Professional Documents
Culture Documents
QMS Auditor/ Lead Auditor: Pre-Course Notes
QMS Auditor/ Lead Auditor: Pre-Course Notes
Pre-Course Notes
abc
Introduction a
Welcome to the Quality Management Systems Auditor/Lead Auditor training course.
Thank you for choosing LRQA.
We have designed the course to give you the knowledge and skills to perform audits of
management systems against ISO 9001 effectively and with confidence.
Complete the course successfully and you will satisfy the formal training requirements
for IRCA certification to all grades of Quality Management System auditor.
Course hours
• The course duration is 40 hours over 4½ days
• 100% attendance is required.
• You will be asked to complete evening work each day, which will take approximately
1 hour.
Delegate assessment
• We will fully explain at the start of the course the assessment criteria and
performance standards you need to achieve.
• We will give you written feedback each day, and guidance on any improvements
needed.
• You will complete a 2 hour written examination at the end of the course.
Important
• Please complete Section G – Verification of pre-course work. This is very important.
It will help you prepare for the course.
• Please be sure you bring the completed pack and your personal copy of ISO 9001
with you when you attend the course.
• Please complete your personal course objectives at the end of the pack. We will ask
you to present these at the start of the course.
Introduction 1
Note: The following spellings are used throughout for consistency with the
ISO 9000 series of documents: - Organization. Realization. Realized
ISO 9001 and ISO 9004 are designed to complement each other, but can also be used
independently.
Most standards require periodic revision. Several factors combine to render a standard
out of date: technological evolution, new methods and materials, new quality and safety
requirements. To take account of these factors, ISO has established the general rule that
all ISO standards should be reviewed at intervals of not more than five years.
Definitions
The following terms and definitions are quoted from ISO9000 Quality management
systems - Fundamentals and vocabulary.
To help your understanding, we have grouped related terms together and separated
groups using this bullet symbol.
Quality
Degree to which a set of inherent characteristics fulfils requirements
System
Set of interrelated or interacting elements
Management system
System to establish policy and objectives and to achieve those objectives
Process
Set of interrelated or interacting activities which transforms inputs into outputs
Product
Result of a process
• The term Product is used as a generic term for:
- services (for example transport)
- software (for example computer programme or information,)
- hardware (for example engine mechanical part)
- processed materials (for example lubricant)
Procedure
Specified way to carry out an activity or a process
• Where the procedure is documented the term ‘written procedure’ or ‘documented
procedure’ is frequently used. For clarity, auditors should not use the term procedure
when in fact they are referring to a written or documented procedure.
Nonconformity
Non-fulfilment of a requirement
Correction
Action to eliminate a detected nonconformity
• for example rework
Corrective action
Action to eliminate the cause of a detected nonconformity or other undesirable situation
Preventive action
Action to eliminate the cause of a potential nonconformity or other undesirable
situation
Document
Information and its supporting medium
Record
Document stating results achieved or providing evidence of activities performed
During the course you will be asked to match requirements of ISO 9001 to some of the
quality management principles. By reading this section and working through an
example of how requirements of ISO 9001 can be linked back to the principles you will
be giving yourself a head-start. You will also start to familiarise yourself with ISO
9001.
1. Customer focus
Organizations depend on their customers and therefore should understand current
and future needs, should meet customer requirements and strive to exceed customer
expectations.
2. Leadership
Leaders establish unity of purpose and direction of the organization. They should
create and maintain the internal environment in which people can become fully
involved in achieving the organization's objectives.
3. Involvement of people
People at all levels are the essence of an organization and their full involvement
enables their abilities to be used for the organization’s benefit.
4. Process approach
A desired result is achieved more efficiently when activities and related resources are
managed as a process.
6. Continual improvement
Continual improvement of the organization's overall performance should be a
permanent objective of the organization.
Process approach 4.1a) identify the processes needed for the quality management system….
4.1b) determine the sequence and interaction of these processes
4.1c) determine criteria and methods needed to ensure that both the
operation and control of these processes are effective
Now refer to ISO 9001. Read what it says in the sections listed below and
see how these requirements support the process approach principle.
4.1 e)
4.1 f)
7.1 – refer to the first paragraph
8.2.3
Complete the “Quality Management Principle and ISO 9001 cross reference
section” that is part of the “Verification of pre-course work” section.
This is the “Plan-Do-Check-Act” improvement cycle. You may hear it called the PDCA
cycle or the Deming cycle. You can apply it to all processes and you can use it to plan
and implement process change.
• Plan – Plan the improvement and plan how you will know if it has worked.
• Act – Act to maintain the improvement, address any shortfall and learn from
experience.
ISO 9001 aims to bring about continual improvement through the Plan-Do-Check-Act
cycle, which is embedded into ISO 9001 requirements.
Controls
Resources
Process Interaction
Individual processes rarely operate in isolation and processes can often be broken down
into sub-processes. Outputs from one process are often inputs into later processes.
Some times the output from one process will become a control to another process. For
example, consider two parts of a purchasing process.
Supplier
Performance
standards
Potential
Approved
Suppliers Supplier Approval Suppliers
Competent
Personnel
Approved
Suppliers
Purchase Purchase
Purchasing
Requirements Order
Competent
Personnel
• Effectiveness – extent to which planned activities are realized and planned results
achieved.
