings and showed full commitment ton address all my findings.
 

Ronen E

Problem Solver
Staff member
Moderator
#5
Re: Could I issue major finding ?

Why did you hold the audit in the first place? Were you having issues with that supplier? Is it a long standing supplier? What is their track record?
 
Q

QAMTY

#6
Re: Could I issue major finding ?

Well,it depends on you to continue the relationship with this supplier, if you determine that the iso compliment is not your requirement and /or the product you receive is in full control,then you perform a normal audit and send the report of nonconformities waiting from him a compromise to solve the ncs found.
Many companies work in this way, I mean work with non certified companies until there this is a requirement , it may be possible that you may be requested that your suppliers must be ISO certified,then at that moment you evaluate the action to be taken.
Regards
 

Golfman25

Trusted Information Resource
#7
Since it is a supplier audit ditch the ISO requirements and audit to what your company thinks is important. Don't worry about major/minor. Focus on what really needs attention to meet your needs. It's a small shop. Do you really think that stating auditor requirements on a piece of paper will matter? Or do you really thimk top management, the president, is detached so that he isn't doing effective reviews of inputs/outputs?
 

howste

Thaumaturge
Super Moderator
#8
I performed a supplier audit for ISO 9001 requirements. The supplier has established a QMS compliant to ISO 9001 but is not certified. Whilst, the procedures are in place, they are deficient and do not "fully" meet the ISO 9001 requirements. For example, the internal audit procedure does not state requirements for internal auditors, does not state that the auditors can not audit their own work etc. Then in the Management Review procedure, the review inputs and review outputs are not defined.

Under these circumstances, as the supplier is not ISO 9001 certified, would these be considered as minor findings ?

Please advise.
As I read your post, three things immediately jump to my mind:

1) I don't see anything in your post that requires them to conform with ISO 9001 requirements at all. You say that they don't need to be certified, but you don't say what QMS requirements your company contractually (PO, supplier agreements, etc.) have imposed. Without a requirement there is NO nonconformity. You said you were auditing them to ISO 9001, but unless it's required in some way, you're just there consulting.

2) ISO 9001 does not require the internal audit procedure to state requirements for internal auditors. To conform to ISO 9001 they do need to be determined somewhere in the system, but not necessarily in the procedure. Same with the management review inputs and outputs. They're not required to be defined in a procedure. As long as they are included in the review (as evidenced in records) they meet ISO 9001 requirements.

3) "Major" and "minor" classifications have no meaning unless their significance is defined. For supplier audits "major" sounds scary, but what does it mean in your system? Does the supplier need to react differently to a major NC vs. a minor NC? Have you told the supplier what it means?

In order to really understand the situation with your supplier, we need to know what your organization requires of your supplier. Without the requirements defined, we don't know what they were supposed to do. Show us some shalls, and we can probably help.
 

Randy

Super Moderator
#9
The answer fully depends on the agreed to audit criteria.

1) What is required to be done?

2) Is it being done?

Everything else is bull. Either agreed to "requirements" (criteria) are being accomplished or they aren't. It's that simple
 
J

JoShmo

#10
I performed a supplier audit for ISO 9001 requirements. The supplier has established a QMS compliant to ISO 9001 but is not certified. Whilst, the procedures are in place, they are deficient and do not "fully" meet the ISO 9001 requirements. For example, the internal audit procedure does not state requirements for internal auditors, does not state that the auditors can not audit their own work etc. Then in the Management Review procedure, the review inputs and review outputs are not defined.

Under these circumstances, as the supplier is not ISO 9001 certified, would these be considered as minor findings ?

Please advise.
I think you may be making more of your "interpretations" of the ISO 9001 requirements than being objective. You cannot issue a "major" on subjectivity like this. You mention they are deficient, but where does it say IN THE STANDARD that these have to be in their documents?
 
