5.1.1.1 Corporate Responsibility

In the desire for process auditing when it comes to system audits, for our internal audits we audit our Quality System processes. I haven't ever been completely satisfied on how we have identified those processes.

For example, when were were implementing IATF, we went through the clauses and asked our selves in what processes would that clause be applicable. One of those clauses is 5.1.1.1, which states "The organization shall define and implement corporate responsibility policies, including at a minimum an anti-bribery policy, an employee code of conduct, and an ethics escalation policy (“whistle-blower policy”). We identified the process of Human Resources as the process in which this clause would fall.

This brings me to my question, to me Human Resources is really identifying a department, not a process. Human Resources is responsible for the requirements states in clause 5.1.1.1, but would there be a better name of the Quality System process that this would fall under?

 

Yes - “HR” is a dept- but don’t get too caught up on dept/process terminology . Use/do what’s best and understood in your organization.

IF you’re looking for a relevant process name , the standard has already provided you with one option. “Corporate Responsibility” , the function of which has inputs (policies; training; resources), converted into outputs (behavior; social and community engagement;, etc,..)

Be well