Internal audit discrepancy - We missed a few audits that were scheduled


We completed our ISO audit and received a minor for our internal audit schedule. We missed a few audits that was schedule for November and the auditor made it a minor finding. My boss doesn't want us to complete the rest of the internal audit as he feels it is no longer valid since it was a finding and will make it right for 2020. However, I feel like we still need to complete the audit as planned. Is my boss correct about his decision?
Elsmar Forum Sponsor


Trusted Information Resource
I believe the audits have to be completed as part of the 'immediate action' requirements, which is part of the corrective action submission. I come from AS9100 so that standard may have more robust requirements.


Trusted Information Resource
You should still complete those lagging internal audits and gain the detailed information that the external certification audit won't provide on those processes or areas.

It would be quite illogical if the sole purpose of doing internal audits is to ensure you will not have a finding in the external audits. If your boss feels that he can skip these because that finding was made, then likely he does not see any value in internal audits themselves and that would be your first point to clarify with him. He might even be right, as an ISO certification auditor might accept audit reports that are present, and meet the ISO criteria as evidence of audits being conducted in a manner sufficient to meet their requirements. However, these ISO criteria are not based on measuring value to management at all, and thus might completely miss the fact that management does not even really use the outcomes of the internal audits, or only do so to pay lip-service to the ISO certification organization.

How to clarify the value that internal audits can add? That depends on what value management appreciates. One of their possible values is similar to calibrations of equipment.
Internal audits are irregular check-ups on the consistency and control over processes. If your audit finds it is out of the set bounds (procedure) you could state
Then for your current case (missed audits) you could draw the analogy that if you find a calibration that was overdue, you do not wait until when it would have been due again (add 11 months), you catch-up to see whether there were risks.
Sadly this analogy breaks down somewhat as the subjects of internal audits are not as subservient to nature as the subjects of calibrations; going overdue is less clear of a risk as audits do not explicitly declare that a process is good for the next year.
Processes do not drift at any predictable pace like controlled equipment does, but drift is more subject to turn-over of personnel, equipment or organizational changes, management change, etc.. However, often the intervals are set based on the principle 'often enough for (disconnected) expectation of external parties'. These parties likely won't accept the "I did not audit it last year, as they've had good performance the past 3 times and the changes to the influencing factors have been trivial to minor. I spent my auditors' time on more and deeper audits of risk project or process so-and-so due to our new IT system there, and our newly organized team structure there" rationale.

John Broomfield

Staff member
Super Moderator
Ask your boss to define what objective s/he has for the internal audit program so you have top management support (including the required resources) for doing the audits you determine and recommend as necessary to fulfill that objective.

Auditing just to hang on to a certificate may be undermining support for the management system.


Trusted Information Resource
Auditing is an ongoing process. It is not fixed. It is flexible. Next time, when you have an audit scheduled that you can't get to, update your schedule and re-schedule the audit. There should be no issue with rescheduling the missed audits between now and sometime later.


Involved In Discussions
If internal audits were planned and then the plan has not been followed, I would bet that the person responsible for internal audits (probably Quality Manager) has been assigned insufficient authority to push for their performance; I guess that the same person is responsible for performing the audits according to the plan. Full responsibility and insufficient authority make beautiful scapegoat. I don't envy this person.
What's more important, internal audits form the base of feedback loop in improvement process - they provide information where the system can or must be improved. Without information, no corrective action is possible. Management is happy - until someone from outside (auditor or customer) points that something is wrong. Then the management has a convenient scapegoat at hand.

Mike S.

Happy to be Alive
Trusted Information Resource
Since you received a minor I would consider doing the audits part of required correction. If your boss pushes back, ask the auditor -- he will have to approve your CA response.

Ed Panek

QA RA Small Med Dev Company
Trusted Information Resource
Why do you do internal audits? I know standards require them. Since they are required make them value added and not just an exercise to check a box as noted above.

