Internal Audit for a Design Consultant Company

S

sonice

#1
Hi,
I do not have internal audit background and am trying to find a quick course for auditing.
In the mean time, I have a question. Please help me.
I work for a consultant company that is not ISO certified, I have developed their QMP based on ISO and customer requirements. I need to do internal monthly audits as per client requirement. My company is doing only design work (Civil/structure/mechanical and electrical) not production/ construction work. I need to know what areas I need to do audit for, I am asked to provide audit schedule and i need to know what i need to put in schedule...please provide links, forms or any related help will be appreciated.
thanks in advance!
Lone
 
Elsmar Forum Sponsor

Stijloor

Staff member
Super Moderator
#2
Welcome to The Cove Forums!! :bigwave: :bigwave:

I do not know if there are "quick" courses on auditing, but there's a lot of information about auditing here at The Cove Forums.

If you are familiar with the ISO 9001:2008 Standard, you may have noticed that clause 7.3 Design and Development makes up a big piece of your quality management system.

Here is a post + link from our friend and colleague Somashekar BV that may help you to start thinking and planning. There's a lot more to auditing, but at least it will help you to get started.

Stijloor.
 
J

Jeff Frost

#3
Since ISO 9001 was developed for both manufactures and service providers all requirements of the International Standard apply to your organization unless you can take a Clause 1.2 exclusion. Reread the Standard and replace the word “product” with “service”.
 
J
#4
Hi,
I do not have internal audit background and am trying to find a quick course for auditing.
In the mean time, I have a question. Please help me.
I work for a consultant company that is not ISO certified, I have developed their QMP based on ISO and customer requirements. I need to do internal monthly audits as per client requirement. My company is doing only design work (Civil/structure/mechanical and electrical) not production/ construction work. I need to know what areas I need to do audit for, I am asked to provide audit schedule and i need to know what i need to put in schedule...please provide links, forms or any related help will be appreciated.
thanks in advance!
Lone
While there are certainly courses out there to teach you how to audit, perhaps we can get you started here.

yousay that your system is not certified, but you cuatomer wants you to "audit monthly" - Is this because the customer audited you and wrote you up for not having an audit plan?? I ask because I am not sure why a customer would be requiring you to do internal audits on a monthly basis.

Something smells fishy about this....Anyway - to your needs.

To Prepare for the audits and To determine an audit plan:
First look at your processes.
Pull the policies and procedures and instructions that govern these various processes.
Read these so that you know what the process is suppose to do, what are the inputs and outputs.
Now - depending on the size and complexity of the various processes, determine a "schedule" to audit them. Publish said Schedule so that everyone knows the plan.

To perform the actual audits:
Review the procedures.
Determine some questions you want to ask those you interview. These are bascially asking, what do you do, how do you do it and what are your inputs, what are your outputs etc. you might also ask if they have read the procedures, do they know where they are and so forth....
Basically what you want to do is just move through the process looking to see if everyone knows what to do, is doing it, and if what is actually happening conforms to the documented process procedures.
Document what you see, who you talk to etc.

To complete the audit:
Take your notes with the data and observations and compare it to the documented procedures.
Where they match up is all well and good.
Where they don't match up woudl constitute a Non-conformance based on objective evidence or personal observation.
Write a brief audit report containing both good and bad based on your observations.
This goes to the manager ofthe process for action on any of the findings.
Make sure the manager knows he must respond and in what time frame.

Follow-up:
Make sure that the manager responds with a corrective action and, if necessary do a follow-up audit just to cover this (these) issues of non conformance.
Once you are satisfied that all is well, close out the audit report and file.

Note on the above.....
I've been out of the game for several years now and typed this quickly and from memory. I trust the other denizens here will fill in and/or correct any of my shortcomings above.

The thing to recognize is that auditing is nothing more than checking up and makeing sure that the company (process) is actually doing what it says (procedures) it will do an in the way they say they will do it.
Auditing is simply the "C" in the PDCA cycle....

I hope some of this helps.

Peace
James
 

harry

Super Moderator
#5
.............. I need to do internal monthly audits as per client requirement. My company is doing only design work (Civil/structure/mechanical and electrical) not production/ construction work. ....................
As one who had some experience in this line of business, I would like to note that the word 'audit' is 'alien' to a lot of the people involved. I would suggest that you find out from your client what is their exact purpose or intention.

As most clients are concerned with 'delivery dates', I am suspecting that what they want you to do is to monitor your progress on a monthly basis. In which case, a simple monitoring plan in the form of a checklist or a simple progress report should do. A schedule in this case would be a simple project plan (gantt chart) for the projects concerned.
 
