Feature
Article
Auditing ISO/TS 16949:2002
Ordinarily, we wouldn't run a feature on auditing
any particular standard, or requirement. But we are making an
exception for ISO/TS 16949:2002. There are enough things that are
different about the second edition of 16949, that we thought it was
a good idea.
Historically, we have conducted audits based
on the particular requirement using checklists based on either the
standard, or our procedures. Some of us dared to be different enough
to actually perform process audits (we'll discuss them later). In
many cases, we audited for compliance rather than for impact. ISO
9001:2000 began to move us from compliance auditing to process
auditing. ISO/TS 16949 makes the transition more concrete. Let's
look at ISO/TS 16949:2002 and see how it changes our auditing
practices.
ISO/TS 16949:2002 is based on ISO 9001:2000. It
uses 9001 as its base document and adds additional requirements
unique to 16949. One such case is in Clause 8; specifically 8.2.2
(Internal audit). 16949 keeps the 9001 language, but adds specifics
on QMS audits, process audits, product audits and audit plans. These
new requirements (most were not present in QS 9000) will
substantially change the manner in which we audit.
The checklist keeps the auditor on track and
ensures that all aspects of the audited area become audited. But the
checklist is only as good as the auditor preparation. An
inadequately prepared checklist will do little to ensure the
adequacy of the audit.
8.2.2.1 Quality management system audit
The organization shall audit its quality
management system to verify compliance with this Technical
Specification and any additional quality management system
requirements.
This is why we audited for many years. We
determined compliance to the standard, and any other requirement
that either we or others imposed on our QMS. This would include our
own procedures and other documentation. It would also include any
additional customer or regulatory requirements. Our audits would
follow the standard and be scheduled based on the layout of the
standard.
8.2.2.2 Manufacturing process audit
The organization shall audit each manufacturing
process to determine its effectiveness.
More advanced organizations have been performing
process audits for years. 16949 makes the process audit mandatory.
These are in addition to the system audits. Refer to Clause .2 for
more information on processes and the Process Approach. A future
issue will discuss in great detail the process audit.
8.2.2.3 Product audit
The organization shall audit products at
appropriate stages of production and delivery to verify conformity
to all specified requirements, such as product dimensions,
functionality, packaging and labelling, at a defined
frequency.
Most organizations audit product, in some form, as
a routine. Your regular inspection techniques are an example of
product auditing. Dock audits were required under QS, so this
requirement should not be anything new.
8.2.2.4 Internal audit plans
Internal audits shall cover all quality
management related processes, activities and shifts, and shall be
scheduled according to an annual plan.
When internal/external nonconformities or
customer complaints occur, the audit frequency shall be
appropriately increased.
This is another rewording of the QS requirements.
Once again, this should not be a problem with 16949. One improvement
is the change from requiring "an audit schedule updated
annually" to "according to an annual plan". The
difference is that one could argue that you could not deviate, nor
update the annual schedule according to QS. That is not what they
meant, but it could be (and is) interpreted that way.
8.2.2.5 Internal auditor qualification
The organization shall have internal auditors
who are qualified to audit the requirements of the Technical
Specification.
This requirement is a combination of the old 4.18,
Training and 4.1 Resources. Auditing this requirement may be a bit
difficult, because you are auditing yourself.
The above identifies the differences in just in
auditing to ISO/TS 16949:2000. There are some other additional
requirements that must also be dealt with. Here are some highlights:
1.2 Application:
ISO 9001:2000 allows
permissible exclusions in Clause 7,
provided they do not affect the
ability/responsibility to provide
acceptable product. 16949 limits the
exclusions to 7.3 Design and Development.
Process design cannot be excluded.
5.4 Planning:
The business plan
required in QS is not specifically
required, however it is referenced as
though it is expected.
6.2 Human Resources:
Organizations need a
process to motivate and empower employees.
7.3 Design and
Development:
Design has been expanded
to include process design. PPAP is
referenced only as "a product and
manufacturing process approval procedure
recognized by the customer".
7.4 Purchasing
"Unless
specified by the customer, suppliers to
the organization shall be third party
registered to ISO 9001:2000 by an
accredited third-party certification
body." Not a lot of wiggle room
here. Most of the other additional
requirements are similar to the QS
mandates we are all familiar with. This
was intended to give you insight on how
ISO/TS 16949 will affect your
auditing.
Summary:
ISO/TS 16949 is probably
here to stay. This means that if you are
in the automotive supply chain it might
become a requirement for you (see The Back
Page for details). Auditing to the new
standard will contain new challenges while
continuing some of the old battles. We
will keep you updated as we go.
As always...Good
Auditing!
|