As a professional with 8 years of experience in internal quality audits, I have participated in nearly 50 internal audits and guided many new auditors. I have found that the reason many companies' internal audits are superficial and fail to identify actual issues is primarily due to "inadequate preparation" — either the audit scope is unclear, the auditors are unfamiliar with the business, or the checklists lack specificity. The preparation for an internal quality audit directly determines its effectiveness, much like preparing for a battle. Adequate preparation is essential to precisely identify problems and drive system improvements. This article, based on my practical experience, details the entire process of preparing for an internal quality audit, from audit planning to document review, personnel arrangement, and checklist compilation. Each step includes specific operational methods and precautions, which can be directly referenced by new auditors and quality management personnel. The content is intended for learning and exchange among industry peers.
Key Understanding
The core purpose of an internal quality audit is not to "find faults and assign blame," but to "identify issues in the system's operation, verify the system's effectiveness, and promote continuous improvement." The key to preparation is to "focus on the core, align with reality, and clarify priorities," avoiding blind audits and formalism.
1. Core Principles of Audit Preparation
To ensure effective audit preparation, three core principles must be followed. These principles are the foundation for avoiding superficial audits:
1. Targeted Principle: Audit preparation should focus on "system requirements + actual business operations," avoiding the blind application of standard clauses and conducting meaningless, broad audits;
2. Comprehensive Principle: Preparation should cover the entire audit process, from defining the scope to personnel arrangement and checklist compilation. Each step must be thoroughly considered;
3. Feasibility Principle: Preparation should be aligned with the company's actual situation. For example, the audit time should not conflict with production peaks (such as peak order delivery seasons), and auditors should have the necessary business knowledge to avoid issues that prevent the audit from proceeding.
Common Pitfall: Inadequate Preparation Leading to Audit Failure
In a small enterprise, the quality department only notified the various departments one day in advance for an internal audit. The auditors were not familiar with the system documents and entered the site directly, using a generic checklist downloaded from the internet that was severely disconnected from the company's actual business. During the audit, the auditors did not even understand the core processes of the production department and could only read from the checklist. The final audit report listed only three trivial issues, completely missing critical risks such as incomplete incoming quality control (IQC) records and unmonitored process control parameters. The audit became a mere formality.
2. Full Process Preparation: From Planning to Implementation
1. Step One: Audit Planning — Clarify "What to Audit, When to Audit, Who Will Audit"
Audit planning is the starting point and the most critical phase of preparation, requiring the clarification of four core elements:
① Define the Audit Scope: Based on the system coverage and actual needs, clearly specify the departments, processes, and products to be audited. For example, a comprehensive annual audit can cover all departments (production, procurement, sales, technology, quality) and core processes (document management, procurement management, production process control, nonconforming product control, continuous improvement). A specialized audit can focus on a specific department or process (such as only auditing the procurement management process). The scope should be specific, avoiding vague descriptions. For instance, "audit the production department" should be clearly defined as "audit the process control, equipment management, and inspection records of the production department";
② Define the Audit Purpose: Clearly state the objectives of the audit, such as "verify the effectiveness of the ISO9001:2015 system in the company," "identify issues in the system's operation and promote improvements," or "prepare for external audits";
③ Develop the Audit Schedule: Clearly specify the audit time and schedule. The audit time should avoid production peaks (such as peak order delivery seasons) to prevent disruption to normal production. The schedule should be reasonable, with each department's audit time not being too short (at least 2-3 hours) to ensure sufficient time for reviewing records, on-site observation, and employee interviews. Example: "September 10, 9:00 AM - 11:30 AM: Audit the procurement department; 2:00 PM - 4:30 PM: Audit the production department";
④ Form the Audit Team: Based on the audit scope and complexity, form the audit team. The team leader should have extensive audit experience and strong organizational coordination skills. Auditors should have no direct interest in the audited department (to avoid bias) and be familiar with the business processes of the audited department. For example, when auditing the production department, auditors from the quality and technology departments can be chosen, avoiding auditors from the production department. New auditors should be paired with experienced auditors to ensure audit quality.
2. Step Two: Document Review — Familiarize with "System Requirements + Actual Company Documents"
Auditors must be familiar with system requirements and the company's documented information to determine if actual operations comply with the requirements. Document review involves three key tasks:
① Familiarize with Relevant Standards: Based on the company's system certification type, focus on learning the corresponding standard clauses. For example, key clauses of ISO9001:2015 (such as 4.4 Process Operation, 6.1 Risk Management, 8.5 Production Process Control, 9.1 Monitoring and Measurement, 10.2 Nonconforming Product Control) should be thoroughly understood to clarify the standard's requirements and baseline;
② Collect and Review Company Documents: Collect relevant documents from the audited department 3-5 days in advance, including the quality manual, procedure documents, work instructions, record forms, risk lists, and performance evaluation data. The core of reviewing documents is to "verify their completeness, consistency, and operability," such as checking if work instructions align with actual operations and if record forms meet traceability requirements;
③ Identify Key Risk Points: Based on the company's risk list, identify key risk points in each department, which will be the focus of the audit. For example, the procurement department's "risk of unassessed supplier entry," the production department's "risk of unmonitored key process parameters," and the quality department's "risk of untimely nonconforming product handling" should be verified during the audit to ensure that control measures are effective.
