What do you do when an auditee says "No thank you"

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#41
I counsel organizations to make internal audit teams cross-functional, always including a management member of at least as high a rank as any department head undergoing the audit - stops most resistance before it can be offered. The audit TEAM issues findings over the signature of the highest ranked member.
I think it's unfortunate to consider an organization needs this extent of decorum. In my view, if an auditor is hired to do the job but can't audit someone based on stature, that speaks volumes about the organization's commitment to the QMS. Of course a person needs to be able to deliver bad news to a superior; that's part of the job and one qualification of a good auditor is the ability to pull it off. I have had to tell a client ship's captain that his boat wouldn't make deployment in the morning - the man was clearly unhappy but my division stood firmly behind us. We did have to be non-commissioned officers though; some rank was important, but even an E-4 had the authority to tell an O-4 what he didn't want to hear without reprisal. Being a good auditor should include the ability to calmly and respectfully point out what the standard requires. It isn't about what we believe applies to us; we all have responsibilities and some come with effort. His group brought this on themselves by insisting on controlling their process documents outside the corporate system. If not for that I could have verified the document controls from my desk, with no effort or time from him.

We don't always have audit teams. In this case there were two of us, and I was the lead but no management level auditor was available to sooth this guy's bruised sensibilities. I will be interested to see what the audit program manager says. He knows me - I have argued record retention with him. :rolleyes:

That said, if this was a VP I would do what was already done, which is to bring the regular auditor into the meeting for support of the position. I would not want to go it alone with some people. Brrrr!
 
Last edited:
Elsmar Forum Sponsor

Wes Bucey

Quite Involved in Discussions
#42
Yep! Military organizations recognize that any rank doing the job assigned (no rogues!) is going to be backed by the brass. RHIP (privileges), but also rank has its responsibilities. In cases where the ranking officer is derelict, word soon reaches brass who will remove that officer.

(Of course, in 'nam, derelict officers in the field sometimes got "fragged" by an individual wearing the same uniform when top brass didn't act quickly enough.:mg:)

In Jennifer's situation, it was stated as fact the top brass was unlikely to act against a junior officer.

My suggestion to add a manager to an audit team is to enforce the concept that auditees may face peril for defying the audit because of the visible presence of the manager. (Kind of like having a police car parked close to a red light or stop sign or speed limit sign - drivers think twice before violating the traffic instruction. - in one Chicago suburb, the police chief had an out of service [empty] squad tucked in near a speed limit sign with a "dummy" dressed in a uniform. The open secret, though, was given teeth because, on random days, the "scarecrow" would be replaced by a real cop who would write speeding tickets. )
 

howste

Thaumaturge
Super Moderator
#43
Both Steve (Howste) and Randy are channeling "3rd party auditor" thinking here. Such thinking is rarely applicable in internal audits because internal auditors often have lower rank and status than managers of departments under audit. In organizations where top managers abdicate power and authority, the propensity of silo creation is very prevalent. The managers of those departments then become more powerful than the top manager who is unwilling to take any action unless the silo becomes an obvious money loser.
You make a good point. I realize that there are a lot of office politics and dysfunctional organizations around. However, I still tend to be an optimist. I don't always assume that someone is making a power play. Even if they are, being timid isn't always the best way to handle the situation.

I've found throughout my career that respect and authority are things that people rarely just hand to you. If at the first indication of potential conflict, a person rolls over, then they will never respect you or your position. Obviously open defiance isn't the best policy either. Some of the best relationships I've had with higher levels of management have been cultivated because I wasn't afraid to push back when necessary.
 

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#44
You make a good point. I realize that there are a lot of office politics and dysfunctional organizations around. However, I still tend to be an optimist. I don't always assume that someone is making a power play. Even if they are, being timid isn't always the best way to handle the situation.

I've found throughout my career that respect and authority are things that people rarely just hand to you. If at the first indication of potential conflict, a person rolls over, then they will never respect you or your position. Obviously open defiance isn't the best policy either. Some of the best relationships I've had with higher levels of management have been cultivated because I wasn't afraid to push back when necessary.
I think this is correct. It took years, but I have achieved a sort of stature in my own site - people are surprised when they assume I am management level and I point out no, I'm just an hourly tech level employee. I've done it through give and take, negotiation, occasional wheedling and, in the beginning, direct affirmation and support from my manager. And to this day, in a difficult situation (they still arise once in awhile) I will make clear I recognize I am not the last word on these matters. I audit at the pleasure of my employer - he gets to make the final call. So, when necessary I have been known to punt an issue.

But this was the corporate offices, which only recently had gone through certification and as such the system is still not very mature. The level of awareness still isn't all that solid in all groups. I expect that but I find it unfortunate that I wasn't a large enough part of the roll out. I think I could have helped.

So, as is often the case it was a teachable moment. I find a lot of them as I go. Getting through this gracefully it what can set people apart, I think. It was good exersize as my people "at home" have learned not to challenge me this way.
 
