Iqa to Iso9000-2000 New 13 June 01

Embed Size (px)

Citation preview

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    1/102

    IQA

    TOI

    SO90

    00:2000

    Internal Quality Auditingto

    ISO 9000:2000

    Pakistan Institute of Quality Control

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    2/102

    IQA

    TOI

    SO90

    00:2000

    Principles of Auditing

    Audit Terms and Definitions

    CONTENTSCONTENTS

    1

    5

    4

    ISO 9000 New Family of Standards

    2

    3

    Whats New in ISO 9000:2000 (Outline)

    ISO 9001:2000 New/Modified RequirementsIS O

    9 0 0 0 :20 0 0

    AUD

    ITING

    Competence of Auditors6

    Managing an Audit Program7

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    3/102

    IQA

    TOI

    SO90

    00:2000

    ISO 9000 NEW FAMILY OFISO 9000 NEW FAMILY OF

    STANDARDSSTANDARDS

    1

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    4/102

    I : Fam y oStandards

    CORE STANDARDSCORE STANDARDS

    ISO 9000:2000 Fundamentals and Vocabulary

    ISO 9001:2000 QMS Requirements

    ISO 9004:2000 Guidelines for Performance Improvement

    SUPPORTING STANDARDSSUPPORTING STANDARDS

    ISO 10005:1995 Guidelines for Quality Plans

    ISO 10006:1997 Guidelines for Project Management

    ISO 10007:1995 Guidelines for Configuration Mgt ISO 10011-1, -2, -3 on Auditing

    ISO 10012-1 & -2, Quality Assurance for Measuring

    Eqpt.

    ISO 10013:1995 Guidelines for Quality manuals

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    5/102

    ISO/TR 10014:1998 Guidelines for managing economics

    of quality

    ISO 10015 Guidelines for Training

    ISO/TR 10017:1999 Guidelines on Statistical techniques

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    6/102

    I

    QA

    TOI

    SO90

    00:2000

    WHATS NEW INWHATS NEW IN

    ISO 9000:2000ISO 9000:2000Compared to ISOCompared to ISO

    9000:19949000:1994

    2

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    7/102

    ISO 9000:2000 vs 9000:1994

    Cancels and replaces second edition of 1994

    revised title which no more uses the term QA, instead

    just QMS (QA + Customer Satisfaction)

    Released on 15 Dec 2000

    up-graded in contents, effectiveness, and logical

    implementation

    9000- and 9004- series guidelines eliminated and 9004

    to serve as a general purpose guidelines

    Many guidelines available in the form of TR (Technical

    Reports)

    compatibility with ISO 14001

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    8/102

    Scope (modified): to demonstrate its ability to provide

    consistently product that meets customer

    and applicable regulatory requirements, and to address customer satisfaction through

    the effective application of the system,

    including processes for continual

    improvement and the prevention of

    nonconformity

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    9/102

    ISO 9001, 9002, & 9003 merged into a

    single 9001:2000 ISO 8402 and ISO 9000-1 merged into a

    new ISO 9000:2000 ISO 10011 will be merged with ISO 14010

    into a new ISO 19001 Quality &

    Environmental Auditing

    3 years for co-existence

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    10/102

    Whats New?

    1. The Standard

    2. The Structure

    3. The Definitions

    4. The Emphasis

    5. The Requirements

    6. The Flexibility

    7. The Approach

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    11/102

    ISO 9002 and 9003 dropped

    ISO 9001 modified

    1. New Standard1. New Standard

    20 clauses abandoned

    Now 5 sections

    2. New Structure2. New Structure

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    12/102

    Supplier: Vendors, subcontractors, etc.

