Internal Audit requirements in a One Man Shop

B

bfullam

I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:

- How do you perform / or do you need to perform internal audits for a one man shop since you aren't supposed to audit yourself or the processes you work on regularly?

- As part of the ISO 9001:2008 requirement he needs to have training records. Again, this is a one man shop. Does he train himself and fill out a training record form?

- For management review he fills out a sheet with what he reviewed and the agenda he followed, but again its just him.

Any help/guidance would be appreciated.
 

AndyN

Moved On
I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:

- How do you perform / or do you need to perform internal audits for a one man shop since you aren't supposed to audit yourself or the processes you work on regularly?

- As part of the ISO 9001:2008 requirement he needs to have training records. Again, this is a one man shop. Does he train himself and fill out a training record form?

- For management review he fills out a sheet with what he reviewed and the agenda he followed, but again its just him.

Any help/guidance would be appreciated.

Yes, someone needs to audit. You aren't supposed to audit your own work which is why you need to have someone else do the audits. Training isn't required, competency is. Training is only necessary of that's the action determined to be needed. Let's say if a new machine controller needs to be bought and maybe have the machine builder "train" the owner on how to program it.

This is where it's better to have someone do the management review to be worthwhile, more than simply following an agenda and signing a piece of worthless paper.
 

Sidney Vianna

Post Responsibly
Leader
Admin
I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:
Any help/guidance would be appreciated.
As the organization is already certified, according to your post, he should continue on doing exactly what he has done so far. After all, if he was not able to demonstrate compliance with those aspects of the standard, he couldn't have achieved certification. Or am I missing something?
 
B

bfullam

Yes, you are missing something and I apologize I forgot to add that in. When he was originally certified he had two or three people in the organization. Since then his business partner passed away and it is just him now. He is up for recertification and the auditor has explained that he needs him to update his quality manual and policies to reflect the current business practices.
 
B

bfullam

When you say have someone do the management review, do you mean have an outside group/person do the management review with him?
 

Colin

Quite Involved in Discussions
As the organization is already certified, according to your post, he should continue on doing exactly what he has done so far. After all, if he was not able to demonstrate compliance with those aspects of the standard, he couldn't have achieved certification. Or am I missing something?

Sidney, I can't imagine what you are implying!:D
 

AndyN

Moved On
Yes, you are missing something and I apologize I forgot to add that in. When he was originally certified he had two or three people in the organization. Since then his business partner passed away and it is just him now. He is up for recertification and the auditor has explained that he needs him to update his quality manual and policies to reflect the current business practices.

It's a bit more than that - but perhaps the auditor was avoiding the criticism:popcorn: of "consulting" which many people just love to make a big deal...
 

AndyN

Moved On
When you say have someone do the management review, do you mean have an outside group/person do the management review with him?

Yes. It's a practical impossibility to run a management system as one person. Since this owner has to find an internal auditor, why not also have that person - if they are competent - prepare everything that's needed to be reviewed with the owner. You're consulting with them? Aren't you aware this is an option?
 
B

bfullam

Yes. It's a practical impossibility to run a management system as one person. Since this owner has to find an internal auditor, why not also have that person - if they are competent - prepare everything that's needed to be reviewed with the owner. You're consulting with them? Aren't you aware this is an option?

Thank you for the reply AndyN. In fact the very first thing that popped into my head when I sat down with the owner was how it would be impossible to audit yourself. I should have noted in my very first post that this is my first time dealing with a company of 1, so I have never run across the situation where you needed to look to the outside for "internal" audits or management review.

I do appreciate your feedback and support.
 
