ISO Certification and Internal Audit are closely related with each other. Without internal audit you cannot achieve iso certificate and you cannot hold your certificate without performing internal audit regularly.
There is few mandatory things for ISO certification. Before getting certification you will have to prepare ISO documents. After documentation and implementation you will have to perform internal audit. It is must doing job. Usually two internal audits are done in a year. However, It can be done in any frequency.
The clause number 9 of ISO 9001:2015 has told to measure the quality management system after implementation of standard requirements and after certification. Sub clause 9.2 told to perform internal audit to measure the performance of ISO standard. After performing internal audit the report should be submitted to the top management for review. So, ISO Certification and Internal Audit are very important terms.
What is Internal Audit?
Systematic, independent and documented process to finding fact and evaluating it objectively to determine the extent to which audit criteria are fulfilled.
How to Do Internal Audit?
There are few steps to perform audit. Audit team build up, Prepare Audit plan, Fixing Audit Scope, prepare Audit checklist and share plan to the auditees before audit date. In the audit day there are also few steps like: opening meeting, onsite activities and finally closing meeting and report preparing.
Who Can Do Internal Audit?
To perform ISO internal audit, it is necessary to have internal auditor certificate or internal auditor training. Without internal auditor training you will not understand how to do audit. If you think you have no trained internal audit then you can build up a team from your organization or you can hire a Certified internal auditor.
Why Internal Audit in ISO?
ISO Certification and Internal audit are strongly bonded with each other. Internal audit can be compared with a mirror. What are happening inside the organization, you can see it from the internal audit result. In the language of ISO it is also called the first party audit. It is mandatory for iso certification and iso certified company. From this first party audit you can check different process within the scope.
Benefits of Internal Audit
There are lots of benefits of performing internal audit. It finds faults and gaps in the processes of your organization. It creates competence of your staffs. It creates honesty among the staffs. It reduces wastes in production. Finally it helps to grow your revenue.
How to find internal auditor?
There are few certification bodies who regularly arrange internal auditor training in Bangladesh. Like other training organization Advanced Assessment Services providesinternal auditor training regularly. The best thing is it is free of cost if you are going to apply for ISO certification from AAS. Selecting AAS as your certification body means you are saving money from ISO Certification and Internal audit.
Internal Audit is mandatory for ISO Certification and for ISO Certified company for any standard. Many companies do not like to do internal audit after certification. This happens because lack of awareness on internal audit and understanding the benefits of ISO Internal audit.
So, it is responsibility of Certification body to tell the company about the importance of Internal audit. Internal audit is a kind of monitoring system. It is written in the sub clause 9.2 of Clause no 9 of 9001:2015 Standard about Internal audit.
Internal audit is called the first party audit. Usually it is done cross section wise among the departments by the company staffs. However, it can also be done by hiring a third party or free lancer ISO auditor.
There is no specific quantity of internal audit mentioned in the standard. Company can do according to its need. However, most of the companies perform two internal audits in a year. Sometimes three or four can be done. Actually the quantity of internal audit depends on companies activities and complexities of the processes.
There should be a procedure for doing internal audit. All terms and conditions can be put in the procedure. Like who will be lead auditor, who will be auditors, how many members will perform the audit and how many times in a year etc should be written in the procedure.
However, for small companies who do not like to maintain procedure then they can use the following simple items for performing internal audit:
Select team member and team leader
Make plan and schedule
Share audit plan to all departments
Use check list for audit
Use attendance sheet
Use NC log sheet
Prepare Audit Report (by team leader)
Why you should do internal audit? Internal audit helps to know what is happening actually inside your company. It helps to find the hidden things in a department. It finds the gaps of the processes. It creates competence among the staffs. It reminds the employees about their responsibilities. Internal audit report helps the management to take decision on any issues effectively.
After performing audit taking CA Plan is mandatory. CA plan helps for practicing for continual improvement. Which is a major principle of ISO 9001 Standard. CA Plan is the last and final stage of NC which is raised during internal audit.
To enjoy benefits of ISO Certification there is no alternative for doing internal audit. It is like a mirror. From this mirror you can see the status of your management quality.
SME organization who is unable to spend money on ISO Certification then Advanced Assessment Services (AAS) may be the right choice for him. AAS provides free internal audit training to its clients. It is a big save for SME. You can save around 50,000 taka from this service if you take certificate through AAS.
ISO Internal Audit is required for ISO Certified Company to maintain its certificate properly. It is a great tool to see your organization’s quality status.
ISO Internal audit is a mirror to see your management quality. It says how are you implementing quality management system standard in your organization?
How your staffs are doing? Is there any leaking or is there any negligence in any department? All this answer will be found in Internal Audit result.
Internal audit is must do a thing in ISO 9001 Standard certified companies. This is not only for fulfilling the terms of iso requirements.
It is a great tool to see your company’s quality status. What is happening within your organization internal audit can find that.
Due to compulsory thing of ISO 9001 requirement it is your duty to perform internal audit regularly. In this regard, it is your responsibility to build an internal auditor team inside your company. After an audit, it is another must do a thing to perform management review meetings too.
ISO Internal audit helps to meet another requirement continual improvement. By performing internal audit, you can find the leaking inside the process of your organization. It is done cross section wise. So, it is helpful to find fault inside the organization.
ISO Internal audit also helps to increase employees’ awareness and competence. Company staffs become more serious about their duty. They become more attentive to do their work nicely. Otherwise, they will have to face questionnaires about findings.
There are many internal auditor training organizations in Bangladesh. However if you are looking for low cost and quality internal auditor training organization then Advanced Assessment Services can be your right choice. To see the training schedule, you may visit ISO INTERNAL AUDITOR TRAINING
How many internal audit (IA)should be performed in a year for ISO 9001 Certified company or iso 9001 certification? Actually there is no specific requirement according to the ISO 9001 standard. However, the frequency of IA should be determined according to your quality policy and objective.
From the clause 8.2.2b the details idea can be found about internal audit for ISO 9001 Standard. Usually 2 times in a year is the mostly common practice all over the world. However three or four times can also be done and some organizations are doing that. Specially who are serious about their quality.
If a lot of nonconformity/nonconformities are found from the audit then frequency should be higher for continual development of the process. If the systems run well then lower frequency for IA may be considered.
About this topic of internal audit many ISO experts from different countries have expressed their valuable opinions in different way in linkedin based forum ISO 9001 for small business. You can check it from this ISO Forum link
Though there is differences about IA but every expert of ISO 9001 is agreed and it is mandatory to do Internal audit for ISO 9001 Standard Certified company. With internal audit Management review is also mandatory for certification and for iso 9001 certified companies.
Why Internal Audit for ISO 9001 Standard is mandatory?
Internal audit is the tool to see your company’s status. In another word what are happening inside your company, where is gap for what, where is good for what etc can be known from this item.
As a company owner it is not possible for you to visit all sections of all departments. But as a sample basis you can see actually what is happening in your company by performing internal audit. From this internal audit result you can take decision to develop any weak section of any department of your company.
How to do Internal Audit for ISO 9001 Standard Certification/Certified Company?
You can hire an ISO 9001 consultant or you can build internal auditor team by your staffs inside your company. There are many iso training organizations or Certified ISO 9001 Lead Auditors in Bangladesh who can provide training for building internal auditor team inside your company premises. To find one you may contact the page aas ISO consultancy or call now 01742125232.