Internal Audit Schedule for Multi-site certificate?

[Univrsl]

We are currently in the midst of big changes... implementing TipQA, and developing an Enterprise level internal audit schedule for our multi-site certificate.

I've searched these forums, found a few things, but not quite what I'm looking for.

I'm looking for an example of an annual schedule that depicts:

Audits that will be common across the enterprise. These may be scheduled concurrently (same month) at all sites (gives a current snapshot)
or periodically but not necessarily concurrently at each site.
These common audits would address the Core Business Processes at each site.

In addition, I need the Enterprise internal audit schedule to reflect those site-unique audits that will be required at each site, allowing time for these as well as the inevitable ad-hoc audits.

Has anyone developed a tool like this that they'd be willing to share?

Thanks!

 

[Jen Kirley]

I am putting something together, but it will not be ready for awhile yet. Could be some months still; scheduling is the easy part - comparing results across sites to show strengths and programmic OFIs would take some doing.

How many sites are you talking about?

 

[Univrsl]

... scheduling is the easy part - comparing results across sites to show strengths and programmic OFIs would take some doing. ...

Ah, so you understand exactly what I'm looking for....

We're tying together 7 sites.

 

[AndyN]

It looks like you are trying to emulate a CB /3rd party audit, have I got that correctly?

I know of other auto parts makers who have plant wide 'pre-CB' audits, but I don't quite see what the benefit is, other than to avoid a CB audit finding - but then each plant had its own IA program, which should have been managed effectively.

Can you share a bit more about how each plants IA is supposed to work, the objectives of this corporate wide audit program?

 

[Univrsl]

No Andy, not trying to emulate 3rd party audit.
Trying to develop one schedule that encompasses all internal audit activity across 7 sites. Each site would audit the core business processes at the 200 level, as well as the 300 level that may be unique to the site level.
Need to view the schedule and see results by schedule, not just by site or process or element.

The key to this schedule is to gage the health of the QMS in the core business processes as well as at the operational level. The envisioned tool should allow the audit manager to drill down to realize most common defect and OFI (another new feature we're implementing, never formally tracked these before) across the system, and to determine if defects/OFIs are focused by site or by function across sites. This then allows the audit manager to adjust audit resources in response to identified trends.
Yeah, it's alot to ask of a "schedule"...

 

[Jen Kirley]

No Andy, not trying to emulate 3rd party audit.
Trying to develop one schedule that encompasses all internal audit activity across 7 sites. Each site would audit the core business processes at the 200 level, as well as the 300 level that may be unique to the site level.
Need to view the schedule and see results by schedule, not just by site or process or element.

The key to this schedule is to gage the health of the QMS in the core business processes as well as at the operational level. The envisioned tool should allow the audit manager to drill down to realize most common defect and OFI (another new feature we're implementing, never formally tracked these before) across the system, and to determine if defects/OFIs are focused by site or by function across sites. This then allows the audit manager to adjust audit resources in response to identified trends.
Yeah, it's alot to ask of a "schedule"...

Ideally I would use the audit findings to lead to more questions such as "Site X has a great many nonconformances with document control, so what's up with that?" It could be that the document control system needs improving, people are not abiding by the process, or the auditors at other sites are not finding the same kinds of things, when they ought to.

That's the potential pitfall, after all. The cross site audit results make assumptions that the auditing is alike and the management systems are alike, and even the cultures are alike. In fact, they could vary quite a lot in ways that impact the findings. So comparing audit results should actually raise more questions than it answers.

 

[AndyN]

No Andy, not trying to emulate 3rd party audit.
Trying to develop one schedule that encompasses all internal audit activity across 7 sites. Each site would audit the core business processes at the 200 level, as well as the 300 level that may be unique to the site level.
Need to view the schedule and see results by schedule, not just by site or process or element.

The key to this schedule is to gage the health of the QMS in the core business processes as well as at the operational level. The envisioned tool should allow the audit manager to drill down to realize most common defect and OFI (another new feature we're implementing, never formally tracked these before) across the system, and to determine if defects/OFIs are focused by site or by function across sites. This then allows the audit manager to adjust audit resources in response to identified trends.
Yeah, it's alot to ask of a "schedule"...

Cool! It looks like you're attempting what I have promoted in many cases. I would, however, offer that you can't do it to a schedule! Yes, there are some parts of the system which may be influenced in their implementation, by predictable circumstances - seasonal variations in staffing, for example.

Other processes aren't so predictable that an annualized plan will help. I'd suggest that a key stimulus to any oversight audits is the business plan and customer feedback data. Otherwise you'll have your auditors turning up to close the gate after the proverbial horse has bolted!

 

[Univrsl]

You're right Jen, and we'll be using TipQA at all sites to load the audit and c/a data so we can get that snapshot view. We'll try to control the site to site variables by using standardized checklists for the core business processes, and assuring through Management that each local QMR feeds up to the enterprise QMR, so we can minimize site to site QMS differences.

Andy, I guess I know that doing all of this via a <schedule> isn't practical... I'm just not satisfied with what I've seen and I'm looking to see what kind of magic someone else has stirred up...
We will of course be using the build schedule and business capture plans as part of our driver/rationale, as well as customer (US Gov't) feedback.

 

[AndyN]

You're right Jen, and we'll be using TipQA at all sites to load the audit and c/a data so we can get that snapshot view. We'll try to control the site to site variables by using standardized checklists for the core business processes, and assuring through Management that each local QMR feeds up to the enterprise QMR, so we can minimize site to site QMS differences.

Andy, I guess I know that doing all of this via a <schedule> isn't practical... I'm just not satisfied with what I've seen and I'm looking to see what kind of magic someone else has stirred up...
We will of course be using the build schedule and business capture plans as part of our driver/rationale, as well as customer (US Gov't) feedback.

I was really excited and then you mentioned 'standardized checklists'............Oh, dear!

 

[Univrsl]

I have an intense dislike for them myself... but that's the direction I've been given, and it may help on the broader scope audits to eliminate auditor-induced variation.
Most of the auditors are new to the multi site concept so these checklists will be a guide for them.

I need to give the checklists a chance to succeed or fail. If I had 8 other clones of me, I'd know what I was getting. As it is, I don't have confidence I could send this group out to audit any one clause of the standard and get consistent results.