Internal and external auditor competency to CSR's

#1
Hi was recently audited on our second SV for IATF and was written for not showing auditor competency as it pertains to Customer SPeficis Requirements (CSR's) . Kinds of a difficult area since they are ever-changing other that reviewing with the person performing the audit of the specific area before the audit occurs. Does anyone have any insight or helo on this one?
 
Elsmar Forum Sponsor

Golfman25

Trusted Information Resource
#3
This one completely sucks, written by a no nothing auditor who thinks internal auditors can't read. Like you said, they keep changing and you could have several of them to address. We would review the existing CSRs prior to audit and note any areas we wanted to look at. Auditor came in and said "nope, you have to be trained." So he wanted us to read the CSRs as they where updated and mark it in our training log as being "trained" to the CSR. As if the internal auditors would remember 6-12 months from now during and audit. It was a complete farce, but that's what we did -- everyone was "trained."
 
#4
This one completely sucks, written by a no nothing auditor who thinks internal auditors can't read. Like you said, they keep changing and you could have several of them to address. We would review the existing CSRs prior to audit and note any areas we wanted to look at. Auditor came in and said "nope, you have to be trained." So he wanted us to read the CSRs as they where updated and mark it in our training log as being "trained" to the CSR. As if the internal auditors would remember 6-12 months from now during and audit. It was a complete farce, but that's what we did -- everyone was "trained."
Yeah I can't beleive it at all. I have never been questioned on this and again its the 3rd time being audited to IATF and was never brought up the other two times by the other auditor. Just absolutely makes no sense. Thanks for your feedback. Actually during the audit he kept having me pull up CSR's and checking on them to see if there were any specific CSR he needed to cover... Man
 

Bran

Starting to get Involved
#6
You could have the training be a powerpoint slideshow, explaining what CSRs are, how to use them, and how to locate the latest revisions. Documenting the training that includes the explanation of what they are plus how to use them has satisfied our auditors up to this point.

If you are already down the road of having a "prescribed" approach (example, the CB Auditor says that auditors must read the CSR and sign off on it), it may be worth questioning.
 

Sebastian

Trusted Information Resource
#7
There is 7.2.3 b) where obviously records are not required, but objective evidence must exist.
There is 4.3.2 and 7.5.1.1 d) which shall create an input to individual audit planning.
Looking at reports from full cycle of internal audits, where no NC were issued on CSR, require asking "Do they know there is such a thing as CSR?"`

I wasn't there, I've not seen documents presented, but if I were you, I would ask myself, whether everything really is ok.
 
Last edited:

Mikey324

Quite Involved in Discussions
#8
We have a CSR log. Many of our the specific requirements from our customers are already IATF requirements, but those that are actually specific to a particular customer goes into the log. There is a column showing what processes are impacted by the CSR. So the auditors here check the log to see if there are any applicable CSR's prior to the audit. If so, they audit them as part of their internal audit. This process has work for me for 3 years now.
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#9
but objective evidence must exist.
Agreed. What about interviewing the person managing the internal audit program and the internal auditors themselves about their awareness and knowledge level of the CSR's? That would be MUCH BETTER than expecting a meaningless "record" piece of documented information "blessing" internal auditors as "competent to audit CSR's".

Actually, the typical CB approach to audit the internal audit process of organizations is, overwhelmingly focused on records. There is almost ZERO interaction with the internal auditors in that capacity. CB auditors should be able to observe internal auditors "in action". Maybe, the effectiveness of the internal audit process would improve, then....
 

Sebastian

Trusted Information Resource
#10
Records are not required, but they are an easiest objective evidences.
I've presented example when audit reports are evidence of effective implementation of CSR in internal audit process.
But when NC are not welcomed in organization, it's hard to show it.

3rd party auditors can question it, when CSR are available to them in advance and they made own observations, which don't match internal audit results. When CSR are available only for suppliers, e.g. in case of some Tier-1, it is hard to have own assessment, so they switch to asking during audit "Is there anything about ...?" and focus on CSR training records.

"Rules" section 5.7.1 does not require organization to submit CSR as part of inputs for Certification Body audit planning. Then section 5.7.2 f) requires CB auditor to identify in audit plan, which CSR will be audited. Good.
 