Thread starter Similar threads Forum Replies Date
G Dangerous Act - Auditor says major nonconformance for safety (risk) issue Occupational Health & Safety Management Standards 21
R Do we need issue ECN (Engineering Change Notice) towards updated Material Specification? Design and Development of Products and Processes 2
R Problem solving activity - Three hours to fix the issue Manufacturing and Related Processes 14
I Reissuing documents due to missing version / issue numbers Document Control Systems, Procedures, Forms and Templates 3
Marc Fuel tank issue (FOD) hits Boeing’s 737 MAX - Feb 2020 World News 16
F Struggling with a root cause analysis - Customer Returns - Escape issue Problem Solving, Root Cause Fault and Failure Analysis 15
Ron Rompen 2D matrix issue - Parts (machined steel) returned from the customer Design and Development of Products and Processes 0
G PolyWorks Alignment Issue - How to align the part General Measurement Device and Calibration Topics 1
M Accredited Calibration Sevice Provider using computerized system to issue calibration certificate Qualification and Validation (including 21 CFR Part 11) 3
M Accredited Calibration Sevice Provider using computerized system to issue calibration certificate General Measurement Device and Calibration Topics 2
A External Auditor issue with Internal Audits Internal Auditing 7
V Every good documentation practice observation is an data integrity issue US Food and Drug Administration (FDA) 7
V What is the criteria to cite an good documentation practices observation as an data integrity related issue US Food and Drug Administration (FDA) 6
A Domain of the component (EASA CM No.: CM-SWCEH-001 Issue 01 Revision 02) Point 9.3.3 (Usage domain aspects) EASA and JAA Aviation Standards and Requirements 0
B How to reply NCR on ineffectiveness of corrective action during IATF external audit? This is repeated issue whereby some mistake was done. IATF 16949 - Automotive Quality Systems Standard 7
J Control of nonconforming product issue (AS91000) AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 7
C TL-9000 Certifying Body Issue - Auditor failed to find an issue for 10 years TL 9000 Telecommunications Standard and QuEST 16
E Determining what is good and what is bad can be subjective - when is it a quality issue? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
Ed Panek Sensitive Supplier Issue - Single source supplier ISO 13485:2016 - Medical Device Quality Management Systems 6
B NB won't issue CE Certificate or return phone calls CE Marking (Conformité Européene) / CB Scheme 3
A Drawing Issue with Supplier - xb file did not match that of the pdf drawing Nonconformance and Corrective Action 4
J MAG 6 and EASA Part-145 Issue 005. EASA and JAA Aviation Standards and Requirements 0
A ISO/IEC 27001 - Issue during implementation of system IEC 27001 - Information Security Management Systems (ISMS) 3
M Saturated salts issue - Humidity Chamber General Measurement Device and Calibration Topics 5
N Do I need to approach galvanized steel sheet flatness issue with DOE? Problem Solving, Root Cause Fault and Failure Analysis 9
Sidney Vianna ASQ apparently doesn't know ISO does not issue ISO 9001 certificates? ASQ, ANAB, UKAS, IAF, IRCA, Exemplar Global and Related Organizations 4
D Can an AS9100 auditor issue an NCR a month after the audit? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 6
K Class II Medical Device Compatibility Issue - Removal or Market withdrawal? US Food and Drug Administration (FDA) 2
J Can you stock parts without an 8130 and issue one at time of sale? Federal Aviation Administration (FAA) Standards and Requirements 2
R How many Corrective Action Request can be Issued by DCMA for a single issue? Nonconformance and Corrective Action 2
K NCR or CA? We're taking any issue we have and saying its a nonconformance Nonconformance and Corrective Action 11
R DCMA QAR Service Issue - Resident Inspectors absent from the plant AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
R Wet Signature Document Attachments in SAP - Risk on Data Integrity issue? Records and Data - Quality, Legal and Other Evidence 6
Mikishots Definition Issue - "Issue" vs. "Risk" in ISO 9001:2015 and AS9100 Rev D (Definitions) Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 2
F Power Cord Length Issue - Medical Device Electrical Safety IEC 60601 - Medical Electrical Equipment Safety Standards Series 2
D Breach of Contract from Registrar (Auditor Payment Issue) Registrars and Notified Bodies 18
T EASA TAG Block 11 Status/Work issue Quality Manager and Management Related Issues 1
M Issue with CAPA system - Should Over Due CAs warrant a CAPA? Nonconformance and Corrective Action 17
G IEC 60601-1-2 Sample Size issue Other Medical Device Related Standards 1
M Repeatability issue in Gage R&R study for inner diameter of a bushing Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 16
G Out of Dimensional Tolerance - MRB Audit Issue Nonconformance and Corrective Action 11
P Cross Section Issue - Dissecting a plastic part for measurement Manufacturing and Related Processes 4
R Supplier Process Review and Issue Communication SOP/Form help wanted Supplier Quality Assurance and other Supplier Issues 4
L Excel 2013 file issue - Information in the drop down menu disappears Excel .xls Spreadsheet Templates and Tools 2
J Clear Zinc Plating Corrosion issue...Need some education Manufacturing and Related Processes 4
T Excel Conditional Format Issue Excel .xls Spreadsheet Templates and Tools 16
W Profilometer Surface Roughness Tester Issue - Ball Bearings ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
N Documents in different languages - Revision and Issue Number Document Control Systems, Procedures, Forms and Templates 7
M Management Commitment signature issue in same Quality Manual Quality Management System (QMS) Manuals 8
S Does Contract Manufacturer need to issue Food Grade certificate for finished device? US Food and Drug Administration (FDA) 1

Similar threads

Top Bottom