Professional Documents
Culture Documents
Audit Process Maps
Audit Process Maps
Internal Auditing
What is Internal Auditing ?
...an independent, objective assurance and consulting
activity designed to add value and improve an
organization's operations. It helps an organization
accomplish its objectives by bringing a systematic,
disciplined approach to evaluate and improve the
effectiveness of risk management, control and
governance processes.2
Add Value to Quality Audits
• What is value ?
Value is provided through the development of products
and services and the use of resources to promote
those products and services.
• In the process of gathering data to understand and assess risk, internal auditors
develop significant insight into operations and opportunities for improvement
that can be extremely beneficial to their organization.
• This valuable information can be in the form of consultation, advice, written
communications or through other products--all of which should be properly
communicated to the appropriate management or operating personnel. 1
How to add value to Internal Audits?
• gather data
• analyze and understand process
• process auditing against internal and external stanadards
• understand, assess and manage risk
• develop insight into the operations
• strenghten internal controls
• measure operational efectiveness
• reduce cost
• eliminate waste
• highlight oportunities for improvement
• provide trendline data to determine baseline and benchmark
performance improvement
Types of value added audits:
1. Process auditing
• Steps:
Indentify business and process objectives
Flowchart critical procesess
Indentify critical process inputs and outputs
Evaluate process procedures, records and
documentation against ISO 9001:2000 or similar
quality criteria
Evaluate process metrics against business objectives
Analyze metrics to determine process stability and
then improvement over time.
Types of value added audits:
2.Risc auditing
• Steps
-Identify business and process objectives.
-Identify operational and other risks.
-Define business or other controls.
-Assess and ensure the effectiveness of the
business process to satisfy objectives.
Audit results ?
• Comunicate to involved parties and top management
Top management ?
Analyze
Reviewed by: ISO Management
Approved by: Chief Executive Officer
COP 4.1 Customer-Oriented Process (COP) Model Representative
Signature/Date:
Signature/Date:
Rev: 12/15/03
Sales Manager . Engineering Manager . Contracting Officer . Production Manager . Quality Manager . Shipping Manager . Servicing Manager .
Order / Release
Processing
No
Warranty Work
Inspection and
No Production Delivery or Post Delivery
Test
Servicing
Customer
Invoicing and
Feedback and
Payment
Complaint
Processing
Processing
DFC 4.1 - Sequence and Interaction of Key QMS Processes Reviewed by: ISO Management Representative Approved by: Chief Executive Officer
Signature/Date: Signature/Date:
Rev: 12/15/03
Top Management / ISO Mgt. Rep. Sales Manager Engineering Manager Materials Manager Production Manager Quality Manager Human Resources Ofcr Info Systems Manager
Conduct
Management
Reviews
Responsibility
Management
see OP 5.6
Establish &
Improve QMS
see QM Section 4.0
and QM Section 5.0
Provide
Management
Resources
see QM Section 6.0 Plan & Maintain Qualify & Train Documents/Data
Facilities Workforce see OP 4.2.3
see OP 6.3 see OP 6.2.2 and OP 4.2.4
(Closely Aligned with our “Customer Oriented Process”, see COP 4.1
Manage Customer No Design? Purchase and Verify Needed Materials & Services
Communications see OP 7.4.2, QM Section 7.4.3 and OP 8.2.4
(Inquiries and Feedback,
including Complaints)
Yes
Design/Validate Production Processes
see QM Section 7.2.3 see OP 7.5.2
see OP 8.2.3
and OP 8.2.4
and Improvement
ISO Management Representative Top Management (includes CEO, CFO, COO and HRO) .
Identification of any Strategic or Operational Changes that could affect the QMS
Plan and Schedule Significant Identification of any Policy Issues Requiring Review
Analyze Results and
Management Review Yes Impact on NO
Trends
Meeting QMS? Status Reports on Progress towards meeting specific improvement objectives:
Customer Satisfaction (COO/Sales Manager per OP 8.2.1)
Prepare Overall QMS Effectiveness, including evidence of repeat audit findings (ISO Management Representative per OP 8.2.2) or other repeat problems (ISO
Issue Management Management Representative per OP 8.5)
Management Review
Review Agenda
Inputs Overall Operational Efficiency, including an evaluation of the cost of poor quality (CFO)
Manufacturing Process effectiveness and efficiency, including performance against customer specified (or other) targets for productivity, process capability
and cost (COO/Engineering Manager per OP 7.3)
Overall Product Performance, including an analysis of actual and potential field-failures and their impact on quality, safety or the environment (COO/
Engineering Manager per OP 7.3)
Issue Management Review Inputs and Overall Effectiveness of Production Process Controls, including:
Review Minutes Develop Outputs performance against production schedules (COO/Production Manager per OP 7.5.1),
equipment/facilities maintenance plans (COO/Production Manager per OP 6.3), and
product preservation goals/targets (COO/Production Manager per OP 7.5.5)
Overall Product Quality, including performance against customer specified (or other) targets related to product quality (COO/Quality Manager per OP 8.2.4)
Actions to Improve Effectiveness of the QMS
Monitor and its Processes Overall effectiveness of training completed, including skills training, on-the-job training and employee awareness, and effectiveness of employee motivation
programs/systems (HRO per OP 6.2.2)
Implementation of Actions to Improve Products Analysis of QMS Self-Assessment Results, IsoQual Form 8.5-3, against Malcolm Baldrige based criteria contained in Annex A of ISO 9004:2000
Actions Resulting
from Management Actions to Provide Needed Resources Presentation of New or Changed Objectives
Review New or Revised Improvement Objectives Recommendations for Improvement and Plans (including resources) for Implementation
per OP 8.2.2 and OP 8.5
Recommend
Identify Competency
Source(s) for Obtain Required
Needs during Outsource? Yes
Meeting Emergent Services
Strategic Planning
Competency Needs
per SOP 7.4.2
Overall Responsibility for Managing the Competence, Awareness and Training System: Human Resources Officer
Training Yes
New
Needed? Employee?
Yes
NO
Provide/Coordinate
Annually, New Employee
Orientation
Re-Evaluate IsoQual Form 6.2.2-1
Qualifications,
Provide/Coordinate
Evaluate
Required Training
Performance,
IsoQual Form 6.2.2-2
and Evaluate
Effectiveness of Assess Process for
Training Completed Effectiveness
IsoQual Form 6.2.2-2 per PAW 6.2.2