An internal auditor who shows up looking for what's wrong tends to get told what people think they want to hear. What Clause 9.2 actually requires, why auditors can't audit their own work area, and how findings get tracked to closure.
An internal auditor who shows up looking for what’s
wrong tends to get told what people think they want to hear. An
internal auditor who shows up asking how a process actually works tends
to find the gap that would have failed the external audit six months
later.
ISO 9001:2015 Clause 9.2 requires organizations to conduct internal
audits at planned intervals to confirm the quality management system
conforms to both the organization’s own requirements and the standard
itself, and that it’s effectively implemented and maintained — not just
that documents exist, but that the documented process matches what
actually happens.
| Question | Evidence type |
|---|---|
| Is the documented procedure followed? | Direct observation of the process in operation |
| Are records being kept as required? | Sampled records reviewed against the procedure’s requirements |
| Do people understand their role in the process? | Interview responses compared against documented responsibilities |
ISO 9001 requires auditors to be objective and impartial, which in
practice means someone generally shouldn’t audit their own work area.
A production supervisor auditing their own line’s quality records
creates an obvious conflict, which is why internal audit programs
typically rotate auditors across departments rather than having each
area self-audit.
An audit finding that never gets tracked to closure defeats the
purpose of running the audit in the first place. A nonconformance
identified during an internal audit should trigger the same corrective
action process — root cause investigation, corrective action, and
effectiveness verification — as one identified any other way, logged
and tracked until it’s actually closed.
ISO 9001 internal auditing is one of the skills covered in SCMEP’s
ISO 9001 training. As a
NIST Manufacturing Extension Partnership affiliate
serving South Carolina manufacturers since 1989, our focus is
building auditors who can find real gaps on your floor, not just
complete a checklist.
If your team is building an internal audit program or training new
auditors, you can browse the Quality
and Inspection training catalog or email the training team.
Clause 9.2 requires organizations to conduct internal audits at planned intervals to confirm the quality management system conforms to requirements and is effectively implemented and maintained, not just documented.
Auditors look at direct observation of the process, sampled records reviewed against procedure requirements, and interview responses compared against documented responsibilities, rather than relying on opinion.
ISO 9001 requires auditors to be objective and impartial. Auditing one’s own work creates a conflict of interest, which is why internal audit programs typically rotate auditors across departments.
A nonconformance found during an internal audit should trigger the same corrective action process as one found any other way — root cause investigation, corrective action, and effectiveness verification, tracked until closed.