Checking a process has been carried out in accordance with planned arrangements is a
conformance audit. Checking the results of a process meet requirements is an
effectiveness audit. Auditors must consider the purpose of a process to determine its
effectiveness.
Continual
Continualimprovement
improvementof
of
the quality management system
the quality management system
Management
Management
Responsibility
Responsibility
Customers Customers
Measurement,
Resource Measurement, Satisfaction
Resource analysis and
management analysis and
management improvement
improvement
Input Output
Requirements Product
Product Product
Realisation Product
Realisation
The diagram illustrates the relationship between customers and the supplying
organization. On the left-hand we have customer requirements. In the middle we have
the organisation supplying the customer. On the right-hand we have the customer’s
perception as to whether the organization has met their requirements.
The organization’s quality policy should reflect what is important to the organization
and its customers. Top management may formulate and review the quality policy as part
of other business planning activities. In practice an organization’s policies tend to
remain fairly constant from one year to the next whilst objectives change to meet
emerging needs.
Having set policy and established objectives for quality as well as other business
requirements such as profitability, the role of top management is to communicate these
and establish a unity of purpose throughout the organization.
Resource Management - All businesses need resources. Within the context of ISO
9001 these comprise:
• Human resources - including competence, training and awareness.
• Infrastructure - including buildings, workspace and associated utilities, process
equipment (hardware and software) and supporting services (such as transport,
communication or information systems).
• Work environment - including physical, environmental and other factors under which
work is performed.
Examples of realization processes that apply to most companies are sales, purchasing,
delivery and invoicing. For a manufacturing company, realization processes could also
include production processes, inspection and test, calibration and installation. For a
service company such as a hotel, examples of realization processes would be guest
reception, restaurant and room services.
And:
2. At organization level – through use of the quality policy, quality objectives, audit
results, analysis of data, corrective and preventive actions and management review.
The aim is to:
• review what has been achieved against the quality policy and quality objectives and
act to address any shortfalls
• plan for the future, taking account of changes in requirements and other changes
that could affect the quality management system such as development of
technology
This activity is part of what ISO 9001 calls “management review” and is the process
by which new quality objectives and targets are established.
Look now at clauses 5 through to 8. The main body of the Standard is organised in the
same way as the model of a process-based quality management system. That is:
• Clause 5 – Management responsibility
• Clause 6 – Resource management
• Clause 7 – Product realization
• Clause 8 – Measurement, analysis and improvement
Pre-course preparation
During the course you will look in detail at some of the specific requirements of ISO
9001. Ideally you will start familiarise yourself with ISO 9001 requirements before
attending the course.
Audit
Systematic, independent and documented process for obtaining audit evidence and
evaluating it objectively to determine the extent to which audit criteria are fulfilled
Audit evidence
Records, statements of fact or other information, which are relevant to the audit criteria
and verifiable
Audit criteria
Set of policies, procedures, standards or requirements
Auditor
Person with competence to conduct an audit
Audit team
One or more auditors conducting an audit, supported if needed by technical experts
Note – one auditor of the audit team is appointed as the audit team leader
Technical expert
Person who provides specific knowledge or expertise to the audit team
Audit client
Organization or person requesting an audit
Auditee
Organization being audited
Audit programme
Set of one or more audits planned to a specific time frame and directed towards a
specific purpose
QMS Auditor/Lead Auditor Page 18 of 25
Version 3 - Revision 0.0
Precourse Notes
© LRQA Training 2009
Section F – Introduction to Auditing a
Audit plan
Description of the activities and arrangements for an audit
Audit scope
Extent and boundaries of an audit
Accreditation bodies, for example the United Kingdom Accreditation Service (UKAS):
Audit and award accreditation to:
ªCertification bodies, for example LRQA
Who audit and award certification to:
ªOrganizations
1. Match the definition to the term and write the letter of the correct definition against
the term. There are two definitions for which there is no term listed.
G Non-fulfilment of a requirement
2. In the space below, describe the difference between corrective action and preventive
action and give an example of each.
Customer focus
Leadership
Involvement of people
Continual
improvement
Factual approach to
decision making
6. With reference to this pre-course work and ISO 9001 describe in the space below
the purpose of “Management review”
-----------------------------------------------------------------------------------------------------------------
In thinking about your objectives for the course you also want to consider:
• What you need to do to meet the IRCA requirements for Auditors. You may find it
beneficial to visit the IRCA web site for more details of the requirements for
becoming an IRCA certificated auditor. www.irca.org
• Any other expectations which you or your employer have from the course.
Please now write your personal objectives using the form on the next page and bring it
with you to the course.
Name: Company:
My current auditing experience is: (please give a brief description of your auditing
experience including the type of audits you have completed or been involved in)
My future auditing role will be: (please give a brief description of how you see your role as
an auditor developing in the future and include also the type of audits you expect to be
involved in)
My objectives for the course are: (please list between three and five specific things that you
want to be able to do as a result of completing the course)
Please take a copy of this page and bring it with you to the course. You will be asked to
discuss and present your course objectives to your group and LRQA trainer.
Lloyd’s Register Quality Assurance Limited is a member of the Lloyd’s Register Group.