Is there a problem with auditing?
How is the audit function managed within your organisation?
Is it a business function, or is it done because ‘ISO’ says so?
Internal auditing of a management system is a requirement of all ISO management systems standards, and perhaps this is where the problem lies. The task has become a requirement, and therefore it’s seen as something that has to be done to obtain certification. It’s yet another requirement.
However, if you think about it, auditing your own management system makes perfect sense. After all, why would you invite a certification company to come in & audit your system, if you haven’t checked it yourself?
Would it be viewed differently if we swapped the work ‘audit’ for ‘check’? Are there connotations attached to the word ‘audit’. Do we envisage people walking round with a clipboard, checking our work?
Of course, internal audits isn’t about checking anyone’s work. It’s about checking the management system – does it comply with the relevant standard(s), are we following it, and could it be better?
In my experience there are too many organisations getting little or no value from internal audits, and there are a number of reasons, including:
I also see small a number of companies who obtain a great deal of benefit from auditing:
Indeed, I have clients now who perform audits even though they aren’t certified to any standards – they just get good value from doing them.
Auditing isn’t going to go away – so let’s get some value from them:
Auditing is a skill. Both performing an audit and being audited can be uncomfortable.
There is huge value to be gained though. One of my clients uncovered the fact that they were legally non-compliant and took swift action before it became an issue. Another made changes to their processes that resulted in a reduction in lead times by 15%, adding £20k to the bottom line. Remaining compliant to the appropriate standard and maintaining certification was almost secondary.
So, what will you do to make some positive change to your audit function?
You may want to attend a 1-day course that I run (more info here), that will re-establish the understanding, theory & best-practice of internal auditing.
NOTE: If you need formal IRCA-certified audit training; again, I can help – just get in touch in the usual way.
Back to Blog