    Organization: The company implementing QMS

    Product Realization:

    The interconnected processes

    that are used to bring products into being. When you start

    out with an idea and end up with a product, youve gone

    through the process of product realization

    3. New Definitions3. New Definitions

    Customer Focused

    Continual Improvement

    Integration of Processes with the QMS

    4. New Emphasis4. New Emphasis

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    13/102

    1. Communication with customers

    2. Identify customer needs and expectations

    3. Meet customer needs and expectations

    4. Measure and monitor customer needs and expectations5. Meet legal and regulatory requirements

    6. Internal Communication

    7. Provide necessary facilities and work environment

    8. Evaluate the effectiveness of training

    9. Measure and monitor realization processes

    10.Evaluate the effectiveness and suitability of quality system

    11.Identify QMS improvements

    12.Improve QMS regularly

    5. New Requirements5. New Requirements

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    14/102

    1. Permissible Exclusions from Section 7 if

    a. it doesnt apply

    b. customers requirements make it reasonable to exclude

    c. regulatory requirements make it reasonable to exclude

    However, no part can be excluded, if doing so will undermine the

    organizations abilities or performance

    6. New Flexibility6. New Flexibility

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    15/102

    PROCESS APPROACH TO QMS

    QMS can now be considered as a single large process with many sub-processes. Each of these sub-processes uses inputs and outputs.

    These are:

    1. Resource Management Process 10. Internal Communication Process

    2. Regulatory Research Process 11. Document ControlProcess

    3. Market Research Process 12. Record Keeping Process

    4. Product Design Process 13. Planning Process

    5. Purchasing Process 14. Training Process6. Service Process 15. Internal Audit Process

    7. Product Protection Process 16. Management Review Process

    8. Customer Needs Assessment Process 17. Measurement Processes

    9. Customer Communication Process 18. Nonconformance Mgt

    19. Continual Improvement P.

    7. New Approach7. New Approach

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    16/102I

    QA

    TOI

    SO90

    00:2000

    ISO 9001:2000ISO 9001:2000

    NEW/MODIFIEDNEW/MODIFIEDREQUIREMENTSREQUIREMENTS

    3

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    17/102

    Process Approach Model

    ManagementManagement

    responsibilityresponsibility

    Measurement,Measurement,

    analysis andanalysis and

    improvementimprovement

    ResourceResource

    managementmanagement

    ProductProduct

    realizationrealizationOutputInput

    ProductProduct

    CONTINUAL IMPROVEMENT OF THEQUALITY MANAGEMENT SYSTEM

    C

    US

    T

    O

    ME

    R

    S

    a

    t

    i

    s

    f

    a

    c

    t

    i

    o

    n

    C

    US

    T

    O

    M

    E

    R

    R

    e

    qu

    i

    r

    e

    m

    e

    n

    t

    s

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    18/102

    Contents

    Scope 1.1 General

    1.2 Application

    1

    Terms and Definitions3

    Normative Reference2

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    19/102

    Contents (cont.)

    Quality Management

    System 4.1 General Requirements4.2 Documentation Requirements

    4

    Management

    Responsibility5.1 Management Commitment

    5.2 Customer focus

    5.3 Quality Policy

    5.4 Planning

    5.5 Responsibility, authority and communication5.6 Management Review

    5

    Resource Management 6.1 Provision of resources6.2 Human resources

    6.3 Infrastructure

    6.4 Work environment

    6

    Product Realization7.1 Planning of product realization

    7.2 Customer-related processes

    7.3 Design and development

    7.4 Purchasing

    7.5 Production and service provision

    7.6 Control of monitoring and measuring devices

    7

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    20/102

    Contents (cont.)

    Measurement, Analysisand Improvement 8.1 General8.2 Monitoring and measurement

    8.3 Control of nonconforming product

    8.4 Analysis of data

    8.5 Improvement

    8

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    21/102

    1. Scope (applicability)

    Product meets customer and applicable regulatory

    requirements

    to enhance customer satisfaction, including continual

    improvement of the system and assurance of conformity to

    customer and applicable regulatory requirements

    1.1 General1.1 General

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    22/102

    Generic requirements; applicable

    to all organizations, regardless of

    type, size and product provided

    exclusion can be considered if

    certain requirements not applicable

    Exclusion only allowed from

    Clause 7

    1.2 Application1.2 Application

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    23/102

    2. Normative Reference

    ISO 9000:2000 Fundamentals and vocabulary

    (ISO 8402 is now obsolete)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    24/102

    Terms and definitions

    As given in ISO 9000

    Product also means services

    supply chain

    supplierorganization

    customer

    4 1 ua ty Management

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    25/102

    4.1 ua ty ManagementSystem

    INTEGRATION?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    26/102

    4.1 Quality Management System

    Fully

    Integrated!

