Process based Internal Audits, instead of auditing to the elements of the standard

Helmut Jilling

Auditor / Consultant
#11
Re: Process based Internal Audits, instead of auditing to the elements of the standar

hjilling makes and excellent point concerning the auditing the links. I audit with several other auditors and have gotten in debates as some auditors believe that as part of the process audit the linked areas must be fully audited to all applicable standard clauses as well, which I do not agree with. Then you could be auditing many of the same cross functional areas such as training or purchasing multiple times, with little or no value.

If you followed their logic to the end, you would continue to audit further and further from the process you began with until you had audited the whole system. It would be like pulling a piece of yarn and unraveling the entire sweater. Very inefficient approach.

I argue if you audit each support process thoroughly, then you know how robust each one is. Then, as you audit each core process, you only need to audit the links.
 
Elsmar Forum Sponsor
5

5litre

#12
Re: Process based Internal Audits, instead of auditing to the elements of the standar

So, back to the original question......would I in actuality have audited 3-4 processes in my example? Would this fly with my registrar during a surveillance audit?

And how do you incorporate all the elements of the standard when auditing in this manner? ie: How does this relate to the Quality Policy / Mgmt Review?

Thanks
 

Helmut Jilling

Auditor / Consultant
#13
Re: Process based Internal Audits, instead of auditing to the elements of the standar

So, back to the original question......would I in actuality have audited 3-4 processes in my example? Would this fly with my registrar during a surveillance audit?

And how do you incorporate all the elements of the standard when auditing in this manner? ie: How does this relate to the Quality Policy / Mgmt Review?

Thanks
If the audit records show that all 4 were fully audited, along with the metrics for each, and the links to related core and supporting processes, then, yes, you should be able to take crdeit for auditing 4 processes.

If however, you audited primarily purchasing, and the others were just audited a little to establish the linkages, then you probably only audited Purchasing, per se.
 
#14
Re: Process based Internal Audits, instead of auditing to the elements of the standar

You are quite at liberty to select whatever processes you want to audit, at whatever audit frequency you select - as long as it is based on 'status and importance".......etc.

If you can show auditing has considered the process approach, then I see no problem with being prepared for your upcoming surveillance. You don't have to have a whole calendar of audits scheduled out and you don't have to cover all the requirements every year etc. These are just 'wishes' of your external auditors. I'd suggest they should keep wishing and you can focus your audits on what processes are new/changed or performing poorly to plan.

There's some great guidance in ISO 9004 on this matter.:read:

Have a look for a thread which I posted a 'football' diagram (I'm away from my own computer so can't repost it) and take a look at that. It should help you get grasp of the way a process can be audited. I've even had external auditors recommend this approach to their clients, when they've seen me use it!!:lol:
 

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#15
Re: Process based Internal Audits, instead of auditing to the elements of the standar

So, back to the original question......would I in actuality have audited 3-4 processes in my example? Would this fly with my registrar during a surveillance audit?

And how do you incorporate all the elements of the standard when auditing in this manner? ie: How does this relate to the Quality Policy / Mgmt Review?

Thanks
You would not be auditing all four processes. You'd be auditing how effectively those four processes interact with, or support the original process. So you might visit four people, but three of them only briefly in order to verify their effective parts in handling the sample you drew when you started. If these other three processes are planned to receive their own audits, now isn't the best time. This one action can't really count as auditing all four of them for surveillance purposes unless you drew a large enough sample and were thorough while covering the questions in all these four groups. I would soon feel muddled.

Not every clause can reasonably be covered in every audit. You'd need to plan to ask a minimum of certain questions regarding needed controls such as how nonconformances are handled, how the process owner knows things are going well, traceability, control of documents and records, preservation of product, training and so on. Other questions can regard how well the process is being performed to plan, the outcomes, how managers are informed of problems and their responses, the auditees' awareness levels, and so on. You might want to examine the procedures to see how well they provide the needed plans to maintain compliance and value to the organization--I call that a "desk audit." It plays a part in almost all of my audits, as well as a review of computerized records that verify the process is going according to plan and in compliance to standard(s).

