I've been challanged several times by my Registrar to show where I've covered specific "shalls" from the standard in my internal audits.
For example: Show me where you have audited 6.1b "The organization shall determine and provide the resources needed to enhance customer satisfaction...".
So unless I have a checklist item for each "shall", it becomes very challanging to show evidence. My Registrar say sthe basis for this is from 8.2.2 requirement to internal audit "to the requirements of this International Standard".
The most value we get from internal audits with when we focus on a process, and use process performance data to focus our audits on areas where the process has known weaknesses. I find it difficult to do this and still hit each and every 9001/14001 "shall" in the process. To make it work I have to audit my audits, and track what clauses have and have not been covered, then make sure we hit them all by the end of the year. We have been registered for 14 years now and almost never have findinges when we audit to the standard, but it makes our Registrar happy.
I'd like to hear how/if others meet this requirement and still manage a lean and value-added internal audit program.
For example: Show me where you have audited 6.1b "The organization shall determine and provide the resources needed to enhance customer satisfaction...".
So unless I have a checklist item for each "shall", it becomes very challanging to show evidence. My Registrar say sthe basis for this is from 8.2.2 requirement to internal audit "to the requirements of this International Standard".
The most value we get from internal audits with when we focus on a process, and use process performance data to focus our audits on areas where the process has known weaknesses. I find it difficult to do this and still hit each and every 9001/14001 "shall" in the process. To make it work I have to audit my audits, and track what clauses have and have not been covered, then make sure we hit them all by the end of the year. We have been registered for 14 years now and almost never have findinges when we audit to the standard, but it makes our Registrar happy.
I'd like to hear how/if others meet this requirement and still manage a lean and value-added internal audit program.