    4 Documentat on

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    27/102

    4. Documentat onRequirements

    Documented statements of a

    quality policy and quality

    objectives

    a quality manual documented procedures required

    by ISO 9000:2000

    documents needed by the

    organization to ensure theeffective planning, operation and

    control of its processes, and

    quality records required by this

    standard

    4.2.1 General4.2.1 General

    Documentat on tructure

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    28/102

    Documentat on tructure(Example)

    QUALITYQUALITY

    MANUALMANUAL(SUMMARY)

    RelevantRecords

    Relevant

    Records

    RelevantRecords

    Relevant

    RecordsRelevantRecords

    Applicable

    Clauses

    Dept B

    Procedures

    ApplicableClauses

    Dept CProcedures

    ApplicableClauses

    Dept DProcedures

    ApplicableClauses

    Dept EProcedures

    Supporting Documents

    e.g. standards, Manuals, GMPs

    ApplicableClauses

    Dept AProcedures

    What How

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    29/102

    Exercise

    What are the applicable Quality Processes

    (sections/sub-sections) in Production Dept.?

    What are the applicable Quality Processes(sections/sub-sections) in Purchasing Dept.?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    30/102

    Top management shall ensure

    that customer requirements are

    determined and fulfilled with the

    aim of enhancing customersatisfaction (7.2.1 and 8.2.1)

    Examples

    Customer needs

    identification

    procedure?

    (e.g. surveys, focus

    groups, contracts)

    Top management

    verification (through

    1st, 2nd, 3rd party

    tests etc., that such

    requirements are

    fulfilled

    5.2 Customer Focus5.2 Customer Focus

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    31/102

    Top management shall ensure that the

    quality policy:

    is appropriate to the purpose of the

    organization

    includes a commitment to comply with

    the requirements and continually

    improve the effectiveness of the QMS

    provides a framework for establishing

    and reviewing quality objectives communicated and understood in the

    organization

    is reviewed for continuing suitability

    What broad Quality aspects

    should be Covered in the

    Quality Policy?

    1. Fulfillment of Customer

    needs2. Fulfillment of applicable

    national laws and

    regulations

    3. Minimization of

    waste,errors andnonconforming

    4. Continual improvement

    5. Employees quality and

    organizational culture

    5.3 Quality Policy5.3 Quality Policy

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    32/102

    Quality Objectives:

    are established at relevant functions

    and levels, and are measurable and

    consistent with the quality policy QMS Planning:

    Each applicable process/dept. is

    addressed under the PDCA model;

    planning at changes is carried out

    What does Quality

    objectives for each

    function means?

    What does Quality

    objectives for each

    level means?

    5.4 Planning5.4 Planning

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    33/102

    Responsibility and Authority:

    defined and communicated within

    the organization

    Management Representative:appoint a QMS Coordination role to a

    management member

    ensure QMS is established,

    implemented and maintained

    report the performance and the

    need for improvement

    promote awareness

    liaison with external parties

    Examples

    Job Descriptions

    QMRs clear role

    5.5 Responsibility, Authority and Communication5.5 Responsibility, Authority and Communication

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    34/102

    Internal Communication:

    ensure effective communication

    regarding the effectiveness of the

    QMS

    Examples

    Team briefing and

    meetings

    notice boards newsletter

    intranet

    employees surveys

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    35/102

    5.6 Management Review5.6 Management Review

    ManagementManagement

    ReviewsReviews

    QUALITY REPORToveringAudit resultsCustomer feedbackprocess performanceproduct conformity

    C/P Actionfollow-upschanges / follow-upsrecommendationsor improvements

    Improvements in Q

    Improvements inProducts/Processe

    Resource Needs

    OUTPUTSOUTPUTS

    INPUTSINPUTSQUALITYQUALITY

    PROCESSPROCESS

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    36/102

    6.2 Human Resources

    6.2.1 General6.2.1 General

    Right person for the right jobRight person for the right job

    qualified managers?

    qualified supervisors?

    appropriate workers?