That said, you're not limited to a scope. If you're on a shop floor doing an audit of a certain process, I think it's a fine idea to record PMs, calibration, cleanliness, and safety aspects while you're there. Then, when it's time to audit these processes (planned maintenance, calibration etc) the sample has already been taken and compliance had been verified; you'd only need to audit the processes' management.

This last point is why I think process auditing is a good idea. It gives a chance to find a problem in any one of these contributing areas in between their regularly scheduled audits.

An audit management tool attached in this thread includes a count of the times clauses have been covered in audits. Look way to the right on the spreadsheet.

Management reviews the audit metrics, and other things they find important like nonconformance data. Management is welcome to look at audit reports, but doesn't need to know details of how the audits were done or how the program knows if the standard is completely covered--unless they ask, of course. ;)

I hope this helps!
 
M

madannc

#16
Re: Process Audits

Hello 5litre,

Welcome to the Cove!

There are many great threads and posts about (internal) Process Audits.
Interesting, and oh yes....also emotional and very heated at times....

But to give you some idea; take your example of purchasing.
You could begin by simply asking: "What is required of this process?" What are the objectives of the Purchasing Process? We can call this Input.
Next you could ask: "Did this indeed happen?" Did the Purchasing Process deliver the expected results? We call this Output. If the output meets the input requirements, you could say that this is an effective process. If not, you investigate (audit) the elements that make up this process. You could look at people, information, materials, equipment, environment, etc., that impact the process.

Auditing is a process of great discovery to find out where the strengths and opportunities for improvement in the process exist. I don't want to repeat what's already been discussed in the Cove.....but you'll get the idea.

Seek here at the Cove, and you will find.

Wishing you the best.

Stijloor.
In addition to INPUTS and OUTPUTS when process auditing I have found it useful to look at:

CONTROLS What is in place to control this process(regs "EHS" "ISO" "FDA", Policies, SOPs, WI, Training, spot checks, KPI's, etc etc)

RESOURCES Is there sufficient resource to support the process (Equipment, people, IT Tools, Transport, facilities, etc etc)

Look at these in conjunction with Stijloor's above and I believe not only will you be performing a process audit but also improving the quality of the report and unearthing findings that might not have been found with a traditional approach. This provides opportunities for improvements that will benefit the process as a whole and not just fragments of it.

Anyway thats my thoughts

Good Luck:rolleyes:
 
C

curryassassin

#17
Re: Process Audits

[QUOTERESOURCES Is there sufficient resource to support the process (Equipment, people, IT Tools, Transport, facilities, etc etc)
[/QUOTE]

Ever found resource deficiencies and, if so, how did you raise it and what was the management decision?
 
M

madannc

#18
Re: Process Audits

[QUOTERESOURCES Is there sufficient resource to support the process (Equipment, people, IT Tools, Transport, facilities, etc etc)
Ever found resource deficiencies and, if so, how did you raise it and what was the management decision?[/QUOTE]

If their really was inadequate resource under section 5.1 (e) Management Commitment, supply of resources.

Bear in mind that resource does not only refer to people, but; equipment, IT infrastructire, tools, training etc etc

hope this help vindaloo man :rolleyes:
 
C

curryassassin

#19
Re: Process Audits

If their really was inadequate resource under section 5.1 (e) Management Commitment, supply of resources.

Bear in mind that resource does not only refer to people, but; equipment, IT infrastructire, tools, training etc etc

hope this help vindaloo man :rolleyes:
So you haven't raised any observations for inadequate, insufficient, ineffective resources? Has anybody?
 
