Internal Audit requirements in a One Man Shop

B

bfullam

#1
I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:

- How do you perform / or do you need to perform internal audits for a one man shop since you aren't supposed to audit yourself or the processes you work on regularly?

- As part of the ISO 9001:2008 requirement he needs to have training records. Again, this is a one man shop. Does he train himself and fill out a training record form?

- For management review he fills out a sheet with what he reviewed and the agenda he followed, but again its just him.

Any help/guidance would be appreciated.
 
Elsmar Forum Sponsor
#2
I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:

- How do you perform / or do you need to perform internal audits for a one man shop since you aren't supposed to audit yourself or the processes you work on regularly?

- As part of the ISO 9001:2008 requirement he needs to have training records. Again, this is a one man shop. Does he train himself and fill out a training record form?

- For management review he fills out a sheet with what he reviewed and the agenda he followed, but again its just him.

Any help/guidance would be appreciated.
Yes, someone needs to audit. You aren't supposed to audit your own work which is why you need to have someone else do the audits. Training isn't required, competency is. Training is only necessary of that's the action determined to be needed. Let's say if a new machine controller needs to be bought and maybe have the machine builder "train" the owner on how to program it.

This is where it's better to have someone do the management review to be worthwhile, more than simply following an agenda and signing a piece of worthless paper.
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#3
I am doing some consulting for a company who is really a one man shop. He is registered to ISO 9001:2008 and a few questions came up:
Any help/guidance would be appreciated.
As the organization is already certified, according to your post, he should continue on doing exactly what he has done so far. After all, if he was not able to demonstrate compliance with those aspects of the standard, he couldn't have achieved certification. Or am I missing something?
 
B

bfullam

#4
Yes, you are missing something and I apologize I forgot to add that in. When he was originally certified he had two or three people in the organization. Since then his business partner passed away and it is just him now. He is up for recertification and the auditor has explained that he needs him to update his quality manual and policies to reflect the current business practices.
 
B

bfullam

#5
When you say have someone do the management review, do you mean have an outside group/person do the management review with him?
 

Colin

Quite Involved in Discussions
#6
As the organization is already certified, according to your post, he should continue on doing exactly what he has done so far. After all, if he was not able to demonstrate compliance with those aspects of the standard, he couldn't have achieved certification. Or am I missing something?
Sidney, I can't imagine what you are implying!:D
 
#7
Yes, you are missing something and I apologize I forgot to add that in. When he was originally certified he had two or three people in the organization. Since then his business partner passed away and it is just him now. He is up for recertification and the auditor has explained that he needs him to update his quality manual and policies to reflect the current business practices.
It's a bit more than that - but perhaps the auditor was avoiding the criticism:popcorn: of "consulting" which many people just love to make a big deal...
 
#8
When you say have someone do the management review, do you mean have an outside group/person do the management review with him?
Yes. It's a practical impossibility to run a management system as one person. Since this owner has to find an internal auditor, why not also have that person - if they are competent - prepare everything that's needed to be reviewed with the owner. You're consulting with them? Aren't you aware this is an option?
 
B

bfullam

#9
Yes. It's a practical impossibility to run a management system as one person. Since this owner has to find an internal auditor, why not also have that person - if they are competent - prepare everything that's needed to be reviewed with the owner. You're consulting with them? Aren't you aware this is an option?
Thank you for the reply AndyN. In fact the very first thing that popped into my head when I sat down with the owner was how it would be impossible to audit yourself. I should have noted in my very first post that this is my first time dealing with a company of 1, so I have never run across the situation where you needed to look to the outside for "internal" audits or management review.

I do appreciate your feedback and support.
 