    Qualified /Qualified /

    Appropriate meansAppropriate means

    1. Education1. Education

    2. Training2. Training3. Skills3. Skills

    4. Experience4. Experience

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    37/102

    Provide necessary infrastructure

    for the QA program, e.g.

    building, workspace, utilities process equipment (hardware/

    software)

    supporting services, e.g. transport,

    communication,

    6.3 Infrastructure6.3 InfrastructureExamples

    suitable machines,

    workspaces,

    software, hardware,

    information

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    38/102

    The organization shall determine

    and manage the work

    environment needed to achieve

    conformity to productrequirements

    Examples

    work space

    heat, humidity, lightairflow,

    hygiene, cleanliness,

    noise, vibration and

    pollution, etc.

    6.4 Work Environment6.4 Work Environment

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    39/102

    7. Product Realization

    7.1Planning 7.2

    Customer

    RelatedProcesses

    7.3

    Design &Development

    7.5Production &

    ServiceProvision 7.4

    Purchasing

    7.6Monitoring &

    MeasuringDevices PRODUCT

    REALIZATION

    7 1 Planning of Product

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    40/102

    7.1 Planning of ProductRealization

    Quality objectives and

    requirements for the product

    establish processes, documents,

    and provide resources specific tothe product

    required verification, validation,

    monitoring, inspection and test

    activities specific to the productand the criteria for product

    acceptance

    identification of relevant records

    Product Quality

    Plans?

    Guidance ISO 10005

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    41/102

    7.2 Customer-related Processes

    Determine:

    customers requirements

    unstated but necessary requirements

    statutory and regulatory product reqt any additional requirement

    determined by the organization

    7.2.1 Determination of requirements related to the Product7.2.1 Determination of requirements related to the ProductExamples

    contracts

    customer surveys,

    focus groups applicable national

    regulations

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    42/102

    7.2 Customer-related Processes

    review contract before acceptance

    ensure product reqts are defined

    resolve issues before acceptance

    confirm organization capability

    maintain records

    ensure amendments properly

    Examples

    Contract review

    review of results of

    surveys and focusgroups, etc.

    7.2.2 Review of requirements related to the Product7.2.2 Review of requirements related to the Product

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    43/102

    7.2 Customer-related Processes

    Make effective arrangements for

    communicating with customers in

    relation to:

    product information inquiries, contracts or order handling,

    including amendments, and

    customer feedback, including

    customer complaints

    Examples

    printing of product

    information on

    packaging

    internet

    catalogs and service

    manuals, etc.

    7.2.3 Customer Communication7.2.3 Customer Communication

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    44/102

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    45/102

    7.4 Purchasing

    PURCHASINGURCHASINGPurch

    asin

    gP

    rocess

    PurchasingInform

    ation

    Verification of

    Purchased Product

    7 5 Production and Service

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    46/102

    7.5 Production and ServiceProvision

    7.5.1Control of

    Production &Service

    Provision

    7.5.2

    Validation ofProcesses

    7.5.6

    Control ofMonitoring and

    MeasuringDevices

    7.5.4CustomerProperty

    7.5.5Preservation

    of Product

    7.5.3Identificationand

    Traceability

    8. Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    47/102

    8. Measurement, Analysis andImprovement

    8.38.3Control ofControl of

    non-conformingnon-conforming

    productproduct

    8.58.5ImprovementImprovement

    8.28.2Monitoring &Monitoring&MeasurementMeasurement

    8.48.4

    AnalysisofAnalysisof

    DataData

    8.18.1

    GeneralGeneral

    8 Measurement Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    48/102

    8 Measurement, Analysis andImprovement

    Ensure conformity of the product

    ensure conformity of the QMS

    ensure effectiveness and

    continually improving the QMS

    This section is about

    Quality Control (QC)