Thread starter Similar threads Forum Replies Date
L Documenting internal audit of customer specific requirements IATF 16949 - Automotive Quality Systems Standard 11
J Outsourced Internal Audit requirements for Aerospace Suppliers AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 21
P IATF 16949 - Internal Audit Frequency Requirements Internal Auditing 2
S Internal Audit Man-days requirements using IAF MD9 General Auditing Discussions 2
X Internal Audit Trainer Qualifications Requirements (TS 16949) IATF 16949 - Automotive Quality Systems Standard 7
M ISO 13485 Audit Questions - Internal Auditor Training and other Requirements ISO 13485:2016 - Medical Device Quality Management Systems 10
F Internal Audit quiz - Auditor Qualifications and Requirements Internal Auditing 34
R Internal Audit Scope Requirements - Audit Nonconformance ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
E Internal Audit Requirements of an ISO 14001 system ISO 14001:2015 Specific Discussions 4
J Current Internal Audit Requirements Internal Auditing 7
C ISO/TS16949 Requirements for Internal Audit Trainer IATF 16949 - Automotive Quality Systems Standard 10
B Internal Audit Requirements for ISO 9001 Registration ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
P Can an outside consultant audit all the AS9100 requirements including Internal Audit? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 24
F Changing the Frequency of Internal Audits - ISO/TS 16949 Internal Audit Requirements Internal Auditing 5
M Interpreting AS9100 Clause 8.2.2 Internal Audit Requirements Internal Auditing 28
S Internal Audit Closure Certification Report - FDA Requirements US Food and Drug Administration (FDA) 5
J AS9100 Rev C Internal Audit Procedure/Plan - Addressing 8.2.2 - Customer Requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
T ISO/TS 16949:2009 Internal Audit Requirements - Your Interpretation Internal Auditing 31
O Internal Audit of Customer Specific Requirements Checklist - Where to start? Internal Auditing 9
M Typical requirements for Internal Audit Lead Auditors Internal Auditing 5
S What Statutory & Regulatory Requirements can an ISO 9001 internal auditor audit Internal Auditing 15
P ISO/TS 16949 Internal Audit Requirements Internal Auditing 9
I Remote Location Internal Audit Requirements - TS 16949 IATF 16949 - Automotive Quality Systems Standard 16
D ISO 14001 Internal Audit Requirements Internal Auditing 24
W Certified/Registered vs. Compliant only - Internal Audit requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
S Use of VDA 6.3 to meet TS Internal Audit requirements General Auditing Discussions 2
Q ISO 17011 (Conformity assessment - General requirements..) Internal Audit Tips wanted Internal Auditing 12
A Internal Auditing - AS9100 Followup Audit Requirements Internal Auditing 4
R Chrysler CSR November 2007 - Internal Audit Requirements Customer and Company Specific Requirements 35
E To conduct ISO 17025 Internal Audit - Auditor Requirements ISO 17025 related Discussions 10
R Internal Audit Requirements - All clauses and subclauses covered over the audit cycle Internal Auditing 9
E ISO/TS 16949 Internal Audit requirements for shifts Internal Auditing 10
K ISO 14001 Internal Compliance Audit - 5.2 "...other identified requirements to..." Internal Auditing 3
S Internal Audit requirements for TS16949 Internal Auditing 1
P TS 16949 Internal Audit Requirements - What to cover in each shift? Internal Auditing 13
C Internal Audit Schedule - Documentation requirements for Internal Audits Internal Auditing 10
H VDA 6.1 - 3.1 Internal Audit Requirements vs. QS-9000 IA Requirements VDA Standards - Germany's Automotive Standards 6
J QS-9000 Internal Audit Training Requirements Internal Auditing 4
Marc ISO9000 Internal Audit Requirements Internal Auditing 2
D Opinions on internal audit schedule adjustment Internal Auditing 15
T AS9100 Internal Audit (Quality System) Program AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
K VDA6.3 as internal audit tool VDA Standards - Germany's Automotive Standards 8
H Internal Audit on Third-Party Logistics (3PL) Warehouse ISO 13485:2016 - Medical Device Quality Management Systems 4
I Internal Audit Questionnaire Oil and Gas Industry Standards and Regulations 15
T AS9100D Risk-Based Internal Audit Schedule AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 10
S Minimum Retention Time for Records of internal audit results as per AS9100 AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
B Establishing topics for IATF internal audit processes Internal Auditing 9
T Robust internal audit program AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 7
J Average number of Nonconformances during internal quality audit for Medical Device Manufacturers Internal Auditing 3
Q AS9100:D Counterfeit internal audit questions AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4

Similar threads

Top Bottom