1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice
You must be a registered member in order to post messages and view/download attached files in this forum.
Click here to register.

ISO 9001:2015 Internal Audit

Discussion in 'ISO 9001:2015 - Quality Management Systems' started by Manickam Babu, Dec 28, 2015.

  1. Manickam Babu

    Manickam Babu Member

    Joined:
    Dec 28, 2015
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    1
    Hi,

    I am new user to this group. I would like to go for the transition shortly. Our organisation is certificated for ISO 27001:2013 and ISO 9001:2008. Since we have been already certified for ISO 27001:2013, we can complete the documentation part. My query is that who can conduct Internal Audit for the new standard? Can ISO 9001:2008 Internal Auditor or ISO 27001:2013 Lead auditor complete the Internal audit for ISO 9001:2015? Please give your valuable advise.

    Regards,

    Manickam Babu
     
  2. Somashekar

    Somashekar Well-Known Member

    Joined:
    Jul 30, 2015
    Messages:
    114
    Likes Received:
    98
    Trophy Points:
    27
    Hi Babu ... As a rule there is only one. " Competent Internal auditor "
    As this standard is new (ISO9001:2015) The only way an internal auditor will be competent is by being trained to this 2015 requirements. The internal auditing technique continues to be the same. I feel over a few internal auditing cycles you will develop your present internal auditors who have the competency for the ISO9001:2008 and the ISO27001:2013, to audit to this new version of the ISO9001...
     
    Andy Nichols and Manickam Babu like this.
  3. Manickam Babu

    Manickam Babu Member

    Joined:
    Dec 28, 2015
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    1
    Many thanks.
     
  4. Manickam Babu

    Manickam Babu Member

    Joined:
    Dec 28, 2015
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    1
    Many thanks Somashekar. We will apply this practice.
     
  5. Andy Nichols

    Andy Nichols Moderator Staff Member

    Joined:
    Jul 30, 2015
    Messages:
    5,104
    Likes Received:
    2,560
    Trophy Points:
    112
    Location:
    In the "Rust Belt"
    I'm not certain that it's the ONLY way, Soma. Once again, knowing chapter and verse on ISO 9001 requirements, doesn't make someone competent, especially if gained from sitting in a course with someone droning on and on about each clause. We all know that people who go to driver training aren't competent to deal with the various traffic/weather/vehicle situations they will encounter later on. No, training makes people only "dangerous". I'd suggest that training in the actual processes of the organization and reviewing with management the risks which can present themselves is a much better option.
     
    Somashekar likes this.
  6. Somashekar

    Somashekar Well-Known Member

    Joined:
    Jul 30, 2015
    Messages:
    114
    Likes Received:
    98
    Trophy Points:
    27
    Training to the 2015 requirements is never complete if that is not blended to the organization and its processes. Otherwise the ISO9001:2015 is simply the easiest of the training manual by itself.
     
    Andy Nichols likes this.
  7. Manickam Babu

    Manickam Babu Member

    Joined:
    Dec 28, 2015
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    1
    Thanks for the replies.
     
    Andy Nichols likes this.
  8. Manickam Babu

    Manickam Babu Member

    Joined:
    Dec 28, 2015
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    1
    Thanks for the reply
     
    Andy Nichols likes this.
  9. MCW8888

    MCW8888 Well-Known Member

    Joined:
    Aug 17, 2015
    Messages:
    642
    Likes Received:
    198
    Trophy Points:
    42
    I suggest that you take the Internal Auditing course leaning towards risk-based auditing.
     
  10. Andy Nichols

    Andy Nichols Moderator Staff Member

    Joined:
    Jul 30, 2015
    Messages:
    5,104
    Likes Received:
    2,560
    Trophy Points:
    112
    Location:
    In the "Rust Belt"
    If you have already been auditing the ISMS, a component of that management system is to understand risk - risk of vulnerability to security, risk assessment etc. You may not actually need to understand anything else about ISO 9001:2015 other than reading it. Let's NOT overlook that 80% of any auditing class is how to audit etc. Which is pretty much the same - save your time/money.