    Conformity to customer

    needs, contracts, and

    national regulation must

    be ensured before

    product is dispatched

    Validation of measuring

    procedures

    Regularly up-grade

    accuracy and

    effectiveness of QC

    8.1 General8.1 General

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    49/102

    8 Measurement, Analysis andImprovement

    Customer Satisfaction

    device a method to measure and

    monitor customer satisfaction from

    customer perception point of view

    Internal Audit

    regularly carry out internal audit to

    check conformity and

    effectiveness of the QMS

    design an effective audit program

    and plan, criteria

    competent auditors

    audit results and records

    follow-ups and timely C/A

    Examples of CS: Direct interfaces

    focus groups

    surveys

    sector and industry

    studies

    Examples of IA:

    Main objective is to

    check the correctness

    and performance offunctions and

    processes; not

    documentation of

    processes

    8.2 Monitoring and Measurement8.2 Monitoring and Measurement

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    50/102

    8 Measurement, Analysis andImprovement

    Processes

    apply suitable monitoring of

    processes where required

    C/A when deviation occurs

    Products

    measure product characteristics to

    confirm fulfillment of quality

    at appropriate stages in accordance

    with the quality plans

    define acceptance criteria

    authorize release and records

    8.2 Monitoring and Measurement8.2 Monitoring and Measurement Examples

    use of SPC,

    especially control

    charts

    monitoring and

    supervision of

    process parameters

    daily morning reviews

    of quality by workers

    and their supervisors

    Appropriate product

    measurement scheme

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    51/102

    8 Measurement, Analysis andImprovement

    Determine, collect and analyze

    appropriate data from

    measurement sources to check

    conformance and analysis forimprovement in:

    customer satisfaction

    product conformance

    process

    suppliers

    8.4 Analysis of Data8.4 Analysis of Data Analysis is not

    compiling of data

    Analysis is after

    compiling of quality

    data

    Analysis is part of

    Quality Report

    Sources of data?

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    52/102

    8 Measurement, Analysis andImprovement

    Continual Improvement

    identify opportunities of improvement

    from quality policy, objectives, audit

    results, analysis of data, C/P actions,

    and management reviews

    mobilize improvement programs

    8.5 Improvement8.5 Improvement Clear evidence of

    improvement

    processes

    Clear evidence of

    improvements

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    53/102

    8 Measurement, Analysis andImprovement

    Corrective Action

    take timely action to eliminate the

    cause of nonconformities.

    Review nonconformities determine causes

    evaluate

    determine and implement action

    records of results

    review and confirm results

    8.5 Improvement8.5 Improvement What is the

    difference between

    Correction,

    Corrective Action

    and PreventiveAction?

    Corrective Action

    Form

    Control of Corrective

    Actions

    8 Measurement, Analysis and

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    54/102

    8 Measurement, Analysis andImprovement

    Preventive Action

    determine potential nonconformities

    current mistakes and future planning

    determine their causes device actions

    implement actions

    record results

    review action taken

    8.5 Improvement8.5 Improvement Outputs of

    management

    reviews or corrective

    actions

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    55/102

    IQA

    TO

    ISO90

    00:200

    0

    Audit Terms andAudit Terms and

    DefinitionsDefinitions

    Ref: ISO/CD.3 19011Ref: ISO/CD.3 19011

    4

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    56/102

    Audit: systematic, independent and documented

    process for obtaining audit evidence and evaluating it

    objectively to determine the extent to which audit

    criteria are fulfilled

    Audit Criteria: set of policies, procedures or

    requirements used as a reference

    Audit Evidence: records, statements of fact orother information, relevant to the audit criteria and

    which are verifiable (can be quantitative or qualitative)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    57/102

    Audit Finding(s): result(s) of the evaluation of

    the collected audit evidence against audit criteria

    Audit Conclusion(s): outcome of an audit,reached by the audit team after consideration of the

    audit objectives and all audit findings

    Auditee: organization being audited

    Auditor: person with the competence to conduct

    an audit

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    58/102

    Audit Team: one or more auditors conducting an

    audit (one being appointed as audit team leader)

