Process Interaction Map for ISO Audit

Hi everyone,

I've been working with an ISO auditor that is insisting that I have a process interaction map that's based on our Quality Manual, that also must have required ISO clauses listed throughout the process map. From my experience with ISO, this isn't something that's required by the standard, however this auditor insists that this process map is part of ISO 0.3.2 (he initially told me to base this on the PDCA wheel). He insists that he won't be able to conduct an audit without this process map.

I've attached what I have done so far to try to fill this auditors demand, but can anyone tell me if this is actually required, or if anyone actually uses something like this for auditing? I've always just had auditors conduct an audit based on the Quality Manual.

Any input would be greatly appreciated.

Thanks in advance!

 

Good day @RyanQA and welcome to the site.

There are many things that concern me about your post...
1-working with an ISO auditor
I'm hoping that this metaphorically and not literally. 3rd party auditors are prohibited from consulting.

2- insisting that I have a process interaction map that's based on our
a) The auditor is not allowed to "insist" your organization do anything. 3rd party auditors are required to audit to the requirements of the standard and your internally mandated activities. Period.
b) There is no requirement anywhere in the ISO family of standards for a "process map"

3- based on our Quality Manual,
There is no requirement in ISO 9001 for a "quality manual"

4- must have required ISO clauses listed throughout the process map.
No requirement to have ANY reference to 'ISO" or the "ISO" established clauses or terminology.

5- auditor insists that this process map is part of ISO 0.3.2 (he initially told me to base this on the PDCA wheel).
ONLY clauses 4-10 are auditable (nothing stated above is a requirement NOR can it be audited to.

6- He insists that he won't be able to conduct an audit without this process map.
Good. Report him/her to the registrar and demand a different auditor. State what you stated in your original post as reason for your rejection of this auditor.

Summary:
Do NOT build or create anything for an auditor. ONLY create what is beneficial to your organization...(in a manner that fulfills your organization's requirements and the requirements of the relevant standard(s).

Hope this helps.

Be well.

 

Hi Andy!

Thank you for the response. I thought about doing exactly that and asking our registrar for a different auditor... but I'm pretty sure I'm stuck with this guy. He seems like the type that would end up with a vendetta.

That's exactly what I thought. I've never heard of anything like this being required.

That isn't a bad idea at all. That would all certainly be easy enough to do and get me through this audit.

 

Hi John,

I'm glad it wasn't just me that had concerns...

1- No, I do mean this literally. It turns out this guy is a 3rd party consultant our registrar chose, but he offers ISO consulting as well.

2- That's exactly what I thought. I've brought that point up to him, but he seems to have developed his own idea of what's required.

3- That is a good point. I'm only using the Quality Manual because we already had it from when the company was previously ISO certified.

4- Right, 9001 states that almost right off the bat in the standard.

5- Exactly, I was very confused that he actually referenced a clause below 4 since those are not within the scope of an audit.

6- That's definitely not a bad idea. I'll look into doing that.

I'll keep that in mind moving forward. This is the first time I've been the lead on implementing a QMS, so I appreciate the reality check since I seem to have gotten a bad auditor. Thank you for the advice!