Should internal auditors be compulsorily certified as internal auditors ?

R

Reeta

#1
Hi All,

Im newbie to this forum and newbie to QMS as well. Need help in in internal audit process requirement. Is the internal auditors are compulsory to be certified as internal auditor? Who can certify them? If they are certified internally, do we need to have any instruction or procedure on how they get certified? Thank you

Regards,
Reeta
 
Elsmar Forum Sponsor
J

Jeff Frost

#2
Re: Internal Audit

ISO 9001 and AS9100 have no requirement to be certified as an internal auditor only that they be trained (see 6.2.2) and be competent for the duties they will perform.
 
#3
Re: Internal Auditor Training, Experience and Certification Requirements

Hello Reeta, and welcome to both the Cove an the wonderful world of Management Systems. :bigwave:

Jeff is right: There is no such requirement in the standard, but as you say, you could have it in your QMS. If you do, you should describe the criteria and how this certification is achieved.

/Claes
 
Last edited:
S

SteveK

#4
Re: Internal Auditor Training, Experience and Certification Requirements

Hi Reeta,

Additional

As Claes indicates you just need to describe your procedure e.g. in our Internal Audit SOP the first section has:

1. Lead Auditor
1.1 The Lead Auditor is the person who is responsible for individually performing or has charge of leading a selected team to perform an independent Internal Quality Audit.
1.2 Where possible, the Lead Auditor will possess a recognised Internal Quality Auditing qualification. Alternatively, the Managing Director can authorise the Lead Auditor and/or a deputy to be trained by company personnel whom possess a recognised qualification or have the relevant experience.
1.3 The Lead Auditor will have no direct responsibility for the areas/departments where an audit is to be carried out and will not audit their own work.
1.4 It is the Lead Auditors’ responsibility to prepare an Internal Quality Audit Plan and to submit an Audit Report.
1.5 The Lead Auditor and/or a deputy will be responsible for the “Closing Out” of any Non-conformity raised upon the verification of a completed “Corrective Action”.

As the QA Manager I conduct the training (mainly self training using a Powerpoint presentation to ISO 9001 & ISO 13485 in our case) and indicate this action in the person's training file with a nice little certificate to keep the external auditor happy. No problems with this thus far.

Steve
 
J

Jeff Frost

#5
Re: Internal Auditor Training, Experience and Certification Requirements

I would like to caution that you should only exceed the requirements of the International Standard when it is of benefit of your organization. As an example, there is no requirement for use of a lead auditor or that auditors have a “recognized internal quality auditing qualification”. The Standard only requires that they are trained for the work they will performing for your organization.

If you are looking for a good reference document on auditing I would recommend the U.S. version of ISO 19011. The document is called ANSI/ISO/ASQ QE19011S which is based on the previsions revision of 19011 but contains application guidance based on size of the organizations. The use of 19011 is not required by ISO 9001 or AS9100 but is listed in Clause 8.2.2 as a suggested source of information about auditing and audit programs
 

Big Jim

Super Moderator
#6
Re: Internal Auditor Training, Experience and Certification Requirements

I agree with everything else posted so far.

I would like to add that it may be a good idea to have at least one internal auditor that has had one of the many two day or three day internal auditor classes. Not because it is required, but simply because it is a good practice. This would tend to promote thorough understanding of both the standard and of good auditing practices.

This is certainly one of those situations where the effort spent will pay dividends in a smoother running quality management system. I would even go a step further and recommend that at least one member of top management take the class too. The better they understand, the easier it is for them to support it.
 
R

Reeta

#7
Re: Internal Auditor Training, Experience and Certification Requirements

Hi All,

Thank you for the replies. Now im clear that External Training is not a must but better to have if MD dont mind of the cost. Thank you very much:thanks:
 

Helmut Jilling

Auditor / Consultant
#8
Re: Internal Auditor Training, Experience and Certification Requirements

Hi All,

Im newbie to this forum and newbie to QMS as well. Need help in in internal audit process requirement. Is the internal auditors are compulsory to be certified as internal auditor? Who can certify them? If they are certified internally, do we need to have any instruction or procedure on how they get certified? Thank you

Regards,
Reeta
Since you state you are a newbie to QMS, it is likely that you are not experienced as an auditor. In that case, I would encourage you to take good training. When I audit companies, it is very obvious that auditors who have had good training provide audit results that are more meaningful and valuable for the company to improve.