    Technical Expert: person who provides specificknowledge or expertise with respect to the subject

    to be audited

    Audit Program: set of one or more auditsplanned for a specific time frame and directed

    toward a specific purpose

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    59/102

    Audit Plan: description of the on-site activities

    and arrangements for an audit

    Audit Scope: extent and boundaries of an audit(typically includes a description of physical

    locations, organizational units, activities and

    processes, as well as the time period covered

    Competence: demonstrated capability to apply

    knowledge and skills

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    60/102

    IQA

    TO

    ISO90

    00:200

    0

    Principles of AuditingPrinciples of Auditing

    Ref: ISO/CD.3 19011Ref: ISO/CD.3 19011

    5

    Five Principles of Auditing

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    61/102

    Five Principles of Auditing

    Ethical Conductthe foundation of professionalism1

    Fair Presentationthe obligation to report truthfully and accurately2

    Due Professional Careapplication of reasonable care in auditing3

    Independence

    impartiality and objectivity of the audit conclusion

    4Evidencethe rational basis for reaching audit conclusions5

    Trust, integrity,confidentiality, discretion

    Free from bias and

    conflict of interest

    Priorities of stakeholders

    necessary competence

    Accurate and complete

    Proper sampling

    verifiable

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    62/102

    Elements of Competence

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    63/102

    Elements of Competence

    Personal

    Attributes

    AuditExperience

    Work

    Experience

    Auditor

    Training

    Education

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    64/102

    There should be an evaluation process that should

    first be used for initial evaluation of a person who

    wishes to become an auditor

    Even in case where he/she doesnt, thedevelopment process of an auditor should be

    clearly defined to ensure a sound and professional

    function in the organization

    Providing competent auditors is only the first steptowards ensuring the reliability of the audit process

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    65/102

    Auditors Personal Attributes

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    66/102

    Auditor s Personal Attributes

    Mature

    unbiased and fair

    ethical

    open minded

    diplomatic

    observant

    decisive self-reliant

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    67/102

    IQA

    TO

    ISO90

    00:200

    0

    Managing An AuditManaging An AuditProgramProgram

    7

    What is being Audited ?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    68/102

    What is being Audited ?

    Machinery

    Facilities Procedures

    People

    ProcessesProduct

    ?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    69/102

    How t e extent o an au tvary?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    70/102

    vary?

    Large TextileSpinning

    1000 persons4 processes

    Dental Clinic3 person

    Many ComplexTreatmentProcesses

    AutomobilePlant

    400 person3 5 processes

    Scope ?Objective?Duration?Expertise?Frequency of Audit?Complexity of Product and Processes?Legal Requirements?

    Standards?Audit Criteria?Social Environment?Educational Environment?

    What resources are required todit?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    71/102

    audit?

    Large Textile

    Spinning1000 persons4 processes

    Dental Clinic3 person

    Many ComplexTreatmentProcesses

    Automobile

    Plant400 person

    3 5 processes

    Number of Auditor(s)?Competence of Auditor(s)?Technical Expertise?Duration?Administration?

    Documentation?Stationary?

    Can you identify companysP d t / i ?

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    72/102

    Product /services?

    Shoe company Pharmacy Hospital Airline

    University Primary School Insurance Company

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    73/102

    D scuss on Exerc se - ProcessModel

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    74/102

    Model

    You are auditing a purchase dept. that buys

    material for the company. How would you apply the

    QMS Process Model on the activities of the

    department? Identify the sequence of your checkpoints / from the requirements of ISO 9000:2000.

    A dit P

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    75/102

    Audit Process

    Initiating the Audit1 Definition of scope, objective andcriteria

    Establish audit team and contacts

    Document Review2 Review the documents of the QMS andestablish their completeness and correcness (relevance to their processes)

    Site AuditPreparation3

    .

    Planning Team assignments Preparing working documents

    A dit P ( t )

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    76/102

    Audit Process (cont.)

    Site Audit4.

