{"id":1295,"date":"2015-03-17T18:41:22","date_gmt":"2015-03-17T18:41:22","guid":{"rendered":"https:\/\/multiacademstg.wpengine.com\/9001academy\/blog\/2015\/03\/17\/writing-a-good-qms-internal-audit-report\/"},"modified":"2024-11-21T19:01:22","modified_gmt":"2024-11-21T19:01:22","slug":"writing-a-good-qms-internal-audit-report","status":"publish","type":"post","link":"https:\/\/staging.advisera.com\/9001academy\/blog\/2015\/03\/17\/writing-a-good-qms-internal-audit-report\/","title":{"rendered":"Writing a good QMS internal audit report"},"content":{"rendered":"<p>In <a href=\"https:\/\/staging.advisera.com\/9001academy\/what-is-iso-9001\/\" target=\"_blank\" rel=\"noopener noreferrer\">ISO 9001<\/a>, the process for internal audits is one of the most important ways for you to ensure that your quality management system (QMS) is functioning properly and efficiently, but what is the role of the audit report in this process? Many people who are not well versed in audits or the overall quality management system may not fully understand how important an audit report can be. Here is the information you need to know.<\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">What is the importance of an audit report?<\/h2>\n<p>An <a href=\"https:\/\/staging.advisera.com\/9001academy\/documentation\/internal-audit-report\/\" target=\"_blank\" rel=\"noopener noreferrer\">audit report<\/a>\u00a0is the official record of an audit \u2013 the only official record. All of the notes taken by the auditors, all of the comments made by employees during the audit, all of the information taken by the process owners during the audit, and all of the statements made at the closing meeting really don\u2019t amount to anything official. If something is not recorded in the audit report, it doesn\u2019t really count. Remember that it will not only be the people who were audited or were at the closing meeting that will read the audit report; these are also used in management review by people who were not part of the audit.<\/p>\n<p>This is why the audit report from, e.g., a third-party certification body is so detailed; the report needs to record all the information necessary to detail any corrective actions needed and justify why your company is compliant with the ISO 9001 standard. The audit report needs to be the complete recorded evidence of all aspects of the audit. In many ways, an audit without a good report is not really an audit.<br \/>\n<div id=\"middle-banner\" class=\"banner-shortcode\"><\/div><script>loadMiddleBanner();<\/script><br \/>\n<div id=\"side-banner-trigger\" class=\"banner-shortcode\"><\/div><\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">What should be in an audit report?<\/h2>\n<p>So, this brings up the question of what makes a good audit report. What needs to be included, and what should be eliminated? When looking at this, it is important to remember again that the audit report is the one official report of the audit, and therefore must stand on its own. The best practice for audit report content is included in ISO 19011, guidelines for quality and\/or environmental management systems auditing. This may be overkill for a small company, and can be reduced if required, but it is a good start when considering what you want to include in your audit reports.<\/p>\n<p>Here is a list from ISO 19011 of the seven\u00a0items that should be included in an audit report:<\/p>\n<ol>\n<li><strong>Audit Objective<\/strong> \u2013 What was the purpose of the audit? Was this a regular audit of a process, or a follow-up on a corrective action? All audits are done to demonstrate compliance with the requirements, but was there anything else that was being done?<\/li>\n<li><strong>Audit Scope<\/strong> \u2013 What were the boundaries of the audit? If there is more than one manufacturing line using the process, how many were audited? Was a night shift or evening shift excluded?<\/li>\n<li><strong>Audit Client<\/strong> \u2013 Who was the process owner or owners that the audit was performed for?<\/li>\n<li><strong>Audit Dates and Places<\/strong> \u2013 It is important to be able to demonstrate the timeframe when all of your audits of the system take place. Also, for management review, it might be important to know the chronology of the audits that are being reviewed.<\/li>\n<li><strong>Audit Criteria<\/strong> \u2013 What were the processes audited against? For instance, this could be the ISO 9001 standard, internal company procedures &amp; policies, or customer requirements.