Thread starter Similar threads Forum Replies Date
P IATF 16949 - Internal Audit Frequency Requirements Internal Auditing 2
S Internal Audit Man-days requirements using IAF MD9 General Auditing Discussions 2
X Internal Audit Trainer Qualifications Requirements (TS 16949) IATF 16949 - Automotive Quality Systems Standard 7
M ISO 13485 Audit Questions - Internal Auditor Training and other Requirements ISO 13485:2016 - Medical Device Quality Management Systems 10
F Internal Audit quiz - Auditor Qualifications and Requirements Internal Auditing 34
R Internal Audit Scope Requirements - Audit Nonconformance ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
E Internal Audit Requirements of an ISO 14001 system ISO 14001:2015 Specific Discussions 4
J Current Internal Audit Requirements Internal Auditing 7
C ISO/TS16949 Requirements for Internal Audit Trainer IATF 16949 - Automotive Quality Systems Standard 10
B Internal Audit Requirements for ISO 9001 Registration ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
P Can an outside consultant audit all the AS9100 requirements including Internal Audit? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 24
F Changing the Frequency of Internal Audits - ISO/TS 16949 Internal Audit Requirements Internal Auditing 5
M Interpreting AS9100 Clause 8.2.2 Internal Audit Requirements Internal Auditing 28
S Internal Audit Closure Certification Report - FDA Requirements US Food and Drug Administration (FDA) 5
J AS9100 Rev C Internal Audit Procedure/Plan - Addressing 8.2.2 - Customer Requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
T ISO/TS 16949:2009 Internal Audit Requirements - Your Interpretation Internal Auditing 31
O Internal Audit of Customer Specific Requirements Checklist - Where to start? Internal Auditing 9
M Typical requirements for Internal Audit Lead Auditors Internal Auditing 5
S What Statutory & Regulatory Requirements can an ISO 9001 internal auditor audit Internal Auditing 15
P ISO/TS 16949 Internal Audit Requirements Internal Auditing 9
I Remote Location Internal Audit Requirements - TS 16949 IATF 16949 - Automotive Quality Systems Standard 16
D ISO 14001 Internal Audit Requirements Internal Auditing 24
W Certified/Registered vs. Compliant only - Internal Audit requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
S Use of VDA 6.3 to meet TS Internal Audit requirements General Auditing Discussions 2
Q ISO 17011 (Conformity assessment - General requirements..) Internal Audit Tips wanted Internal Auditing 12
A Internal Auditing - AS9100 Followup Audit Requirements Internal Auditing 4
R Chrysler CSR November 2007 - Internal Audit Requirements Customer and Company Specific Requirements 35
E To conduct ISO 17025 Internal Audit - Auditor Requirements ISO 17025 related Discussions 10
R Internal Audit Requirements - All clauses and subclauses covered over the audit cycle Internal Auditing 9
E ISO/TS 16949 Internal Audit requirements for shifts Internal Auditing 10
K ISO 14001 Internal Compliance Audit - 5.2 "...other identified requirements to..." Internal Auditing 3
S Internal Audit requirements for TS16949 Internal Auditing 1
P TS 16949 Internal Audit Requirements - What to cover in each shift? Internal Auditing 13
C Internal Audit Schedule - Documentation requirements for Internal Audits Internal Auditing 10
H VDA 6.1 - 3.1 Internal Audit Requirements vs. QS-9000 IA Requirements VDA Standards - Germany's Automotive Standards 6
J QS-9000 Internal Audit Training Requirements Internal Auditing 4
Marc ISO9000 Internal Audit Requirements Internal Auditing 2
U Internal Auditor not trained but done Audit for some process Nonconformance and Corrective Action 5
B Looking for 10 Internal Audit Online Training Participants ISO 17025 related Discussions 2
H AS9100 Checklist for Internal Audit needed AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
A What are the pros and cons of using an audit software for internal auditing? General Auditing Discussions 7
F Internal Audit before Pre-Assessment ISO 17025 related Discussions 2
Q Internal audit plan template Internal Auditing 6
L Internal audit during COVID-19 restrictions ISO 13485:2016 - Medical Device Quality Management Systems 5
O ISO13485 implementation - Are internal audits expected before stage 1 audit? Design and Development of Products and Processes 3
B Using Unreleased Documents & Process Maps for Internal Audit purposes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
N Small Company - Internal audit process - Who does the audit? Internal Auditing 16
J Does anyone have an excel IATF 16949 Internal Audit checklist I could use? IATF 16949 - Automotive Quality Systems Standard 7
G Addressing Non-Conformances from an Internal Audit that are not product related ISO 13485:2016 - Medical Device Quality Management Systems 11
S Internal audit discrepancy - We missed a few audits that were scheduled Internal Auditing 12

Similar threads

Top Bottom