    Opening Meeting Verification Process (collecting and

    verifying information), audit findings,communicating findings, closing meeting

    Audit Reporting5 audit report preparation report review, approval and distribution retention of documents

    Audit Completion

    6

    confirmation of completion as per theaudit plan

    Audit Follow-up7 Verification of Corrective, Preventiveand/or Improvement Action

    Key Points of the Audit Process

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    77/102

    Key Points of the Audit Process

    Audit Objectives, scope, and criteriaAudit Objectives, scope, and criteria

    to be defined by the auditee

    Objectives: compliance to all applicable ISO 9001 QMS

    requirements, legal obligations (illegality) for product

    conformity, contractual obligations to clients, and

    consumer protection (in general)

    scope: boundaries of audit, I.e. location, organizational

    units, activities and processes to be audited

    criteria: applicable policies, procedures, standards, laws,QMS requirements, contractual requirements, industry

    codes,

    Audit Teams Requirement

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    78/102

    Audit Team s Requirement

    GENERAL

    independence, process familiarity, mature personality,

    good communicator and analyzer, motivated, physically fit,

    socially disciplined, free from conflict of interest, honest,

    capable to write objective audit findings/reports, not

    submissive, and interactive

    APPROPRIATE COMPETENCE

    relevant technical expertise or take assistance of technicalexperts with appropriate technical knowledge, skills and

    experience.

    Auditees Right on acceptabilityf A dit

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    79/102

    of Auditors

    Both the audit client and auditee have a right to

    request the replacement of particular team

    members on reasonable grounds, which should be

    communicated to those responsible for managingthe audit program.

    Examples of reasonable grounds can be conflict of

    interest situation (formal employees, consultant),

    unethical behavior, lacking appropriate professional

    background of the audit team, non-professional

    behavior (e.g. violating confidentiality), etc.

    Document Review

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    80/102

    Document Review

    A necessary step before site audit

    Should be reviewed in light of audit objectives,

    scope and criteria

    A preliminary on-site visit may be necessary to beable to carry out the document review

    Document Review should be done very carefully,

    and is most effectively done with the support of

    relevant records.

    Planning for On-Site Audit

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    81/102

    Planning for On Site Audit

    Parameters of plan: auditor(s), departments /

    sections, time (usually hours), applicable QMS

    processes (clauses), applicable criteria (standards,

    legal, contractual, etc.), locations / sites, logistics,language limitations, technical expertise (doctors,

    computer specialists, pharmacists, architecture,

    etc.)

    Working Documents

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    82/102

    Working Documents

    Audit procedure

    audit checklist(s)

    sampling plan

    forms / papers for recording information andsupporting evidence

    NCR forms

    On-Site Activities

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    83/102

    On Site Activities

    Opening Meeting

    Investigation

    Observation

    Interviews confirmations

    Communication

    Audit Findings

    Closing Meeting

    Opening Meeting

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    84/102

    Opening Meeting

    Establish an Audit Environment and

    Communication links with the management

    Inform about the audit plan and methodology

    confirm the audit criteria (contractual, legal,industrial, and companys obligations and

    standards)

    confirm the sampling plan (number of samples to

    be used in the width and depth of audit) confirmation of relevant work safety, emergency

    and security procedures for the audit team

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    85/102

    (cont.)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    86/102

    ( )

    Interviews:

    relevant people must be interviewed directly at all levels

    auditor should go to the relevant people to interview; they

    should not be called to answer the auditor

    tone must be respectful and genuine

    objective of interview must be clarified to the interviewee

    Types of questions: Open-ended, Closed-ended, Leading-

    questions, Personal -questions, Interrogative-questions,

    taunting-questions. Certain types must be avoided. The results from the interview should be summarized and

    reviewed with the interviewed person

    End must be with thanks

    Exercise

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    87/102

    Break the group into teams

    Suppose you are auditing the (activity to be given

    by the course facilitator)

    Prepare an audit program keeping in view therequirement of relevant sections of the ISO-9001-

    2000 and the objectives of the audit (intent,

    efficiency and effectiveness)

    Present in the plenary session

    (A)

    (cont.)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    88/102

    ( )

    Observations and Confirmations

    actual products

    actual processes (operators, skill levels, equipment,

    material)

    actual operators

    actual environment

    actual records

    external documents (customers, vendors, legal, and

    referenced standards) computerized data bases

    effectiveness of procedures

    (B)

