Internal Audit Concerns including Escalation of Non-Conformances

C

chaosweary

#1
Our company is having our group perform an internal audit whenever anything appears to be wrong with a process instead of managers initiating process improvement projects on their own. My concern is two fold. First is this what the internal audit group should be doing? Secondly if I write up a non conformance to a process and the area manager states that the problem is company wide, is it my job to then find more examples by going out of scope of the audit to write it to upper management or should the manager of the area that the non-conformance is written to be responsibile for escalating the NC for corrective action up the management chain?

Thanks!
 
Elsmar Forum Sponsor
#2
Re: Internal Audit Concerns

Our company is having our group perform an internal audit whenever anything appears to be wrong with a process instead of managers initiating process improvement projects on their own. My concern is two fold. First is this what the internal audit group should be doing? Secondly if I write up a non conformance to a process and the area manager states that the problem is company wide, is it my job to then find more examples by going out of scope of the audit to write it to upper management or should the manager of the area that the non-conformance is written to be responsible for escalating the NC for corrective action up the management chain?

Thanks!
Question # 1 - Not at all! The system is there for management to control changes, not use audits to inspect the system, like we did with product and QC folks.

Question # 2 - I wouldn't go any route involving audit findings. Bring it up at Management Review, instead. You could call it 'Quality Planning':notme:
 
D

DsqrdDGD909

#3
Re: Internal Audit Concerns

Newbie take:
I thought audits were designed to find evidence of conformance not evidence of nonconformance. (not sure I'm stating that correctly). If there's something wrong with a process, I think a corrective action may be more appropriate.
 
Last edited by a moderator:

Stijloor

Staff member
Super Moderator
#4
Re: Internal Audit Concerns

Our company is having our group perform an internal audit whenever anything appears to be wrong with a process instead of managers initiating process improvement projects on their own. My concern is two fold. First is this what the internal audit group should be doing? Secondly if I write up a non conformance to a process and the area manager states that the problem is company wide, is it my job to then find more examples by going out of scope of the audit to write it to upper management or should the manager of the area that the non-conformance is written to be responsibile for escalating the NC for corrective action up the management chain?

Thanks!
Hello chaosweary,

It seems to me that the managers are abdicating their leadership responsibility and are passing the buck to the auditors. That's audit program abuse. I agree with AndyN, that's not what the audit program is for. Using the auditors as "Quality Cops" does not contribute to a positive view of the program.

If you as an auditor write a nonconformity report based on objective audit evidence, then the responsible manager is supposed to take action "without undue delay" rather than giving you the runaround. It is OK to clarify and help the manager understand, but it is not your job to find causes, or listen to "company-wide" problem excuses. The responsible manager must take it from there- escalate or whatever.....

Wishing you lots of strength without frustration.

Stijloor.
 
C

chaosweary

#5
Re: Internal Audit Concerns

Thanks for the insight, what is happening is that we are being sent out to find evidence of non-conformity after my manager has discussions (anecdotal) with managers in other departments. If we don't find anything then our audit skills are criticized...and we get "did you look at...and look at....and look at...". Then trying to handle this kind of grilling calmly and professionally i.e., being a team player.
Escalation of audit findings are still an issue, only the quality manager (my boss) and the VP of Mfg hold quality reviews of the QMS we are not invited to attend. I must now come up with some strategy to keep myself and my fellow auditors out of this witch hunt scenario. I also need to think about how to deal with mid-level managers that want me to escalate issues up while still maintaining good rapport with them (again not pissing them off by just saying no I won't do that). A main contributor to this problem is that our "independent" audit group reports into MFG.:lol:
I mean I can't fault the managers, they want more "value add" out the internal quality system audits. I give them audit report to QMS compliance and suggestions for improvement but now they want me to go back and aggregate them historically and show them the biggest hitters over time (I thought this was the quality managers job). Oh well I keep trying...
 
Last edited by a moderator:
P

potdar

#6
Not an unusual situation that you are finding yourself in. It used to (still does) happen to the quality / HR / IE .. in general all the service or 'cost centre' guys. They end up being ping pong balls or shoulders to fire from for both the management and the profit centre guys. Whatever issues the management and profit centres dont want to tell each other directly, they will try to communicate through the cost centres... Part of the job:(

The solution is to make the management and the auditees confront each other and make them talk directly to each other. As an internal auditor you absolutely should not proceed on a witch hunt on behalf of the management. Just check whatever they have told you to check. Nor should you escalate the findings if the auditee starts pointing his fingers towards a horizontal audit. Thats not in the scope of your audit.:nope:

As an auditor you are very much within your rights to demand a closing meeting. Revise your procedure to insert the provision if necessary. Demand a closing meeting rather than submitting a paper report. Report your findings verbally. Let the auditee and the management state their view to each other face to face and then happily submit your report including a record of the closing meeting.
 
C

curryassassin

#7
Sometimes, an internal audit can be requested by a process owner/dept head if they have made reasonable attempts to isolate the cause or if they are 'concerned' about a process.