3. Step Three: Checklist Compilation — Create the "Core Tool for Auditing"
The checklist is the auditor's "navigation map," directly determining the efficiency and depth of the audit. Many new auditors use generic templates, leading to audits that lack specificity and fail to identify actual issues. Checklist compilation should follow the principles of "aligning with reality, focusing on key points, and being operable." Specific methods include:
① Structure the Checklist by "Department + Process": Each audited department should have a separate checklist, with each department's checklist categorized by core processes (e.g., the procurement department can be divided into "supplier entry, incoming inspection, supplier evaluation"), avoiding confusion;
② Specify Audit Items and Content: Audit items should be specific, and audit content should be verifiable, avoiding vague descriptions. For example, instead of writing "check if supplier management meets requirements," write "check if new suppliers added in 2024 have entry assessment records, and if the assessment includes key indicators such as quality, delivery, and price";
③ Link Standard Clauses and Company Documents: Each audit item should be annotated with the corresponding standard clause and company document number (e.g., "ISO9001:2015 8.4.1 Supplier Selection and Evaluation Procedure (Document Number: QP-08)"), facilitating verification during the audit;
④ Determine Audit Methods: Clearly specify the audit method for each item, such as "review records," "on-site observation," "interview employees," or "sampling inspection," avoiding blind questioning during the audit. For example, the audit method for "key process parameter monitoring" could be "observe the parameter record forms at production stations and sample 5 batches of product parameters to verify if they are monitored and recorded as required";
⑤ Control the Length of the Checklist: Each department's checklist should not be too long, focusing on core processes. Generally, 10-15 audit items are sufficient to avoid auditors missing key points due to lengthy checklists.
| Department |
Audit Process |
Audit Item |
Associated Standard/Document |
Audit Method |
Result Record |
| Procurement Department |
Supplier Entry |
Have new suppliers added in 2024 completed entry assessments? |
ISO9001:2015 8.4.1; QP-08 |
Review new supplier assessment forms (sample 3 suppliers) |
□ Conform □ Nonconform □ Observation Item |
| Does the supplier assessment include key indicators such as quality, delivery, and price? |
QP-08 Clause 4.2 |
Interview procurement specialists, review assessment form indicators |
□ Conform □ Nonconform □ Observation Item |
| Are incoming inspection records complete, and do key items have inspection data? |
ISO9001:2015 8.6; WI-05 |
Review incoming inspection records from the past month (sample 10 batches) |
□ Conform □ Nonconform □ Observation Item |
| Production Department |
Process Control |
Are key process parameters monitored and recorded as required? |
ISO9001:2015 8.5.1; WI-12 |
Observe production stations, review parameter record forms (sample 5 batches) |
□ Conform □ Nonconform □ Observation Item |
| Equipment Management |
Are production equipment maintained and serviced according to the plan? |
QP-10 Equipment Maintenance Management Procedure |
Review equipment maintenance plans and records (sample 3 key pieces of equipment) |
□ Conform □ Nonconform □ Observation Item |
4. Step Four: Pre-Audit Communication and Resource Preparation — Ensure Smooth Audit Progress
Pre-audit communication and resource preparation can prevent unnecessary conflicts and obstacles during the audit. This includes:
① Notify the Audited Department in Advance: Officially notify the audited department 3-5 days before the audit, informing them of the audit time, scope, purpose, and audit team members. This allows the audited department sufficient time to organize records and arrange liaison personnel, avoiding resistance due to sudden audits;
② Determine Liaison Personnel: Require each audited department to designate one liaison person (usually the department head or quality liaison officer) responsible for coordinating record reviews, employee interviews, and on-site accompaniment, improving audit efficiency;
③ Prepare Required Resources: Include printed checklists (one per person), pens, notebooks, cameras (for capturing on-site evidence, with prior consent from the audited department), and portable computers (for on-site recording of audit results);
④ Hold an Internal Audit Team Meeting: One day before the audit, hold a meeting with the audit team to clarify responsibilities (such as who will review records, who will observe on-site, who will conduct interviews), audit discipline (such as objective and fair recording, no disputes with the audited department, protection of company secrets), and criteria for issue determination (defining nonconformities and observation items), ensuring the team is aligned.
3. Common Pitfalls and Avoidance Tips in Preparation
1. Pitfall One: Using generic templates for checklists that are disconnected from the company's actual operations. Avoidance Tip: Checklists must be compiled based on the company's system documents, business processes, and risk points. New auditors can refer to generic templates but must fully localize them, removing content irrelevant to the company;
2. Pitfall Two: Auditors are unfamiliar with the audited department's business. Avoidance Tip: Before the audit, auditors should consult the liaison personnel of the audited department to understand core business processes, review relevant work instructions, and, if necessary, visit the site in advance to familiarize themselves with the environment;
3. Pitfall Three: Overly tight audit schedules. Avoidance Tip: Reserve at least 2-3 hours for each department's audit, including time for record reviews, on-site observations, and employee interviews, to avoid missing key processes due to time constraints;
4. Pitfall Four: Lack of prior communication leading to resistance. Avoidance Tip: Proactively communicate with the head of the audited department before the audit, emphasizing that the purpose is "improvement" rather than "blame," to gain understanding and cooperation;
5. Pitfall Five: Insufficient resource preparation. Avoidance Tip: Prepare a resource checklist in advance and verify each item to avoid issues like "missing checklists" or "camera battery depletion" that can affect audit efficiency.
Personal Insights
The preparation for an internal quality audit tests the auditor's attention to detail, patience, and familiarity with the business. I have seen many new auditors who, due to thorough preparation, were able to identify key issues on their first audit. I have also seen many experienced auditors whose audits became superficial due to perfunctory preparation. In fact, effective preparation is not complicated. As long as the four core elements of "defining the scope, familiarizing with documents, compiling targeted checklists, and ensuring good communication and coordination" are followed, the audit can be more effective. The preparation process is also a preliminary review of the company's system operation, and many issues can be identified in advance. If peers encounter specific issues during audit preparation, feel free to contact me for discussion and improvement of audit capabilities.
Return to Article List