Who audits the Quality Manager ?

  • Thread starter software badger
  • Start date

software badger

Time to stop lurking and start posting !

Hello, I'm a QM for a small software company in the UK, we've had our ISO9001 and TickIT certification since 1998 and were certified against ISO9001:2000 last June.

My certification body is one of the larger ones, and at our last audit they raised a non compliance on my internal audit schedule. The text of the non compliance is as follows: "The internal audit schedule was reviewed and was judged appropriate to the requirements of ISO 9001:2000. However there was no independent audit of the quality function identified to show that 8.2.2 paras 3 and 4 are being complied with".

My initial response - senior management provide the appropriate level of checking and authorisation by reviewing and/or setting the companies "policies" on quality, and then hold me accountable for the delivery of them by formally measuring me against my objectives - wasn't well received. Neither was the second response - that as the certification body audit me on a six monthly basis an internal audit was unnecessary.

Being a small company we don't have anybody with the appropriate skill set that could audit the quality function and we don't really want to hire (either temporarily or permanently) or train another QM/auditor. Any comments ?

Thanks in advance
Elsmar Forum Sponsor

Bruce Epstein

In a similar situation in the past, we had certain customers who audited us on a regular basis; this was judged acceptable by our certification agency.

Otherwise, we always considered the formal audit to be the check on the Quality Manager.

Admittedly, though, I'm not in the UK.

Sounds to me like they're trying to force you into additional audits which might not be necessary.
Based on how I read your post, I think that this finding is a bit nit-picky.

Bruce pretty well covered it, but hear is a couple more ideas.
Take a look at your management review system and see if there is a way to beef up the records etc. from this. I feel this is the area where you really get the most formal audit. Otherwise just bring in one of your internal auditors to check over your records, processes etc to provide the warm fuzzy for the auditor.

Another option would be to bring in a consultant once a year to look over your processes. This may not be too expensive.

Good to see another lurker come out of the shadows.

Welcome to the mad mad mad mad mad mad mad:frust: :frust: world of the cove.


M Greenaway

Just tell the auditor that your schedule is based on status and importance................and the quality function has neither :vfunny:


Al Dyer


For $50-$100/hour/quarter you can hire someone to come in and give an opposing view. Even if it costs a few bucks more, say up to $1,000.00 / year it is well worth the expense.

There are qualified people out there that can cover your situation!!!

I'd love to but I am too far away!!!!

David Mullins

not again

This topic was discussed, at length, and with some great ideas, just a few short months ago.
Please check out the search engine - it will be worth it.


Quite Involved in Discussions
Without knowing how your audits are conducted, the problem may be that there was no audit of the Quality Department. Since the quality department is a key process it should be audited. Any trained auditor (internal) should be able to audit it. The 00 standard slacks up and just says you can not audit your own work. We do process audits, so just add the Quality Department to your list of departments to audit. MO


Fully vaccinated are you?
Staff member
Re: not again

Originally posted by David Mullins

This topic was discussed, at length, and with some great ideas, just a few short months ago.

Please check out the search engine - it will be worth it.
I couldn't find it. If anyone knows which thread, please do post a link. Thanks!
In a prior life I ran into this situation and addressed it by having the QM of one of my customers audit me, and returning the favor when she needed it.

Russ Jackson

Perhaps not in Software Badger's case, since he notes that it is a small company, but in many systems would it not be acceptable for an internal quality auditor outside of the QM's area to audit relative to par 3 & 4 of 8.2.2? The specific statement of independence has not been carried forth into 9k2k and it now says in par 2, 8.2.2 "Selection of auditors and condcut of audits shall ensure objectivity and impartiallity of the audit process. Auditors shall not audit their own work." Thus, an internal quality auditor from a department or area other than the QM's department should be capable of satisfying this requirement for auditing the QM relative to the two paragraphs in question.

