Creating an Internal Audit Schedule

N

noboost4you

#1
Our first IA was conducted by a third party a few weeks ago. Our next audit is our registration audit in August. I'd say our next IA after August would be in 2008 in which we plan on having a third party come in again. Simply because nobody here at the organization is trained to perform any auditing duties.

Nothing is scheduled for 2008 regarding Internal Audits and I know in August, the registrar will want to see some kind of scheduling information regarding Internal Audits.

Any suggestions on how to go about this?
 
Elsmar Forum Sponsor

Colin

Quite Involved in Discussions
#2
Well, if you have a process map of the organisation I'd start by using that to identify the main areas for audit. Decide which are the most important to you as a business and schedule at least 1 per process - perhaps more for the more critical processes. Consider also the results from the previous audits to help you to decide which areas (if any) require any special treatment.

You then need to consider other aspects of the system which may not have been automatically picked up by the process map e.g. management review, and schedule those in too.

One more thing I try to do is a matrix of the audits v the clauses of ISO 9001, just to let me know that all the clauses have been addressed at least once. Some people will point out that this is not essential but I like to do it anyway. It helps the auditor when preparing the audit and also informs the external auditor that the whole standard has been addressed.
 

Stijloor

Staff member
Super Moderator
#3
Our first IA was conducted by a third party a few weeks ago. Our next audit is our registration audit in August. I'd say our next IA after August would be in 2008 in which we plan on having a third party come in again. Simply because nobody here at the organization is trained to perform any auditing duties.

Nothing is scheduled for 2008 regarding Internal Audits and I know in August, the registrar will want to see some kind of scheduling information regarding Internal Audits.

Any suggestions on how to go about this?
I am currently conducting internal audits for one of my Clients. (That makes me a 3rd party, I believe..). I had a planning meeting with the management staff, and we developed an audit schedule for the next 6 months. For logistics and resource reasons, all scheduled audits are about 4 hours in duration, and it will take me 8 visits to complete a first cycle of internal audits. A trained member of top management will audit the audit process (auditors shall not audit their own work). The Client is very happy and the CB was pleased with this arrangement.

You may want to arrange for this prior to August with your (contracted) auditor.

Hope this helps a little.

Stijloor.
 
#4
Since you're not required to have any kind of 'calendar' for next year, I'd suggest that you set a 'frequency', say quarterly or monthly, and say in your procedure that you'll select a scope and criteria in the 30 or so days before the audit is to be conducted. Many of my clients have been doing it this way and not had a problem of not having a fully completed plan for a year. Perhaps the only 'fixed' events on that calendar might be an audit of what the registrar will be looking at, a month before their next scheduled surveillance.
 
N

noboost4you

#5
Well I imagine our IA in 2008 will be very similar to 2007. We'll contract a third party to come out 3 days in a row to go through everything. This is why I'm finding it difficult to make a "schedule." Do we know when the next IA in 2008 will be? Not at all and we probably won't know until early next year. At which point the "schedule" will encompass everything surrounding our QMS. It's more cost effective to bring and house the auditor for 3 days rather than a day here and a day there.

We don't plan on contracting our IA forever, but just until some people in the organization get training.

Would a statement stating that until internal personnel receive adequate auditor training, all internal audits (minus the auditing of the process) will be conducted by a third party in which the schedule of areas to be audited will take place during their visit work? Or something along those lines...
 

SteelMaiden

Super Moderator
Super Moderator
#6
We schedule each area (process and/or subprocess) once each year, and then as we audit, we will reschedule an area for later on if we feel we need to because of customer satisfaction issues, internal audit issues, certification audit issues, customer audit issues, or new equipment/practices. This has always worked well for us, and our QMS auditor (registrar) has no problems with it at all. Our audit results (as well as the other criteria) pretty much show that our system works.

On the other hand, our EMS auditor argues with me every time. No nonconformances on it to date, but I can tell that it really chafes her fanny. But, hey, what can she do if she cannot find nonconformances to back her up? (and believe me, she tries). I really feel that our EMS auditor is about 10 years behind the curve compared to QMS. It might just be that the standard is newer, or that there aren't as many registered companies?
 
#7
How do you address the 'status and importance' issue of your audit programme?

I know third party auditors don't often make any deal of this aspect (do they know what it means?) but this is a vitally important link to management getting some value from audits, instead of doing them 'because ISO-says-so".

Doing anything once or twice a year isn't likely to address this requirement......
 
N

noboost4you

#8
How do you address the 'status and importance' issue of your audit programme?

I know third party auditors don't often make any deal of this aspect (do they know what it means?) but this is a vitally important link to management getting some value from audits, instead of doing them 'because ISO-says-so".

Doing anything once or twice a year isn't likely to address this requirement......
And I'm sure we'll audit our processes more frequently when someone here has had auditor training. But until then we are forced to contract a third party. Which, at this point, is more cost effective to have all processes audited in one 3-day visit. I think my Internal Audit Schedule for 2008 will just state a 3-day visit sometime mid-year.
 
#9
And I'm sure we'll audit our processes more frequently when someone here has had auditor training. But until then we are forced to contract a third party. Which, at this point, is more cost effective to have all processes audited in one 3-day visit. I think my Internal Audit Schedule for 2008 will just state a 3-day visit sometime mid-year.
If I were your registrar I'd probably write a nc against the audit program, and a lack of management commitment - for not extending the resources ($$) to either have your internal auditors trained or for paying the contractor to come in more often.............:mg:
 

SteelMaiden

Super Moderator
Super Moderator
#10
Andy, with the level of lack of nonconformities we have set each area with the same importance. This wasn't always so, in the beginning there were areas scheduled twice and even three times. Plus, we review the areas during management reviews to allow for deciding to add extra audits to an area. We have yet to have a year where we stopped at the original "once per year" schedule, we've always identified something to look into another time (or two). So that is how we justify that we are scheduling accrding to "status and importance".
 
