L
We have a consultant do a 3-day ISO 9001 audit once a year. In addition to that, I (Lead Auditor in-house) perform supplemental audits of specific processes/trouble areas throughout the year. These all documented as Internal Audits. We've been ISO certified for years, and our registrar is confident in our existing system.
Once in a while, an employee will take it upon themselves (or a supervisor will ask them) to do a "check" of an area (not one they are responsible for). For example, they will walk through a production area to check revision levels of documents in use to see if they are current, or check the condition of the documents to see if they are torn/stained. Or someone will review the Approved Vendor List to see if the vendors are still active. Random stuff like that. They will document their results in an email or memo to me, but they are not trained internal auditors by any means. I assign Corrective/Preventive actions as necessary.
My plan is to modify our Internal Audit procedure to include these additional "informal internal audits". There won't be any checklist or audit report or interviews involved. Just an email or memo from them to me. And I never know when they are going to take place, so I add them to the schedule "after the fact". Is there any problem with this if I define it in our procedure?
Once in a while, an employee will take it upon themselves (or a supervisor will ask them) to do a "check" of an area (not one they are responsible for). For example, they will walk through a production area to check revision levels of documents in use to see if they are current, or check the condition of the documents to see if they are torn/stained. Or someone will review the Approved Vendor List to see if the vendors are still active. Random stuff like that. They will document their results in an email or memo to me, but they are not trained internal auditors by any means. I assign Corrective/Preventive actions as necessary.
My plan is to modify our Internal Audit procedure to include these additional "informal internal audits". There won't be any checklist or audit report or interviews involved. Just an email or memo from them to me. And I never know when they are going to take place, so I add them to the schedule "after the fact". Is there any problem with this if I define it in our procedure?