As an auditor I would less likely question the use of an in-house internal auditor for this purpose than a Customer's QM for whom you cannot certify capability unless the the person is a certified auditor. ;)
Thread starter Similar threads Forum Replies Date
Gman2 Quality Record Retention (Internal Audits, CA's) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
P Definition AS9100 Quality Policy and 2nd party audits Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 6
O Vendor (Supplier) Responsibility - Re: Quality Audits 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 5
K Questioning Top Management on The Quality Policy during Internal Audits Internal Auditing 7
F Benefits of Internal Audits in supporting Safety and Quality Management Systems Internal Auditing 5
R Handling Quality Self-Audits on Outsourced Products Misc. Quality Assurance and Business Systems Related Topics 5
Z Forensic Quality Audits General Auditing Discussions 7
T Can ISO 9001 Internal Quality Audits be Outsourced? Internal Auditing 9
L Layered Process Audits: Efficiency, quality, safety or all the above? Process Audits and Layered Process Audits 11
R ISO Registrar Using Quality Authors to perform periodical or recertification audits ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
G Report template for quality process audits of the software product teams Internal Auditing 1
Fexjo How to Link Quality Management System, Manufacturing and Product Audits IATF 16949 - Automotive Quality Systems Standard 1
G Are Internal Audits of the Quality System required by the FDA yearly? Internal Auditing 6
C Management Quality Audits as Part of Policy Deployment/Hoshin General Auditing Discussions 4
Antonio Vieira Difficulty ?passing? Quality audits - Number of Major / Minor Nonconformances Allowed General Auditing Discussions 12
T Managing International Quality System Audits ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
W Internal Audit Schedule - Seeking Examples - Quality Audits Internal Auditing 14
M Outsource of Internal Quality Audits and Incentive for Auditor General Auditing Discussions 23
E Statistical Sampling in QMS (Quality management System) Audits Inspection, Prints (Drawings), Testing, Sampling and Related Topics 1
A FDA Quality Audits 21cfr820.22 - Audits by the head of the company not allowed ISO 13485:2016 - Medical Device Quality Management Systems 1
D Internal Quality Audits and Contract Audits General Auditing Discussions 12
C QSA 4.17.6 - Internal Quality Audits - Effectiveness of the corrective actions General Auditing Discussions 4
Q Registered Quality Internal Auditor Qualifications - What needed? Audits? Experience? Professional Certifications and Degrees 5
cgaro62 Using internal audits as part of document reviews Document Control Systems, Procedures, Forms and Templates 21
S Is it required to complete Internal Audits within one year? ISO 13485:2016 - Medical Device Quality Management Systems 29
C First Round of QMS Internal Audits - Ethical Dilemma Internal Auditing 10
T How to conduct combined internal audits (9001 and 13485) Internal Auditing 1
A ISO 9001 Internal Audits - No production right now due to furloughs Internal Auditing 5
pbojsen ISO 13485 Requirements versus FDA product classification and GMP exemptions - Audits ISO 13485:2016 - Medical Device Quality Management Systems 3
lanley liao How to understand this words that the planning of internal audit shall take into consideration the results of previous audits? Oil and Gas Industry Standards and Regulations 10
J External third party audits Registrars and Notified Bodies 1
B How many nonconformances have you received on average during IATF audits? General Auditing Discussions 27
M ISO13485:2016, MDSAP and Internal Audits ISO 13485:2016 - Medical Device Quality Management Systems 8
G 0 non conformities in registrar audits over 4 years Management Review Meetings and related Processes 12
S Would this be a second site for the purposes of internal and third party audits? General Auditing Discussions 4
R Remote Audits for ISO 9001 (or any other standard) General Auditing Discussions 31
J ISMS - Internal Audits Internal Auditing 5
A TUV Audits - 21 CFR 820 General Auditing Discussions 6
L Documented Information in Internal Audits Process (9.2) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
D CB and customer audits considered as internal audits? General Auditing Discussions 9
R IATF 16949 - Outsourcing of internal audits Internal Auditing 11
M Major vs. Minor for Internal Audits? Internal Auditing 10
J ISO 13485 System 'soft start' - How to best reflect this in initial audits, management review minutes and other records? ISO 13485:2016 - Medical Device Quality Management Systems 3
D Layered Process Audits - FCA 9.2.2 - Exemption Clause? IATF 16949 - Automotive Quality Systems Standard 5
S Obligation to accept customer audits? IATF 16949 - Automotive Quality Systems Standard 23
M Supplier Audits - Stop Wasting Everyone's Time! General Auditing Discussions 15
C Internal Audits in a tiny Dx Company Internal Auditing 33
H ISO 13485 - Separate Microbiology Audits ISO 13485:2016 - Medical Device Quality Management Systems 8
A Question on ISO 14001:2015 - Are annual audits required? ISO 14001:2015 Specific Discussions 11
H Remote product audits in Coivd-19 - IATF 16949 IATF 16949 - Automotive Quality Systems Standard 3

Similar threads

Top Bottom