Ten Tips for Selecting and Using a Consultant – 2. Revise your internal audit procedure

Even if you already have an internal audit procedure, you may need to revise it to address the requirements stated in ISO 9001:2000 clause 8.2.2 for Internal Audit.

Although ISO 9001:1994 required an internal audit procedure, the new standard spells out that the procedure must define responsibilities and requirements for:

  • Planning audits
  • Conducting audits
  • Reporting results
  • Maintaining records

Prior audit results must now be considered when planning the audit program (schedule), in addition to considering the status and importance of the areas to be audited. However, most audit programs were already addressing this as part of the “status” requirement.

The new standard also requires the audit criteria, scope, frequency and methods to be defined. Most auditors know to do this based on their training, but now it is stated as a requirement in clause 8.2.2.

ISO 9001:1994 stated the auditor must be independent of those with direct responsibility for the audited activity. ISO 9001:2000 clarifies that the auditor must be impartial and objective, and that auditors cannot audit their own work. This change may give small organizations more latitude in assigning auditors.