Sorry, what does CAR means (english is not my first language). Conformity A?? Report...?
I agree that if most NCRs (Non Conformity Reports) and OFIs come from auditors, that is a problem.
But I see absolutely no problem having a FEW OFIs coming from offside the organization. Imho, it is HEALTHY, not a non conformity.
It's human nature to have biases, to have traditional ways to do things and to not think "outside the box".
You can´t fight human nature with NCRs and training.
Many times, only those outside the box can think outside the box.
An organization may be creating OFIs but they just aren´t effective or groundbreaking because it's inside the box thinking. So whats the problem if someone from OUTSIDE gives an OFI?
What you can do is TRAIN your people and have good analysis people to check that OFI and see if it's valid for the organization, trying to bias as much away as possible... the same bias that made them not have the idea for such OFI in the first place.
Isn´t one of the purposes of ISO exactly to show how organizations have so many stakeholders? That they are not isolated?
Organizations must listen to stakeholders, including stakeholders from outside the organization. The client being "THE" stakeholder.
And indeed, many OFIs come from outside the organization. If employees should be capable of finding all OFIs possible by themselves, why listen to client feedback?
And if we can listen to client or other stakeholders feedback or suggestions, why not listen, then analyze, review and accept or reject, an Auditor's OFI?