Last edited:

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#45
My suggestion to add a manager to an audit team is to enforce the concept that auditees may face peril for defying the audit because of the visible presence of the manager. (Kind of like having a police car parked close to a red light or stop sign or speed limit sign - drivers think twice before violating the traffic instruction. - in one Chicago suburb, the police chief had an out of service [empty] squad tucked in near a speed limit sign with a "dummy" dressed in a uniform. The open secret, though, was given teeth because, on random days, the "scarecrow" would be replaced by a real cop who would write speeding tickets.)
I'd like to think that wouldn't be needed. If it is, I would like to think a phone call would be enough: "I am sending Jennifer over to audit XYZ. Feel free to open up and discuss with her - she's much more than a kick-the-tires sort of auditor."
 

Jim Wynne

Staff member
Admin
#46
I see TWO important points here:

  1. This is definitely a power play by the auditee. By his action/inaction, he says to Jennifer, "This whole internal audit process is a threat to my power and authority over my 'silo.' As the symbol of that threat, I am resisting you."
  2. In this issue, the auditee KNOWS his silo is not being billed directly, so he doesn't care who pays or how much as long as it is not reflected on the accounts of his silo.
Both Steve (Howste) and Randy are channeling "3rd party auditor" thinking here. Such thinking is rarely applicable in internal audits because internal auditors often have lower rank and status than managers of departments under audit. In organizations where top managers abdicate power and authority, the propensity of silo creation is very prevalent. The managers of those departments then become more powerful than the top manager who is unwilling to take any action unless the silo becomes an obvious money loser.
Rather than something as dramatic as a "power play," I think it's more likely that the manager is suffering from conflicting priorities syndrome. There's a good chance that this person had to choose between getting hit over the head for not getting his work done because of time spent with the auditor or getting hit over the head for blowing the auditor off.

There might have been an accurate perception on his part that blowing off the auditor would result in a wound less severe than if he had to blow off a customer by missing a conference call or a corrective action due date. If internal audits are to "add value," the priorities of the organization must be in alignment.

Another thing to consider, although I don't think it applies in the case at hand, is that sometimes auditors do waste everyone's time by chasing down obviously blind alleys, not understanding documentation they're appraising, or the general dynamics of the process (or, god forbid, department) being audited.
 

Jen Kirley

Quality and Auditing Expert
Staff member
Admin
#47
Another thing to consider, although I don't think it applies in the case at hand, is that sometimes auditors do waste everyone's time by chasing down obviously blind alleys, not understanding documentation they're appraising, or the general dynamics of the process (or, god forbid, department) being audited.
I'm pretty sure my auditee have believed this from time to time because I often stray from the beaten path. But after years of auditing the same processes I don't need to use that path all the time; I do, however need to explore issues that have surfaced in other processes. Instead of beating the other process owner I will deal with it in the group that has the most direct authority and responsibility. It's that whole system thing that doesn't happen in my sister sites that use a team of part time auditors and don't have a good method for tracking issues.
 

Jim Wynne

Staff member
Admin
#48
The inoculation:
I counsel organizations to make internal audit teams cross-functional, always including a management member of at least as high a rank as any department head undergoing the audit - stops most resistance before it can be offered. The audit TEAM issues findings over the signature of the highest ranked member.
In most places internal audits are done by individuals, not teams. If the organization is dysfunctional, having managers conduct audits can be counterproductive, to say the least. In dysfunctional organizations there is often competition between department heads for the attention and favor of the higher-ups, and there's almost always one or two who are favored over the others. In such situations, internal audits can be used as a blunt instrument, usually with impunity.

If one happens to be employed in a company with enlightened management, there is no need to have managers doing audits although it probably wouldn't do any harm as it might in a dysfunctional company. In any event the suggested "inoculation" will probably exacerbate the problem or have no effect at all. It's unlikely that it would help anything.
 

BradM

Staff member
Admin
#49
It's very interesting that this person responded this way. My job is easier when things go smoothly. Things go smoothly when the processes are stable and consistent. Processes get that way by people looking at it to make it better. That's the value of an internal auditor.

Maybe this person was having a bad day. Maybe they were behind in schedule; had previously suffered through poor auditing; or maybe had a big night coming up or something. Maybe... he felt intimidated by an intelligent woman. I don't know.

But I certainly would not worry about it. Document it, talk to your lead auditor (or who you report to) and move on. I hate to set someone up for failure. But if he is not going to appreciate the value of the internal audit, then that valuable time should be spent elsewhere in the organization. :)
 
#50
Jennifer:

I've been out walking the dog and giving this some serious thought! (No comments about Mad Englishmen and their dogs in the midday sun, please;))

What were the:-

* Scope
* Objectives &
* Criteria

of this audit? Reading your post #37 makes me wonder why he would say that training doesn't need to be audited. So, I have that question for you, why were you auditing training?

As much as we here recognize dysfunctionality of organizations, audit can still be used to take that objective and impartial look at the QMS in this guy's area of responsibility. While out walking, it also ran through my head that I wonder what any documentation might actually say is the responsibility of this support function and it's management?