<\/li>\n<li><strong>Audit Findings<\/strong> \u2013 What are the results of the evidence found? Some companies discriminate between major findings (where there is a systemic failure) and minor findings (such as one or two mistakes that were made, but that were not universal), but this is not necessarily the case. Some companies include positive findings and best practices that can be shared throughout the organization in this section as well. It is important to include the audit evidence for these findings, such as the contract numbers that were reviewed, but leave out the names of people who were audited. The findings are about identifying corrective action, not assigning blame.<\/li>\n<li><strong>Audit Conclusions<\/strong> \u2013 What is the summary of the outcome of the audit? Were there too many findings to determine if the process was properly implemented? What is the assessment of the effectiveness of the QMS from this audit? For some busy executives who just want the summary of the audit, this might be the one and only thing they read in the report, leaving the details to the process specialists.<\/li>\n<\/ol>\n<p>Additionally, ISO 19011 includes some optional items; the following could be applicable to an internal audit if deemed to be useful:<\/p>\n<ol>\n<li><strong>Audit Plan<\/strong> \u2013 This is the plan of who is auditing what processes, and when. For a large audit with multiple auditors, this can be useful.<\/li>\n<li><strong>Summary of Audit Process &amp; Obstacles<\/strong> \u2013 This is especially important to include if there were some obstacles, such as scheduling for an absent process expert, which hindered the audit.<\/li>\n<li><strong>Any Areas not Covered<\/strong> \u2013 If you needed to exclude something you intended to cover, like a second shift, this should be noted for future reference.<\/li>\n<li><strong>Disagreement between Auditor and Auditee<\/strong> \u2013 If the process owner does not agree that the audit evidence presented is non-conforming, as specified by the auditor, then this should probably be noted in the report.<\/li>\n<li><strong>Opportunities for Improvement<\/strong> \u2013 Like the positive finding mentioned above, many companies will use recommendations for improvement as a way to document the cases when an auditor has identified something that is not non-conforming, but could be improved.<\/li>\n<li><strong>Agreed Follow-up Plans<\/strong> \u2013 If an agreement was made on how to address a non-conformance, recording it in the report can be helpful.<\/li>\n<\/ol>\n<p>For more on using ISO 19011 to improve your internal audit process, see <a href=\"https:\/\/staging.advisera.com\/9001academy\/knowledgebase\/13-steps-for-iso-9001-internal-auditing-using-iso-19011\/\" target=\"_blank\" rel=\"noopener noreferrer\">ISO 9001 internal audit in 13 steps using ISO 19011<\/a>.<\/p>\n<h2 style=\"padding-top: 10px; padding-bottom: 10px;\">An audit report should not include surprises<\/h2>\n<p>One final thing to note is that nothing in the report should come as a surprise to the auditees who read it. If information was not presented at the closing meeting, it should not find its way into the audit report. Use your audit report to document what happened in the audit, make it easy to understand, and you will find that your audit information will benefit your efforts to improve your QMS.<\/p>\n<p><em>To implement ISO 9001 easily and efficiently, use our <\/em><a href=\"https:\/\/staging.advisera.com\/9001academy\/iso-9001-premium-documentation-toolkit\/\" target=\"_blank\" rel=\"noopener\">ISO 9001 Premium Documentation Toolkit<\/a><em> that provides step-by-step guidance and all documents for full ISO 9001 compliance.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In ISO 9001, the process for internal audits is one of the most important ways for you to ensure that your quality management system (QMS) is functioning properly and efficiently, but what is the role of the audit report in this process? Many people who are not well versed in audits or the overall quality &#8230;<\/p>\n","protected":false},"author":27,"featured_media":72554,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[157,125,133],"class_list":["post-1295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-audit-report","tag-internal-audit","tag-iso-9001"],"acf":[],"_links":{"self":[{"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/posts\/1295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/comments?post=1295"}],"version-history":[{"count":0,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/posts\/1295\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/media\/72554"}],"wp:attachment":[{"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/media?parent=1295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/categories?post=1295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging.advisera.com\/9001academy\/wp-json\/wp\/v2\/tags?post=1295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}