Documented Information in Internal Audits Process (9.2)

[luismx]

9.2.2 f) states:
"retain documented information as evidence of the implementation of the audit programme and the audit results."

My understanding is that whenever ISO9001 standard mentions "documented information", clause 7.5 applies and those documents must be controlled per 7.5, thus, internal audit programme/schedule, internal audit reports, corrective actions due to internal audit findings, etc. shall be controlled per 7.5, is this correct?

I am being challenged that the key word is "retain" and this means just to have the information in a document but not controlled, in order to be controlled it needs to states "maintain", is this correct?

I have also read "Documented Information" definition in ISO9000:2015 and says:

3.8.6
documented information
information required to be controlled and maintained by an organization and the medium on which it is contained

This is also a reason why I understand that whenever ISO9001 standard mentions "documented information" this means documents must be controlled per ISO9001 clause 7.5.

 

[Big Jim]

You may find some illumination from A.6 in the Annex of ISO 9001:2015. Included there is the explanation that maintained documented information was previously called documents and the retained documented information was previously know as records.

 

[Sidney Vianna]

I am being challenged that the key word is "retain" and this means just to have the information in a document but not controlled, in order to be controlled it needs to states "maintain", is this correct?

​

 

[Big Jim]

9.2.2 f) states:
"retain documented information as evidence of the implementation of the audit programme and the audit results."

My understanding is that whenever ISO9001 standard mentions "documented information", clause 7.5 applies and those documents must be controlled per 7.5, thus, internal audit programme/schedule, internal audit reports, corrective actions due to internal audit findings, etc. shall be controlled per 7.5, is this correct?

I am being challenged that the key word is "retain" and this means just to have the information in a document but not controlled, in order to be controlled it needs to states "maintain", is this correct?

I

You need to control all documented information, both retained (records) and maintained (documents). The controls are likely to be as different between the two now as they were in the 2008 version of the standard.

 

[luismx]

Thanks all for you valuable inputs.