#6
Hi,
I do not have internal audit background and am trying to find a quick course for auditing.
In the mean time, I have a question. Please help me.
I work for a consultant company that is not ISO certified, I have developed their QMP based on ISO and customer requirements. I need to do internal monthly audits as per client requirement. My company is doing only design work (Civil/structure/mechanical and electrical) not production/ construction work. I need to know what areas I need to do audit for, I am asked to provide audit schedule and i need to know what i need to put in schedule...please provide links, forms or any related help will be appreciated.
thanks in advance!
Lone
As has been posted - you won't find a 'quick' audit course to be of any use. Typically they take 2-3 days = 16/24 hours. Beware of anything less or done remotely.
In the mean time, you audit your own QMS, by using the 'process approach'. That means you have to decide what processes of your consultancy should be audited and when. One a month isn't a bad place to start. You should just choose to do an audit/month, then decide what to audit (the scope) a few weeks before. DO not try to put a whole 12 months schedule together - you will be missing the point of 'status and importance' (see 8.2.2)
 
L

lone123

#7
Thanks a lot everyone!
This consultancy has never been audited. There is a new client who is requiring us to submit a QMP and we did it. Next step is to prepare ourself for an audit, end of this month from client.
We did not have any procedures. We adopted some of the client procedures, as allowed by Client.
What I am still unable to understand is, am I suposse to audit that procedures are being followed, and whatelse for a design work? Do I need to specifically mention in my Audit schedule and plan what I am going to audit? What are the contents I need to put in my check sheet, schedule and plan?
Again thanks a lot AndyN, Harry, Jeff Frost, Stijloor and JRKH
Please post any attachment you can share.
Best regards.
 

Helmut Jilling

Auditor / Consultant
#8
As has been posted - you won't find a 'quick' audit course to be of any use. Typically they take 2-3 days = 16/24 hours. Beware of anything less or done remotely.
In the mean time, you audit your own QMS, by using the 'process approach'. That means you have to decide what processes of your consultancy should be audited and when. One a month isn't a bad place to start. You should just choose to do an audit/month, then decide what to audit (the scope) a few weeks before. DO not try to put a whole 12 months schedule together - you will be missing the point of 'status and importance' (see 8.2.2)
I, and several others on the Elsmar Cove, provide very good internal auditor training classes. AndyN is right, it must be at least 2/3 days. You can contact various trainers by private message if you want more info. My training was recently updated and reissued as v.3.0. So far, classes have loved the new approach. I have a small promo I can send you, if you are interested.
 
J
#9
Thanks a lot everyone!
This consultancy has never been audited. There is a new client who is requiring us to submit a QMP and we did it. Next step is to prepare ourself for an audit, end of this month from client.
We did not have any procedures. We adopted some of the client procedures, as allowed by Client.
What I am still unable to understand is, am I suposse to audit that procedures are being followed, and whatelse for a design work? Do I need to specifically mention in my Audit schedule and plan what I am going to audit? What are the contents I need to put in my check sheet, schedule and plan?
Again thanks a lot AndyN, Harry, Jeff Frost, Stijloor and JRKH
Please post any attachment you can share.
Best regards.
Based on what you've written above, my suggestion is that you wait and not try to do an audit of yourself just yet. Let the client perform his audit. While he is there, observe and learn. Ask him these questions.
If your client is aware that this is all new to you, he will likely be quite helpful.

Quality Audits aren't about accusing or hurting or eliminating, they are about learning, and promoting and being helpful. This is generally even more true in a supplier audit. The new client is not interested in eliminating you as a supplier. They just want to assure that you can do the work and comply with certain requirements (like ISO).
And while we've all heard of the occasional "stinker", for teh most part those involved in auditing, and quality in general, are a pretty close knit and helpful fraternity.
So try not to worry.

Just on a hunch I googled "Quality Audit Plan" and came up with THIS. Note that as you start to look it over a window will "pop-up" asking you to subscribe. You can just close that window using the "X" at the upper right corner of the pop-up window.
I also noted at the bottom of the page, links to other pages such as common questions....This might give you more detail than what we can offer in our postings and spur some ideas as to how to proceed.

To you specific questions....
Am I suposse to audit that procedures are being followed, and what else for a design work?
Yes, you audit that procedures are being followed. You should be looking to see that the actual output of the process is the same as the intended output.

Do I need to specifically mention in my Audit schedule and plan what I am going to audit?
Yes - and audit schedule will generally say something like
March - Contract Review
April - Order Entry
....and so on.

What are the contents I need to put in my check sheet?
This would include. The Date, Areas being audited, any procedure numbers and name of the auditor in the header.
This would be followed by the questions leaving space for comments, recording evidence observed etc.

Peace
James
 
#10
To your specific questions....
Am I supposed to audit that procedures are being followed, and what else for a design work?
Yes, you audit that procedures are being followed. You should be looking to see that the actual output of the process is the same as the intended output.

Do I need to specifically mention in my Audit schedule and plan what I am going to audit?
Yes - and audit schedule will generally say something like
March - Contract Review
April - Order Entry
....and so on.
For clarification - the purpose of audit is to verify that the procedures are being followed and are effective...compliance by itself is not enough!