    Audit Findings

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    89/102

    g

    Auditors should review all facts and the overallsituation

    Conformities should be summarized to at least

    indicate locations, functions, processes, or

    requirements that were audited, where nononconformities were observed

    Nonconformities should be recorded and supported

    by audit evidence. It should be reviewed by the

    auditee to ensure accuracy and understanding. Difference of opinions should be resolved before

    finalizing

    Nonconformity Statement -a critical output of an Auditor

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    90/102

    a critical output of an Auditor

    Few auditors write accurate, clear, and complete

    statements of non-conformity

    Example of a good non-conformity statement

    One of the voltmeters, number 389000, used for

    the testing of generators at the final test bench of

    the main assembly shop was not calibrated, as

    required by the Quality Procedure No.

    QSP4.11/2000. All test equipment which affect

    product quality shall be calibrated to ensure

    accuracy of results

    (cont.)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    91/102

    Poor way of writing NC statements:

    Rewrite the statements as audit findings and

    discuss in the plenary session: quality objectives were not defined test equipment was not calibrated

    there were no training programs

    identifications were missing

    the procedure for SPC was wrong

    (cont.)

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    92/102

    Statements blaming to wrong people !

    An operator was repairing the machine with wrong

    methodOR

    The operator was not properly trained to repair the

    machines

    who is to be blamed in the same incident above?

    Prepar ng or t e os ngMeeting

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    93/102

    g

    Review the overall audit findings

    Prepare the list of audit findings

    reach consensus on the audit conclusions

    agree on the roles and tasks for the closingmeetings (for more than one auditors)

    prepare recommendations

    discuss subsequent audit follow-up

    Closing Meeting

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    94/102

    g g

    Present overall conclusion and findings. Address

    your summary of Conformity and Non-conformity,

    both.

    Present non-conformities in order of priority (frommore important findings to less important)

    Provide direction to management on Corrective,

    Preventive and Improvement actions. It is auditee's

    responsibility to identify C/A or P/A; however theynormally do not understand the difference.

    Confirm follow-up audit

    Auditor-Auditee Roles

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    95/102

    AuditAudit

    ReportApprove

    C/A

    TakeC/A

    Identify

    Rootcause &Suggest

    C/A

    Verify

    C/A

    Improve-

    ment

    AUDITO

    R

    AUDI

    TEE

    Audit Report

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    96/102

    Should provide a complete, accurate, concise and

    clear record of the audit and should contain audit

    conclusions on the following issues:

    extent of conformance of the management system to theaudit criteria

    effective implementation and maintenance of the

    management system, and

    the ability of management review process to ensure the

    continuing suitability, adequacy, and effectiveness of themanagement system

    Contents of Audit Report

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    97/102

    The second/third party reports are formal, whereas,

    first party audit can be less comprehensive and

    may include just nonconformance reporting.

    Audit Follow-up

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    98/102

    Focus should be on whether the auditee has goneinto the root cause of the nonconformance, and

    whether solution provided by the auditee eliminate

    the root cause(s)

    Auditee tend to neglect timely corrective actions.Therefore, auditor should ensure timely corrective

    actions. Appropriate time should be ensured, as

    most often daily or weekly solutions are projected

    into monthly tasks. Just recorded answers to solutions are not

    sufficient. Physical verification of effectiveness of

    the solution is necessary

    Audit Completion

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    99/102

    An audit is completed when all activities in the audit

    plan have been finalized and the approved audit

    report has been distributed

    Normal Problems in Audits

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    100/102

    Lack of Product Orientation Lack of Process Orientation

    Non-technical audits in technical areas

    Incomplete audits

    depth

    width

    Final Words ...

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    101/102

    Audits driven by professional programs can be highly

    valuable in improving the Quality of organizations. On

    the other hand, if conducted unprofessionally, the same

    can be damaging Auditors and audit programs should also be subject to

    checking and improvements

    Progressive development of auditors is generally

    neglected, resulting in poor value Technical competence and personal attributes are both

    important parts of the auditors

    Announced audits can be mixed with unannounced ones

  • 8/14/2019 Iqa to Iso9000-2000 New 13 June 01

    102/102

    QA

    TO

    ISO9

    000:200

    0

    THE ENDTHE END