Menu Close

Blog

Internal Audit – ISO9001

[amazon_link asins=’1118024303,1522021140,0198719795,1119240239,B01AS2T0ZA’ template=’ProductCarousel’ store=’digieboodown-21′ marketplace=’UK’ link_id=’5d5c766c-849a-11e7-bdc2-1b7420a1b569′]

This ISO Standard contains an element (8) intended to encompass a range of features which together support a mechanism to improve the performance of the management system. Internal audit forms part of this set, but only a part, yet is probably the only element readily recognizable to the average person. Internal audit is significant, not because of the results it delivers but because the ongoing registration process for ISO9001 companies ensures that Internal Audit is subject to regular scrutiny. It is our contention that the impact of internal audit on the average company is minimal to the point of being useless. Primarily this is due not to the concept of audit, but the manner in which it is managed and conducted.

Generalizing, quality management processes are tolerated rather than being welcomed. They are part of the cost of doing business, primarily due to the failure of the systems to deliver any tangible benefit beyond the marketing advantage said to emerge from the registered status of the organization. A calm examination of the detailed requirements built into the Standard should provide the assurance that the benefits of a controlled work environment will be achieved by following this text in a manner that matches the specific nature and ethos of the organization. But it just does not happen. More specifically, it does not happen often enough to provide the evidence of unfailing benefits for the adoption of the standard.

With a Standard that is International in both origin and application, how can this be? To recognize this it is important to examine the role of those who see their role as one of policing the management system. Often carrying the title of Quality Manager, this individual (sometimes with a team of helpers) is held responsible for the integrity of the documented system and implicitely at least for the quality of the outgoing product or service. Quality Managers have their roots in a manufacturing function which equivalent would have been the Chief Inspector. The name alone provides an indication of the status – perceived or actual- of this individual. He was unquestionably the final authority regarding the acceptable quality of the company's product. Acceptance or Rejection was his decision. Without having physically been there, to many of today's quality managers have in much the same way. With little real understanding or appreciation of the management function, and certainly not the executive role, they fail to speak the language of their local leaders, with clear consequences.

It is a management responsibility to define company objectives and policies, and management will establish – or have established for them – systems to support these policies and objectives. Their need, although seldom expressed, is for an assurance that the systems are providing the controls and benefits that they planned for. They need reassurance. The Internal Audit should provide information specific to the operation of the management system and focussed on this management need, but it seldom works that way. For the most part, the reports of internal audit activity contain a multitude of trivial failures packaged as 'non-conformance', frequently to a requirement that is not specified or is imaginary, and having little bearing on the needs of management. Is it surprising that Internal Audit is seen as a necessary evil, conducted to satisfy the ISO auditor, but having little relevance to life in the real world of commerce and industry?

When material such as this is provided to managers who see no real value in the investment, it is not just the audit that is ignored but the perpetrators of the audit also. A direct consequence of this failure to identify the audit customer's need is a rejection of much that has a Quality Management implication. Managers and quality department staff universally complain of lack of management commitment (an ISO9001 requirement), and a general lack of personal advancement opportunities. But improvement is possible, even radical improvement, and it requires a change in strategy for both Executive Managers and those purporting to be Quality Professionals.

The change process:

1. The organization must understand that every manager and employee has a role to perform in accordance with the requirements laid down for their work. Nobody else can be accountable for the quality of this work.

2. The title Quality Managers is clearly not a true indication of the function of this individual. Holding the QM liable for a failure in product of service is clearly wrong without that delivery was by its nature part of his (or her) normal function.

3. Internal audits should be a recognizable independent assessment of each business function, carried for the function's manager and reported to that individual alone. (The functional managers have the responsibility for achieving a selection of business objectives, and it is they who need the information to support these objectives).

4. It follows that the auditors, while being independent of the function being audited, should also understand the role and responsibilities of senior managers, and speak at that level.

5. These changes require the dissolution of the existing audit statute, and some re-education of the management team who are responsible for preventing the adverse situation to exist.

6. Professional auditors with a wider experience than that obtainable within one or a limited number of organizations alone can provide the assurance and service level needed by an effective management team.

Complete Assistance in the preparation for the implementation of the SMR/CR can be obtained from us at Complaince Consultant Where we have experience in the banking sector from 2015/2016.

Source by Ed Bones
[amazon_link asins=’191064952X,B01M9I0CT8,0670923303,B01M9C1Y3S,0802414869,1494463180,1471164934,0198268238,B01N190549′ template=’ProductCarousel’ store=’digieboodown-21′ marketplace=’UK’ link_id=’8bf0d388-84f1-11e7-bab5-71b20341157b’]
[layerslider id=”2″]

×
Recent Enquiry
Copy code