Also, an audit program (plan) is not required to be predicted over 12 months - as I believe I mentioned previously. No-one can plan for something to be audited, based on status and importance, over more than a few months and certainly not 12, and still be accurate! The guidance in ISO 9004 states that audits should be planned flexibly. It's perfectly OK to indicate the frequency of audits and then choose a target days or weeks before...depending on the business issue at hand.
 
Thread starter Similar threads Forum Replies Date
R Internal Audit Frequency - Remote Site (a Design Center) IATF 16949 - Automotive Quality Systems Standard 3
L Auditing Design and Development in ISO 9001 (Internal Audit) Internal Auditing 1
S Internal Design Control Audit ISO 13485:2016 - Medical Device Quality Management Systems 5
S Seeking Internal Audit Plan - Design Responsible Manufacturing company Design and Development of Products and Processes 3
Q ISO 9001-2015 Internal audit finding Internal Auditing 12
lanley liao How to understand this words that the planning of internal audit shall take into consideration the results of previous audits? Oil and Gas Industry Standards and Regulations 10
A Add MDSAP to Internal Audit Schedule Medical Device Related Regulations 0
J IATF 16949 Internal Audit question - Auditor's responsibility Internal Auditing 6
S IATF 16949 Internal Audit Example IATF 16949 - Automotive Quality Systems Standard 7
R AS9100D internal audit checklist or ISO 9001 2015 to AS9100 D AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
M ISO 13485:2016 internal audit checklist Medical Device and FDA Regulations and Standards News 5
A Internal Audit Questions ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
salaheddine96 Internal audit planning Internal Auditing 2
M ISO 9001 Major Nonconformance Internal Audit Schedule/COVID-19 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 18
E MDR internal audit Internal Auditing 1
U Internal Auditor not trained but done Audit for some process Nonconformance and Corrective Action 5
B Looking for 10 Internal Audit Online Training Participants ISO 17025 related Discussions 2
H AS9100 Checklist for Internal Audit needed AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
A What are the pros and cons of using an audit software for internal auditing? General Auditing Discussions 7
F Internal Audit before Pre-Assessment ISO 17025 related Discussions 2
Q Internal audit plan template Internal Auditing 12
L Internal audit during COVID-19 restrictions ISO 13485:2016 - Medical Device Quality Management Systems 5
O ISO13485 implementation - Are internal audits expected before stage 1 audit? Design and Development of Products and Processes 3
B Using Unreleased Documents & Process Maps for Internal Audit purposes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
N Small Company - Internal audit process - Who does the audit? Internal Auditing 16
J Does anyone have an excel IATF 16949 Internal Audit checklist I could use? IATF 16949 - Automotive Quality Systems Standard 7
G Addressing Non-Conformances from an Internal Audit that are not product related ISO 13485:2016 - Medical Device Quality Management Systems 11
S Internal audit discrepancy - We missed a few audits that were scheduled Internal Auditing 12
Raffy ISO 14001 9.2.2 Internal Audit Programme Content Internal Auditing 10
N Internal Audit Schedule – Who gets to set the schedule? Internal Auditing 16
V IATF 16949 9.2.2.1 Internal Audit Program - "Process Changes" IATF 16949 - Automotive Quality Systems Standard 11
G Non Conformance During ISO 9001 Audit - Not All Internal Audits Completed General Auditing Discussions 19
B Using external FDA and ISO 13485 audit as internal audit Internal Auditing 6
T Internal Audit Schedule when Hiring Out Internal Auditing 7
D ISO 9001:2015 Internal Audit Training Advice Internal Auditing 10
M Internal audit consultant ISO 13485 (English speaker) Consultants and Consulting 3
S Implementing a 45001 Health & Safety standard - Internal audit plan wanted Internal Auditing 1
F Internal Audit - Procedure example Internal Auditing 5
C Internal Audit - Process Clause Matrix / Audit Checklist ISO 13485:2016 - Medical Device Quality Management Systems 7
CPhelan Internal audit - Combine similar nonconformities in one or keep separate? Internal Auditing 6
M Internal Audit Plan in Retail Internal Auditing 10
D Management of NC after internal system audit IATF 16949 - Automotive Quality Systems Standard 7
A Purchasing - Internal Audit Questions Internal Auditing 8
N Comprehensive Compliance Matrix for Internal Audit Checklist Other Medical Device Regulations World-Wide 1
W Where to begin with an ISO 9001:2015 internal audit Internal Auditing 13
D Internal audit forms or checklists for a medical/veterinary laboratory General Auditing Discussions 5
E Informational Internal Audits - Wear multiple hats what can and can't I audit (so I'm not auditing my own work) Internal Auditing 149
E ISO 9001:2015 - Internal Audit Plan Clauses General Auditing Discussions 8
S Internal Audit Checklist for Application/Software development IEC 27001 - Information Security Management Systems (ISMS) 1
S Internal Audit - Risk and Opportunity (ISO 9001:2015 ) Internal Auditing 1

Similar threads

Top Bottom