I and a number of other consultants on Elsmar provide good auditor training. There is also a good white paper on internal auditing and several other tools on my website (jilling.com). They are available for free download.

I'll tried to attach it. But it does not look like it attached...
 
Last edited:

QATN11

Involved In Discussions
#9
Re: Internal Auditor Training, Experience and Certification Requirements

This is from a discussion in another forum (outside of Elsmar).

In this case, the company only has the two employees.

"This is a real case of where both the husband and wife equally performs all the processes in their QMS, and are currently ISO-9001 certified by a certified CB. They both perform and document their internal audits together. Their CB agent says in their case, an exception has to be made to ISO-9001 Section 8.2.2 which states: "Auditors shall not audit their own work.""

Most responses are to hire an outside auditor to perform an impartial audit. Other responses feel that if hiring an outside auditor causes an undue financial burden, that would not be a viable option. If the focus is on the audit of a process that involves both individuals a conflict would exist. If the audit drilled down to specific tasks, they could still audit the task that the other performed. e.g. They probably would not hammer in a nail taking turns striking it although this was a common method used in driving in rail spikes.

Has anyone had to address this situation?
 

Helmut Jilling

Auditor / Consultant
#10
Re: Internal Auditor Training, Experience and Certification Requirements

This is from a discussion in another forum (outside of Elsmar).

In this case, the company only has the two employees.

"This is a real case of where both the husband and wife equally performs all the processes in their QMS, and are currently ISO-9001 certified by a certified CB. They both perform and document their internal audits together. Their CB agent says in their case, an exception has to be made to ISO-9001 Section 8.2.2 which states: "Auditors shall not audit their own work.""

Most responses are to hire an outside auditor to perform an impartial audit. Other responses feel that if hiring an outside auditor causes an undue financial burden, that would not be a viable option. If the focus is on the audit of a process that involves both individuals a conflict would exist. If the audit drilled down to specific tasks, they could still audit the task that the other performed. e.g. They probably would not hammer in a nail taking turns striking it although this was a common method used in driving in rail spikes.

Has anyone had to address this situation?
I have been in this situation a few times as an auditor. The solution in each case was that they selected an outside qualified auditor to come in and do the internal audits, either the whole cycle or part of it. That took care of the problem, for the cost of a day or two. In your example, the CB "waived" the requirement. The problem with that, CB's are not really authorized to make waivers to the standard. I can understand the logic, and and they may be able to make the case with ANAB. But, unless they got approval from ANAB, it may not meet the requirement.
 