Thread starter Similar threads Forum Replies Date
Marc Creating an Internal Audit Program That Works for Your Organization Internal Auditing 0
V Creating an ISO 14001 Internal Audit schedule Internal Auditing 13
A Need help with creating useful, interesting and good internal web site about QMS!!! After Work and Weekend Discussion Topics 5
M Creating interest in being internal auditors Internal Auditing 7
M Fun Quality Stuff - Creating a training plan for new internal auditors Training - Internal, External, Online and Distance Learning 28
M Creating Internal customers within the manufacturing process Statistical Analysis Tools, Techniques and SPC 1
R Accelerated Aging - Creating test samples - Implantable medical device Question Other Medical Device Related Standards 4
L Hazardous Waste - Tips for creating standardized training Miscellaneous Environmental Standards and EMS Related Discussions 2
M Informational Creating a post market surveillance (PMS) system for medical devices – Part 1 Medical Device and FDA Regulations and Standards News 7
J Sample size for creating a data base as a reference to a tested variable Other Medical Device and Orthopedic Related Topics 6
8 Creating Flow and Pull Game Lean in Manufacturing and Service Industries 1
B Main responsibility for Control Plans - creating and maintaining FMEA and Control Plans 15
shimonv Creating a new commercial product based on a modification to an existing product Other US Medical Device Regulations 4
R Creating WIs for a Heavy Civil Engineering Services company Document Control Systems, Procedures, Forms and Templates 19
M Creating a Plant Level Value Stream Map Process Maps, Process Mapping and Turtle Diagrams 1
T IMDS - Creating an MDS out of material and a made item? RoHS, REACH, ELV, IMDS and Restricted Substances 4
D How do I go about creating document logs and registers with the MS Excel Excel .xls Spreadsheet Templates and Tools 2
W ISO9001:2015 - Clause 7.5.2 - Requirements for Creating & Updating Documents ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
K Creating together Standard Definition for Prevention and Detection FMEA FMEA and Control Plans 1
M Creating change / Forcing change within a Company Lean in Manufacturing and Service Industries 7
A Creating a policy to evaluate the Third Party Security IEC 27001 - Information Security Management Systems (ISMS) 4
S Creating goals and objectives with targets and measurables for self-evaluations Management Review Meetings and related Processes 2
L Creating a xlsx Customer Complaint file to track Complaints Excel .xls Spreadsheet Templates and Tools 2
S When creating a 510k, which Guidance Document Wins? Other US Medical Device Regulations 9
P GS1 NHRN AIs - Creating Barcodes for Human Product Other ISO and International Standards and European Regulations 4
O Creating a Tool to Track & Verify Mistake Proofing Devices Document Control Systems, Procedures, Forms and Templates 5
B Any suggestion on creating the best paper plane that can hit a target perfectly? Coffee Break and Water Cooler Discussions 2
P Creating a PPAP document for my Suppliers APQP and PPAP 1
L Any recommendations on software for creating hierarchical workflows ? Misc. Quality Assurance and Business Systems Related Topics 2
AnaMariaVR2 Creating Global Giants from a Culture of Israeli Start-Ups Coffee Break and Water Cooler Discussions 0
R Creating a c-chart spreadsheet to use in my department Excel .xls Spreadsheet Templates and Tools 5
R Inspection Database Picker - Creating an Inspection Report Document Control Systems, Procedures, Forms and Templates 1
P Problem with creating VSM current map Lean in Manufacturing and Service Industries 3
G Creating an Organization Chart - AS9100 AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
L Creating DHF (Design History File) for Medical Device Systems Design and Development of Products and Processes 8
Q Recommendations for criteria on creating a CAPA (Corrective and Preventive Action) ISO 13485:2016 - Medical Device Quality Management Systems 8
C Creating a Multiple Table SQL (Structured Query Language) Query in Minitab Using Minitab Software 10
C Resources for creating Process Validation Procedures Qualification and Validation (including 21 CFR Part 11) 5
B Creating an Audit Mechanism (System/Plan) General Auditing Discussions 3
A Customer Profiles - Creating a Customer 'Profile' for our Top 10 Customers Document Control Systems, Procedures, Forms and Templates 2
M Creating an Index for our Documents - Imaging Millions of Paper Records Document Control Systems, Procedures, Forms and Templates 13
N ISO 9001 based Audit Schedules: Creating and Maintaining - Template wanted General Auditing Discussions 5
P Creating a Traceability Database with Microsoft Access Document Control Systems, Procedures, Forms and Templates 7
V Creating a Cosmetic Inspection Specification for Powder Coated Painted Finished Parts Manufacturing and Related Processes 7
I Difficulty in creating a Quality Manual Quality Management System (QMS) Manuals 4
J Creating an Audit Schedule & Revamping QMS Internal Auditing 18
L How can you capture many positions held without creating a lengthy resume Career and Occupation Discussions 4
Miner Intro to MSA of Continuous Data - Part 10: Creating gauge families Imported Legacy Blogs 10
E Manufacturing Planning - Creating Improvements Misc. Quality Assurance and Business Systems Related Topics 7
R Creating Quality System and using it before it is complete ISO 13485:2016 - Medical Device Quality Management Systems 8

Similar threads

Top Bottom