In this scenario, instead of sampling during the audit, the internal auditor examines/observes/questions all aspects of the process in an attempt to highlight the root cause(s). I have used this technique previously, when working for a very small org. I used an Ishikawa (fault tree) diagram to pinpoint likely candidates and was able to ID 2 causes, which resulted in effective CAPA.
 
Thread starter Similar threads Forum Replies Date
Q ISO 9001-2015 Internal audit finding Internal Auditing 12
lanley liao How to understand this words that the planning of internal audit shall take into consideration the results of previous audits? Oil and Gas Industry Standards and Regulations 10
A Add MDSAP to Internal Audit Schedule Medical Device Related Regulations 0
J IATF 16949 Internal Audit question - Auditor's responsibility Internal Auditing 6
S IATF 16949 Internal Audit Example IATF 16949 - Automotive Quality Systems Standard 7
R AS9100D internal audit checklist or ISO 9001 2015 to AS9100 D AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
M ISO 13485:2016 internal audit checklist Medical Device and FDA Regulations and Standards News 5
A Internal Audit Questions ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
salaheddine96 Internal audit planning Internal Auditing 2
M ISO 9001 Major Nonconformance Internal Audit Schedule/COVID-19 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 18
E MDR internal audit Internal Auditing 1
U Internal Auditor not trained but done Audit for some process Nonconformance and Corrective Action 5
B Looking for 10 Internal Audit Online Training Participants ISO 17025 related Discussions 2
H AS9100 Checklist for Internal Audit needed AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
A What are the pros and cons of using an audit software for internal auditing? General Auditing Discussions 7
F Internal Audit before Pre-Assessment ISO 17025 related Discussions 2
Q Internal audit plan template Internal Auditing 12
L Internal audit during COVID-19 restrictions ISO 13485:2016 - Medical Device Quality Management Systems 5
O ISO13485 implementation - Are internal audits expected before stage 1 audit? Design and Development of Products and Processes 3
B Using Unreleased Documents & Process Maps for Internal Audit purposes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
N Small Company - Internal audit process - Who does the audit? Internal Auditing 16
J Does anyone have an excel IATF 16949 Internal Audit checklist I could use? IATF 16949 - Automotive Quality Systems Standard 7
G Addressing Non-Conformances from an Internal Audit that are not product related ISO 13485:2016 - Medical Device Quality Management Systems 11
S Internal audit discrepancy - We missed a few audits that were scheduled Internal Auditing 12
Raffy ISO 14001 9.2.2 Internal Audit Programme Content Internal Auditing 10
N Internal Audit Schedule – Who gets to set the schedule? Internal Auditing 16
V IATF 16949 9.2.2.1 Internal Audit Program - "Process Changes" IATF 16949 - Automotive Quality Systems Standard 11
G Non Conformance During ISO 9001 Audit - Not All Internal Audits Completed General Auditing Discussions 19
B Using external FDA and ISO 13485 audit as internal audit Internal Auditing 6
T Internal Audit Schedule when Hiring Out Internal Auditing 7
D ISO 9001:2015 Internal Audit Training Advice Internal Auditing 10
M Internal audit consultant ISO 13485 (English speaker) Consultants and Consulting 3
S Implementing a 45001 Health & Safety standard - Internal audit plan wanted Internal Auditing 1
F Internal Audit - Procedure example Internal Auditing 5
C Internal Audit - Process Clause Matrix / Audit Checklist ISO 13485:2016 - Medical Device Quality Management Systems 7
CPhelan Internal audit - Combine similar nonconformities in one or keep separate? Internal Auditing 6
M Internal Audit Plan in Retail Internal Auditing 10
D Management of NC after internal system audit IATF 16949 - Automotive Quality Systems Standard 7
A Purchasing - Internal Audit Questions Internal Auditing 8
N Comprehensive Compliance Matrix for Internal Audit Checklist Other Medical Device Regulations World-Wide 1
W Where to begin with an ISO 9001:2015 internal audit Internal Auditing 13
D Internal audit forms or checklists for a medical/veterinary laboratory General Auditing Discussions 5
E Informational Internal Audits - Wear multiple hats what can and can't I audit (so I'm not auditing my own work) Internal Auditing 149
E ISO 9001:2015 - Internal Audit Plan Clauses General Auditing Discussions 8
S Internal Audit Checklist for Application/Software development IEC 27001 - Information Security Management Systems (ISMS) 1
S Internal Audit - Risk and Opportunity (ISO 9001:2015 ) Internal Auditing 1
F API Spec Q1 9th Edition Surveillance Audit - Questions about internal audits. Oil and Gas Industry Standards and Regulations 22
Ashland78 IATF 16949 Internal Audit Checklist Manufacturing and Related Processes 11
Ed Panek Root Cause CAPAs from internal audit ISO 13485:2016 - Medical Device Quality Management Systems 16
K Student wanting Case Study about Internal Audit Report Internal Auditing 1

Similar threads

Top Bottom