Thread starter Similar threads Forum Replies Date
V Internal Audit - Process based vs. Procedure based AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 11
N I'm still not grasping the idea of Process Based Internal Audits Process Audits and Layered Process Audits 19
V Process approach based internal auditing Internal Auditing 1
I ISO 13485 Practical Internal Audit Checklist - Standard vs. Process Based Internal Auditing 26
M ISO 9001:2000 Process Based Internal Quality Audit Plan General Auditing Discussions 11
A API Spec Q1 Purchasing Process - Supplier Reevaluation based on Supplier Risks 5.6.1.4 Oil and Gas Industry Standards and Regulations 17
S How to start with ISO process in project based team - Documentation Document Control Systems, Procedures, Forms and Templates 4
M Informational Critical Thinking and the Process of Evidence-Based Practice Medical Device and FDA Regulations and Standards News 0
T GRR based on part tolerance or process variation. Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 7
M APQC PCF (Process Classification Framework) and ISO 9001 - Processes Based Approach ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
K Changing from Procedure based to Process based Competency Evaluations General Auditing Discussions 5
A Suggestions for a UK based course in Process Auditing wanted Training - Internal, External, Online and Distance Learning 2
W AS9100C Process based manual Design and Development of Products and Processes 4
T Where in the ISO 9001 standard it asks for process based auditing? Process Audits and Layered Process Audits 6
G Validating a Process Based on Lot Release Criteria Inspection, Prints (Drawings), Testing, Sampling and Related Topics 3
T Are "process based" and craftsmanship mutually exclusive? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
Q Introducing Process based approach on Production Floor Manufacturing and Related Processes 6
M Seeking input for a process-based quality management system training course ISO 13485:2016 - Medical Device Quality Management Systems 1
B Sample Size based on Process Capability Indices (Pp/Ppk)? Capability, Accuracy and Stability - Processes, Machines, etc. 20
V Relevance of Process Based Auditing (PEAR) to regulated industry. US Food and Drug Administration (FDA) 3
M Changing PFMEA (Process FMEA) RPN Values based on a Rejection FMEA and Control Plans 5
J Integrating a Project Model in a Process Based Organization ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Z Reduced Sampling based on Process Capability (AS9100 Standard) Inspection, Prints (Drawings), Testing, Sampling and Related Topics 3
D Process4.biz and other Visio based Process Management Tools Human Factors and Ergonomics in Engineering 2
T Are MSA?s (Measurement System Analysis) Process or Gage Based? Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 20
U Process based Audit Approach vs. Clause based Audit Approach Process Audits and Layered Process Audits 49
P Definition Dock-to-Stock Process based on Historical Quality Performance of a Part and Supplier Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 8
V Process Based Organization Chart that lists processes instead of departments? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 25
M PFMEA Severity - What is Process FMEA Severity estimation based on? FMEA and Control Plans 77
S Getting started with statistically based process improvement The Reading Room 12
Manix What provision is made for the Process of Implementing Project based work in TS16949? IATF 16949 - Automotive Quality Systems Standard 3
T Implementing the Process Based Approach - Reality check needed ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15
F How to use Total Variation based on Process or Tolerance? Page 60 of the MSA manual Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 2
A Where's the value add in product audits when your process is inspection based? IATF 16949 - Automotive Quality Systems Standard 9
C Simple four-box process model - Referenced in ASQ Process-based auditing course General Auditing Discussions 5
RoxaneB Process-based auditing in 14001 - Seeking Reviews: Audit Schedule Content Feedback General Auditing Discussions 9
L 20 Factors based QMS to TS 16949 Process based Quality Management System IATF 16949 - Automotive Quality Systems Standard 1
Gman2 MY thoughts on 'process based' auditing ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 24
D Feature-Based Processing Recommended Business Process Guideline (THE-5) Various Other Specifications, Standards, and related Requirements 0
Marc Functional vs Process Based Documentation Document Control Systems, Procedures, Forms and Templates 13
J Need Help with FPY Data in Assembly Process Manufacturing and Related Processes 7
A When someone refuses to follow a process.... Misc. Quality Assurance and Business Systems Related Topics 21
E Software maintenance Process Software maintenance Process to IEC 6204? IEC 62304 - Medical Device Software Life Cycle Processes 3
R AS5553 Clause 3.1.7 f - "Implement a returns process....." AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
normhowe "The Problem with Quality Management: Process orientation, controllability and zero-defect processes as modern myths" Book, Video, Blog and Web Site Reviews and Recommendations 2
Judy Abbott General temperature used in the blasting process and laser process Manufacturing and Related Processes 2
B SOP for CNC turret punching machine for sheet metal process Manufacturing and Related Processes 0
A API Monogram audit review process Oil and Gas Industry Standards and Regulations 4
R AS9102 FAI Change in Material / Process Supplier AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
A Process mapping Process Maps, Process Mapping and Turtle Diagrams 1

Similar threads

Top Bottom