tony s

Information Seeker
Trusted Information Resource
However, I feel like we still need to complete the audit as planned. Is my boss correct about his decision?
Isn't this what caused the nonconformity? Missed what was planned on November? If you defer it early next year, what would be the difference if you complete it on the remaining days of December 2019? Missing an audit schedule should not constitute a nonconformity in the first place. I believe your boss has justifiable reasons to defer it on 2020.
Thread starter Similar threads Forum Replies Date
C How to analyse the internal audit finding in term of discrepancy Internal Auditing 4
H AS9100 Checklist for Internal Audit needed AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
A What are the pros and cons of using an audit software for internal auditing? General Auditing Discussions 4
F Internal Audit before Pre-Assessment ISO 17025 related Discussions 2
Q Internal audit plan template Internal Auditing 6
L Internal audit during COVID-19 restrictions ISO 13485:2016 - Medical Device Quality Management Systems 5
O ISO13485 implementation - Are internal audits expected before stage 1 audit? Design and Development of Products and Processes 3
B Using Unreleased Documents & Process Maps for Internal Audit purposes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
N Small Company - Internal audit process - Who does the audit? Internal Auditing 16
J Does anyone have an excel IATF 16949 Internal Audit checklist I could use? IATF 16949 - Automotive Quality Systems Standard 7
G Addressing Non-Conformances from an Internal Audit that are not product related ISO 13485:2016 - Medical Device Quality Management Systems 11
Raffy ISO 14001 9.2.2 Internal Audit Programme Content Internal Auditing 9
N Internal Audit Schedule – Who gets to set the schedule? Internal Auditing 16
V IATF 16949 Internal Audit Program - "Process Changes" IATF 16949 - Automotive Quality Systems Standard 11
G Non Conformance During ISO 9001 Audit - Not All Internal Audits Completed General Auditing Discussions 19
B Using external FDA and ISO 13485 audit as internal audit Internal Auditing 6
T Internal Audit Schedule when Hiring Out Internal Auditing 7
D ISO 9001:2015 Internal Audit Training Advice Internal Auditing 10
M Internal audit consultant ISO 13485 (English speaker) Consultants and Consulting 3
S Implementing a 45001 Health & Safety standard - Internal audit plan wanted Internal Auditing 1
F Internal Audit - Procedure example Internal Auditing 5
C Internal Audit - Process Clause Matrix / Audit Checklist ISO 13485:2016 - Medical Device Quality Management Systems 7
CPhelan Internal audit - Combine similar nonconformities in one or keep separate? Internal Auditing 6
M Internal Audit Plan in Retail Internal Auditing 10
D Management of NC after internal system audit IATF 16949 - Automotive Quality Systems Standard 7
A Purchasing - Internal Audit Questions Internal Auditing 8
N Comprehensive Compliance Matrix for Internal Audit Checklist Other Medical Device Regulations World-Wide 1
W Where to begin with an ISO 9001:2015 internal audit Internal Auditing 13
D Internal audit forms or checklists for a medical/veterinary laboratory General Auditing Discussions 5
E Informational Internal Audits - Wear multiple hats what can and can't I audit (so I'm not auditing my own work) Internal Auditing 144
E ISO 9001:2015 - Internal Audit Plan Clauses General Auditing Discussions 8
S Internal Audit Checklist for Application/Software development IEC 27001 - Information Security Management Systems (ISMS) 1
S Internal Audit - Risk and Opportunity (ISO 9001:2015 ) Internal Auditing 1
F API Spec Q1 9th Edition Surveillance Audit - Questions about internal audits. Oil and Gas Industry Standards and Regulations 23
Ashland78 IATF 16949 Internal Audit Checklist Manufacturing and Related Processes 11
Ed Panek Root Cause CAPAs from internal audit ISO 13485:2016 - Medical Device Quality Management Systems 16
K Student wanting Case Study about Internal Audit Report Internal Auditing 1
R How far apart can you schedule separate areas or departments in your internal audit? Internal Auditing 4
D Auditing Our Outsourced 2nd-3rd Party Internal Audit Company ISO 13485:2016 - Medical Device Quality Management Systems 6
A API Spec Q1 9th Edition - 12 month Internal Audit Schedule Audit Nonconformance Oil and Gas Industry Standards and Regulations 10
J Microsoft Teams to manage Internal Audit System? Internal Auditing 3
tony s An organization's Internal Audit Office certified to ISO 9001:2015 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 28
Tagin Does ISO 9001:2015 require a full internal audit annually? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 21
S GM/VP softgrading internal audit finding - need feedback from an audit guru! General Auditing Discussions 11
M Internal Audit Assessment Criteria - ISO 13485:2016 Internal Auditing 21
V Process and Internal Audit Criteria matrix wanted Internal Auditing 8
S Internal Audit Completion Memorandum Internal Auditing 2
T Example wanted - Template for internal audit IATF 16949 IATF 16949 - Automotive Quality Systems Standard 1
a_bardi Is it possible to exclude internal audit from qms scope? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
P Quality objectives - must they include CAPA and internal audit topic? ISO 13485:2016 - Medical Device Quality Management Systems 28

Similar threads

Top Bottom