ISO 9001:2015 Audit checklist

by Pretesh Biswas

ISO 9001:2015 Audit checklist

The following checklist can be used for both internal audits as well as Gap Analysis tools.

ISO 9001:2015 Checklist
Clause 4: Context of the organization
4.1 Understanding the organization and its context
1Has the organization determined the external and internal issues relevant to the Purpose & strategic direction of its QMS and that can affect its ability to achieve the intended results?
2Does the organization monitor and review information about these external and internal issues?
4.2 Understanding the needs and expectations of interested parties
1Has the organization determined the interested parties that are relevant to the QMS?
2Has the organization determined the requirements of these interested parties relevant to the QMS?
3Does the organization monitor and review the information about these interested parties and their relevant requirement?
4.3Determining the scope of the quality management system
1Has the organization established the scope of its QMS?
2Has the organization determined the boundaries and applicability of the QMS?
3While determining the scope, has the organization determined the external and internal issues, requirements of relevant interested parties, product and services of the organization?
4While determining Applicability, does the organization determine if it affects its ability or responsibility to ensure the conformity of its products and services and the enhancement of customer satisfaction?
5Does the scope state the types of products and services covered?
6Does the scope give justification for any requirements that the organization determines and is not applicable to the scope of its QMS?
7Is the organization’s scope made available and maintained as a Documented Information?
4.4 Quality management system and its processes
1Has the organization established, implemented, maintained and continually improved its QMS?
4.4.1
1Has the organization determined the processes needed for the QMS?
2Has the organization determined the application of these process throughout the organization?
3Has the organization determined the sequence and the interaction of these process?
4Has the organization determined and applied the criteria and methods needed to ensure the effective operation and control of these processes?
5Do these methods include the monitoring, measurement and related performance indicator?
6Has the organization determined the resources needed for the organization?
7Has the organization ensured the availability of the resources needed for these processes?
8Has the organization assigned the responsibilities and authorities for these processes?
9Has the organization addressed the risk and opportunities associated with these processes?
10Has the organization evaluated these processes and implemented any changes needed to ensure that these processes achieve its intended results?
11Has the organization made improvement in its processes and its QMS?
4.2.2 
1Has the organization maintained documented information to support the operation of its processes?
2Do the organization retain documented information as evidence that the processes have been carried out as planned?
Clause 5Leadership
5.1Leadership and commitment
5.1.1General
1Does the top management demonstrate leadership and commitment by taking accountability for the effectiveness of its QMS?
2Has the top management ensured that the quality policy and quality objective are established?
3Is the quality policy and quality objective compatible with the context and strategic direction of the organization?
4Has the organization integrated the requirements of QMS with the business processes?
5Is the organization promoting the use of process approach and risk-based thinking throughout the organization?
6Is the top management ensuring that the resources needed for the QMS are available?
7Is the importance of the effectiveness of QMS and meeting QMS requirements communicated?
8Does the top management ensure that the QMS is achieving its intended results?
9Does Top Management engage, directs and supports the persons required to contribute to the effectiveness of the QMS requirements?
10Is Top Management promoting improvements?
11Is Top Management supporting other relevant management roles to demonstrate their leadership as it applies to their area of responsibilities?
5.1.2Customer Focus
1Does the Top Management demonstrate leadership and commitment by ensuring that customer and applicable statutory and regulatory requirements are determined, understood and are consistently meeting the requirements?
2Are the risks and opportunities that can affect the conformity of products and services and the ability to enhance customer satisfaction are determined and addressed?
3Is the focus of enhancing customer satisfaction maintained?
5.2Policy
5.2.1Establishing the Quality policy
1Has the Top Management established, implemented and maintained a quality policy?
2Is quality policy appropriate to the purpose and context of the organization and does it supports its strategic directions?
3Does the Quality policy provide the framework for setting quality objective?
4Does the Quality policy include the commitment to satisfy applicable requirements and to continually improvement of the QMS?
5.2.2Communicating the quality policy
1Is Quality policy maintained as documented information?
2Is Quality policy communicated, understood and applied within the organization?
3Is Quality policy appropriate and made available to the relevant interested parties?
5.3Organizational roles, responsibilities and authorities