Thread starter Similar threads Forum Replies Date
Z Should we recertify our internal auditors as we transitioned to ISO 9001:2008? Internal Auditing 1
S Internal Audit Team - The number of internal auditors a company should have Internal Auditing 4
C Should I get an Internal Auditor Certification of Exemplar Global / RABQSA? Internal Auditing 17
T Should the Internal audit for ISO 9001 cover all elements of the standard? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
L Should Internal Audit CAPAs be kept separate from "normal" CAPAs? ISO 13485:2016 - Medical Device Quality Management Systems 6
R Full Time Internal Auditor - Where should I be looking for someone? Career and Occupation Discussions 15
C How should I present Internal Audit results to Management in Management Review Internal Auditing 18
T Who should provide information I ask for? Internal Audit question Internal Auditing 4
R Should Internal Audit criteria be a Controlled Document? Internal Auditing 5
R What questions should I ask during Internal Audits? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
K Should Internal Audit Plan be Approved by Top Management? Internal Auditing 19
O Should Staff have Access to see Internal and/or CB Audit Results? Internal Auditing 5
G Internal Audit Report Meeting - Who should be present? Internal Auditing 19
M Should Internal Audit Checklists be Controlled Documents? Document Control Systems, Procedures, Forms and Templates 9
J Internal Audit Teams - How big the audit team should be and who should be on it General Auditing Discussions 6
S Internal Auditor Training - How often should an internal auditor be trained? Training - Internal, External, Online and Distance Learning 15
Coury Ferguson Should a Registrar write a NC on something that was found during the Internal Audit Registrars and Notified Bodies 138
P Internal PPAP Audit - What should I ask? Plastic parts (automotive) TS 16949 IATF 16949 - Automotive Quality Systems Standard 7
P The Optimal IA Schedule - How should the Internal Audit Schedule be set up? General Auditing Discussions 26
S Who should do the CA's (Corrective Actions) from Internal Audits Internal Auditing 9
R ISO19011 Internal Audit Schedule - Should it have to be approved? General Auditing Discussions 12
S Internal Auditor Qualifications - What qualifications should I include? Internal Auditing 49
I Auditing the CEO - How? What should our Internal Auditor ask? Internal Auditing 6
A Should Customer Complaints trigger Internal Audits? Customer Complaints 6
A Scheduling Internal Audits - What should I be auditing and when Internal Auditing 8
K Should QS/TS certified internal test/calibration labs be required to be ISO17025 ISO 17025 related Discussions 16
Sidney Vianna Interesting Discussion Should ISO 9004 be changed from a guidance standard to a requirements standard? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
A Should I take an online course for a career in Occupational Health and Safety? Career and Occupation Discussions 2
J Should a Class 1 medical device with an option to measure body weight be considered Class 1m? EU Medical Device Regulations 0
K Should APQP/PPAP has its own section in a QM? Quality Management System (QMS) Manuals 1
S What should i choose for "testing procedure" characteristics? (N95) General Information Resources 0
P Should eIFU link per ISO 15223-1:2016 be added to labels out of scope of Reg 207/2012? EU Medical Device Regulations 1
S Which Sampling Plan(s) Should I Use? Inspection, Prints (Drawings), Testing, Sampling and Related Topics 7
A Document release vs its related training. Which should come first? ISO 13485:2016 - Medical Device Quality Management Systems 18
S Which department should prepare the control plan? could you show me a standard regarding to this matter. FMEA and Control Plans 17
J Help settle a disagreement: Should external providers of preventive maintenance be on your ASL? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
N Master Samples - What should we be keeping? IATF 16949 - Automotive Quality Systems Standard 9
G Supplier delivered recent PPAP, should he deliver yearly layout inspection? IATF 16949 - Automotive Quality Systems Standard 4
John Broomfield Vote - Should ISO9004 Become a Requirements Standard? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
A Capability Study - in the beginning of your career what should you have known about the tool Quality Tools, Improvement and Analysis 11
J Should Loading and Unloading be Included in Cycle Times? Lean in Manufacturing and Service Industries 14
E Manufacturers should develop a testing device for covid19 Service Industry Specific Topics 0
T 510(k) submission - Which name should I use in the submission? Other US Medical Device Regulations 3
N ISO 19011:2018 - 5.4.2 "...audit program should engage in appropriate continual development..." Training - Internal, External, Online and Distance Learning 4
G Should I perform Gage R&R only at the beginning of a new project? Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 6
DuncanGibbons Should the requirements FAA/EASA Part 21 be addressed within the QMS and AS9100D quality manual? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
M Should 510(k) Predicates be Actively Listed Devices? Other US Medical Device Regulations 12
B Why the Greek god Hephaestus should have done a design FMEA (DFMEA) on his giant robot APQP and PPAP 1
J On PFMEA for danger labels - Label always should be assigned severity 10 ? FMEA and Control Plans 3
H Who should be listed as the manufacturer/distributor on the box? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 15

Similar threads

Top Bottom