Thread starter Similar threads Forum Replies Date
A External Auditor issue with Internal Audits Internal Auditing 7
R Can a external auditor raise a finding that is already identified in Internal Audit ? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
J Can An External Auditor Also Write The Same Non-Conformance As An Internal Auditor? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
K Can I join External or Online Internal Auditor Courses Apart from my Company...? Training - Internal, External, Online and Distance Learning 4
S External Auditor Findings when an Internal Audit found a Nonconformance Yesterday Document Control Systems, Procedures, Forms and Templates 11
P External Contract Auditor for Internal Quality Audit Internal Auditing 18
W External Consultant as Internal Auditor - Can NC be issued by TS Auditor? Internal Auditing 18
B Internal Auditor Training - Shadowing external auditor? Internal Auditing 18
B Using external FDA and ISO 13485 audit as internal audit Internal Auditing 6
D Necessity of external watchdog next to internal watchdog ISO 14971 - Medical Device Risk Management 1
Ashok sunder How to determine the internal and external issues in ISO 45001 standard? Occupational Health & Safety Management Standards 2
T Relevant internal and external communication - ISO 9001:2015 section 7.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
O Examples of the external and internal issues and their risks and opportunities IATF 16949 - Automotive Quality Systems Standard 2
Y ISO 9001:2015 Cl. 4.1 Note 1 - External and Internal issues ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
Q External/internal issues removed as well? ISO 9001:2015 Cl. 4.1 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
V PPM - Internal PPM / External PPM Quality Manager and Management Related Issues 4
M How to Document Internal & External Communications - Suggestions/examples pls IATF 16949 - Automotive Quality Systems Standard 3
Q Managing Internal/External RNC and Complaints in same Format ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
M Metric/Way to show how Internal DPPM and External DPPM relate to each other Nonconformance and Corrective Action 1
P Is Internal and external audit of Account Department applicable to any ISO standard Internal Auditing 5
M Internal Audit finding versus External Audit finding General Auditing Discussions 2
G Scope of External & Internal Audits General Auditing Discussions 10
D Combining Internal & External Corrective Action Requests Nonconformance and Corrective Action 5
K Free from any Undue Internal and External Pressures - 4.1.5b clarification General Measurement Device and Calibration Topics 2
Z Predicting External PPM Capability from Internal PPM Capability, Accuracy and Stability - Processes, Machines, etc. 1
T ISO 17025 - 4.1.5b Internal/External commercial, financial, and other pressures ISO 17025 related Discussions 3
G Internal vs. External PFMEA Severity Rankings FMEA and Control Plans 12
V Most Common Internal/External Audit Observations on Risk Management ISO 14971 - Medical Device Risk Management 4
S Internal and External Audit Programme Implementation Internal Auditing 6
S How to quantify the Benefits of Internal and External OHS audits? Occupational Health & Safety Management Standards 4
M Internal and External Customer Survey Procedure and Form examples wanted ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
B Critical Action Limits (CAL) for All Internal and External Audit Findings General Auditing Discussions 17
D External Parties performing Internal Audits? TS 16949 Clause 8.2.2 IATF 16949 - Automotive Quality Systems Standard 15
S External or Internal Design Change and Responsibilities Document Control Systems, Procedures, Forms and Templates 3
R ISO 9001 Internal Quality Audit by Consultants (External agency) Internal Auditing 5
D Internal or External PPM form or template wanted Document Control Systems, Procedures, Forms and Templates 5
P Can External Audits by Customer be treated As Internal Audits AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 21
P 7.6.3 Internal or External Laboratory? Measuring instruments used in production IATF 16949 - Automotive Quality Systems Standard 9
E First external audit coming up, do I need to have performed Internal Audits already? Internal Auditing 15
C Document Control for External and Internal Projects (overseas projects) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
A Audit Database that captures internal, external audits - Prime Part 21 manufacturer Quality Assurance and Compliance Software Tools and Solutions 12
P Internal vs. external audit training course differences? Internal Auditing 18
H Internal / External Auditors from the same Field / Section / Group? Internal Auditing 2
R ISO 9001 Internal & External Communication Requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
P How do you decide what is an acceptable Internal and External PPM number? IATF 16949 - Automotive Quality Systems Standard 17
N Handling External Audits with Internal Vacations General Auditing Discussions 101
A External Audit CAR when Internal Audit CAR is in process? General Auditing Discussions 34
F The difference between External Records vs. Internal Records Records and Data - Quality, Legal and Other Evidence 11
N "For Reference Only" - Internal and External Documents Document Control Systems, Procedures, Forms and Templates 14
B Internal Audits save you from Non-Conformances on external audits? General Auditing Discussions 16
Similar threads


















































Top Bottom