API Internal Audit Programme
API Internal Audit Programme
Exercise 1
What does
Quality Mean?
What is Quality?
The ability of a system,
process, or a product to
fulfill the requirements of
customers and other
interested parties.
Exercise 2
What is a
Management
System?
What is a Management
System?
A management system isa
proven framework for
managing and continually
improving your
organization's policies,
procedures and processes.
Manu
al
Methods of Process
Control/Quality
Plans
Work
Instructions
Support
Documentation
Quality Management
1. Management commitment to the customer and the
company
2. Preventive thinking
3. Confidence
4. Suitable systems
5. Defined objectives
a) Defined roles
b) Defined standards of performance
c) Training and regular review
Process Identification
PDCA Cycle
Process Identification
A process is any activity that transforms
inputs into outputs using resources and
being subject to specific controls.
All activities can be considered as a process.
By identifying and controlling the inputs,
providing the correct resources and applying
suitable methods of control we should
achieve the desired output.
Process Identification
INPUTS
Materials
Data
Machines (Resource)
Manpower (Resource)
Measurement (Control)
Methods (Control)
Environment (Control)
Process Identification
Primary or main input to a process will be
data, information or instruction to begin.
Process Identification
Controls
Inputs
Process
Resources
Outputs
Process Identification
Primary
Process
Process Identification
Primary
Process
Secondary
Process
Process Identification
Outputs from a process are the results of
the transformation of the inputs.
These may include:
Product that is acceptable.
Product that is unacceptable.
Waste.
Policy
Objective
s
Sales
Design
Purchasin
g
Productio
n
Stores
Inspection
Dispatch
Exercise 3
Popcorn Exercise
Exercise 4
Objectives of
Standard
Interaction of Processes
Design Process
Calibration
Sales
Contract Review
Delivery
Standards
API
ISO
MEASUREMENT
Process
Product
Product
or
Service
Stores
Purchasing
Competent Operators
DOCUMENTED
PROCEDURES
MANAGEMENT
CONTROLS
Forms
Records
Resources
Leadership
4
Management
Responsibility
Customers
8
Measurement,
Analysis &
Improvement
4.3
Organisation
Capability
Customers
5
Product
Realisation
Requirements
Input
Information Flow
Value-adding activities
Satisfaction
Product
Output
Exercise 5
Auditor
Competence
Exercise 6
Auditor Personal
Attributes
Professional
Observant
Ethical
Analytical
Discipline
Positive
Attributes
of Auditor
Objective
Patient
Unbiased
Impartial
Diplomat
Good Listener
Inquisitive
Poor at
preparation
and planning
Afraid of
passing
unpopular
judgments
Poor
timekeeping
Stays in
office
Too rigid
Negative
characterist
ics of
Auditor
Easily
influenced
Opinionated
Jumps to
conclusions
Argumentativ
e
Bad
communicat
or
The Audit
Process
Team Procedures
Audit
Flow of Work
Prepare a Plan
Time Available
Complete Review
Complete Report
Preparation of Checklist
Process Based
Time allocated from Plan
Persons to be Interviewed
Undertaking Audit
Opening Meeting
Introduce Yourself
Prepare Legible Notes
Deviate from Plan if you suspect problem
Take notes of all objective evidence seen
Thank Auditee
Review Notes
Closing Meeting
Thank Auditee
Identify and Read NCRs
Accept Comments
If Requested Discuss ways of Solving NCRs
Report
Audit Plans
What?
Who?
Where?
Why?
How?
When?
Show
me
Audit Checklist
To assist in
keeping the
audit on track
To assist with
time
management
Purpose
To provide
evidence of a
full system
audit
To provide a
structured
approach to
the audit
Can be restrictive
Could miss something if followed rigorously
Exercise 7
Initiating the
Audit
Exercise 8
List of Documents
Exercise 9
Audit Plan
Exercise 10
Preparing a
Checklist
Audit Techniques
Process Documents
Show me
EXAMINE
EXAMINE
DOCUMENT
DOCUMENT
S
S
OBJECTIVE
OBJECTIVE
EVIDENCE
EVIDENCE
OBSERVE
OBSERVE
ACTIVITIES
ACTIVITIES
&
&
CONDITION
CONDITION
S
S
Opening Interview
Be on time
Introduce yourself
Ensure appropriateness of time
Explain the purpose of the
discussion and how the information
gathered will be used-Explain that
you will be taking notes. Assure
confidentiality
Strive to build the desired sense of
comfort and confidence
Conducting Interview
Conducting Interview
Dont get
into debates
Dont amplify
criticism
given
Dont jump to
conclusions
Dont force
a meeting
Dont rush
the
interview
Dont use a
tape
recorder
Be wary of
using
sarcasm/humo
ur
Dont
communicate
incomplete or
unsubstantial
findings/conclusio
ns
Dont show
your
reactions
Body Language
Facial Expression
Look of Horror
Sharp intake of breath
Collecting Information
Interviewing techniques and active listening
Active listening
Handling Resistance
Documenting Interview
A Two Step Process
Take Notes
Review immediately
afterwards
Gathering Evidence
In general there are 4 types of evidence that
can
be gathered during an audit
Physical Evidence
Testimonial
Evidence
Documentary
Evidence
Circumstantial
Evidence
End of Day 2
Exercise 11
Internal Audit
Report Writing
When writing a nonconformity report it
must be:
Factual
Value adding
Report Writing
Who is going to read the
report?
The management of the auditee
The auditorss management
Colleagues who may have to verify the
corrective action at the next surveillance
visit
Gathering Evidence
Upon gathering the information, auditors must
compare facility practices against applicable
Requirements
Is the facility in compliance with the
requirements?
Is there enough data to evaluate whether
systems are being implemented as designed?
Are there underlying causes?
Report Writing
A Nonconformity Report should
contain
Closing Meeting
Closing Meeting
Thanks for the hospitality
Confirm confidentiality
Present findings
Announce result (Recommendation)
Issue documentation
Conclusion
Closing Meeting
Typically the closing meeting consists of 4 principal
phases
Opening the
meeting
Discuss
recommendations
Presenting Audit
findings
Audit Findings
Non Conformity Categorisation
IAF Guidance for the application of ISO
17021 define a non- conformity as:
The absence of, or the failure to implement
and maintain, one or more Management
System requirements, or a situation which
would, on the basis of available objective
evidence, raise significant doubt as to the
quality of what the organization is
supplying.
Audit Findings
Non Conformity Categorisation
.
Audit Findings
Non Conformity Categorisation
.
Audit Findings
Observations/Opportunity for
Improvement
Exercise 12
Preparation of
Report Findings
Exercise 13
Presentation of
Auditor Findings