If such things are clearly defined the audit should go more smoothly. If not (and ISO 19011 talks to this) maybe that aspect could have been sorted before the audit took place - I guess it depends on those three things above!
 
Thread starter Similar threads Forum Replies Date
GStough Auditing Against Criteria Unfamiliar to Auditee - Yea or Nay? General Auditing Discussions 11
K Tips for Auditee Training ISO 13485:2016 - Medical Device Quality Management Systems 4
S Experiences as a female auditor / auditee Career and Occupation Discussions 36
S Why auditee names are not mentioned in Audit Report? General Auditing Discussions 2
L How to deal with resistance from auditee(s) Internal Auditing 20
somashekar Internal Audit without a person as auditee Internal Auditing 6
S Internal Audit Findings Summary Rewrite by an Auditee ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
F How to Calm a Nervous Auditee Internal Auditing 14
K Sending Audit Questions to the Auditee in Advance Internal Auditing 20
Howard Atkins What you as an auditee should know about your CB (Certification Body) Registrars and Notified Bodies 0
P What to do when an Auditee Falsifies or Cheated on Records Internal Auditing 6
A What do you do if you have the feeling that your auditee could be lying? Internal Auditing 58
M What to do when Auditee refuses to sign Audit Report General Auditing Discussions 91
J Auditee offered help with anything in nonconformities Internal Auditing 16
P Internal Audit Finding - Root Cause Analysis: Auditor or an Auditee Responsibility? Internal Auditing 24
B Could ISO 22000 auditee hold Auditor Responsible for subsequent safety breaches? Food Safety - ISO 22000, HACCP (21 CFR 120) 16
V Can the Management Representative represent top management as the sole auditee? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 14
L Corrective action following a wrong answer of the auditee ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
B Providing Auditee with Checklist prior to Audit General Auditing Discussions 48
M Auditee Evaluation of Auditors Example, Form or Template General Auditing Discussions 6
E Being IQA Team Leader and auditee - Auditor Independence General Auditing Discussions 9
Claes Gefvenberg The Ideal Auditee General Auditing Discussions 22
J Can I issue a NCR if the auditee did not comply what he is suppose to do? General Auditing Discussions 6
Marc GM says no more tailpipe emissions by 2035, carbon neutrality by 2040 World News 45
T What does AS9100 mean when it says you must establish a process to do X? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 24
Marc NASA Says Oregon Company Metals Fraud Caused $700 Million Satellite Failure - 2019 World News 16
B Our NB says that IEC 62304 is an ISO 14971 Requirement ISO 14971 - Medical Device Risk Management 1
shimonv 21 CFR 820.20(d) says: Each manufacturer shall establish a Quality Plan 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 4
J jwmuola says Hello Coffee Break and Water Cooler Discussions 1
Marc FCC boss says he'll SHAME broadband firms for fibbing on speeds After Work and Weekend Discussion Topics 0
bobdoering Who says you can't calibrate a steel rule! Funny Stuff - Jokes and Humour 14
J Auditor says 5.6.3 should be discussed in Management Review Management Review Meetings and related Processes 62
Wes Bucey "Back Doors" to Encryption - NY times says NSA has them After Work and Weekend Discussion Topics 20
Wes Bucey A Headhunter says he has job hunt secrets Career and Occupation Discussions 7
O Is it an Assignable Cause only if the Control Chart says so? Statistical Analysis Tools, Techniques and SPC 16
S Auditor says a Minor Nonconformance will become a Major Nonconformance General Auditing Discussions 8
H 'You've got to find what you love,' Jobs says Career and Occupation Discussions 2
Marc Threat analyst says medical devices can be hacked remotely Other Medical Device and Orthopedic Related Topics 6
P Control of Monitoring and Measurement Devices - ISO 13485 Clause 7.6 says ... ISO 13485:2016 - Medical Device Quality Management Systems 3
J Quality Pros? Salaries on the Upswing, ASQ Salary Survey Says Career and Occupation Discussions 4
Stijloor IKEA US Says Thank You to All Its 12,400 Co-Workers World News 5
D Found Watch - Watch is "Element" and says "New York" Coffee Break and Water Cooler Discussions 16
G Dangerous Act - Auditor says major nonconformance for safety (risk) issue Occupational Health & Safety Management Standards 21
C Calibration Laboratory Location - GMP says in a secure bonded area General Measurement Device and Calibration Topics 5
Stijloor Ford Says It Made $2.7 Billion in 2009 World News 8
E FMEA Action Plan Threshold (RPN) - Auditor says Action Plan for an RPN > 84 IATF 16949 - Automotive Quality Systems Standard 21
J Modern man a wimp says anthropologist Coffee Break and Water Cooler Discussions 0
bobdoering Wheeler is back again! He says it is the last volley! Statistical Analysis Tools, Techniques and SPC 7
J Immortality only 20 years away says scientist Coffee Break and Water Cooler Discussions 20
P Attribute Control Chart in my Process - Black Belt says Not Appropriate Quality Tools, Improvement and Analysis 11

Similar threads

Top Bottom