1Has the Top management ensured that the responsibilities and authorities for relevant roles are assigned, communicated and understood within the organization?
2While assigning the responsibilities and authorities, do the top management ensure that the processes are meeting their intended results?
4While assigning the responsibilities and authorities, do the top management ensure that there is the promotion of customer focus throughout the organization?
5While assigning the responsibilities and authorities, do the top management ensure that performance of its QMS and opportunities for improvement are reported to them?
6While assigning the responsibilities and authorities, do the top management ensure that integrity of QMS is maintained when changes to the QMS are planned and maintained?
Clause 6Planning
6.1Actions to address risks and opportunities
1While planning for QMS, does the organization considers the issues referred to in clause 4.1 and requirement referred to in clause 4.2?
6.1.1
1Has the organization determined the risks and opportunities that have to be addressed so that QMS can achieve its intended results, enhance desirable effects, prevent, or reduce undesired effects and achieve improvement?
6.1.2
1Has the organization planned actions to address these risks and opportunities?
2Have these actions implemented and integrated into its QMS processes?
3Has the organization evaluated the effectiveness of these actions?
4Is the action proportionate to the potential impact on the conformity of product and services?
6.2Quality objectives and planning to achieve them
6.2.1
1Has the organization established quality objectives at relevant functions, levels and process needed for the QMS?
2Are the quality objectives consistent with the quality policy?
3Does the organization have quality objectives which are relevant to the conformity of product and services and enhancement of customer satisfaction?
4Are the quality objective measurable and do they take account of applicable requirements?
5Are the quality objectives monitored, communicated and updated as required?
6Does the organization maintain documented information on the quality objectives?
6.2.2
1For achieving quality objectives do the organization determines what will be done, what resources are required, who will be responsible, when will it be completed and how are the result to be evaluated?
6.3Planning for change
1While determining changes for the QMS, are changes carried out in a planned manner?
2While planning for change, does the organization consider the purpose of the change and their potential consequence; the integrity of the QMS; the availability of resources; and allocation and reallocation of responsibilities and authorities?
7Support
7.1Resources
7.1.1General
1Has the organization determined and provided the resources needed for the establishment, implementing, maintaining and continually improvement of the QMS?
2Has the organization considered the capabilities and constraints of existing internal resources?
3Has the organization considered what needs to be obtained from external providers?
7.1.2People
1Has the organization determined and provided the persons required for effective maintenance of QMS and for operation and control of its processes?
7.1.3Infrastructure
1Has the organization determined and maintained the infrastructure needed for the operation of its processes and to achieve conformity of product and services?
7.1.4Environment for the operation of processes
1 Has the organization determined, provided and maintain the environment necessary for the operation of its processes and to achieve conformity of products and services?
7.1.5Monitoring and measuring resources
7.1.5.1General
1Has the organization determined and provided the necessary resources needed when monitoring and measuring are used to verify conformity to product and service requirement?
2Are resources suitable for the type of monitoring and measurement activities undertaken?
3Are resources maintained to ensure their continuing fitness?
4Does the organization retain appropriate documented information as evidence of fitness for the purpose of the monitoring and measurement resources?
7.1.5.2Measurement traceability
1Is there a requirement for measurement traceability?
2Where measurement traceability is a requirement, is measurement equipment calibrated or verified at a specified interval or prior to use?
3Is the calibration or done against measurements standards traceable to national or international standards?
4Where no such standard is existing, are documented information retained for the basis used for calibration or verification?
5Are the measuring equipment identified in order to determine their status?
6Are the measuring equipment safeguarded from adjustments, damage or deteriorated that would invalidate the calibration and subsequent measurement results?
7Does the organization determine and take appropriate action if the validity of previous measurement results has been adversely affected when measuring equipment is found to be unfit for its intended purpose?
7.1.6Organizational knowledge
1Does the organization determine the knowledge necessary for the operation of its processes and to achieve conformity of product and services?
2Does the organization maintain this knowledge and make it available to the extent necessary?
3While addressing changing needs and trends, does the organization considers its current knowledge and determine how to acquire or access any necessary additional knowledge and required updates?
7.2Competence
1Does the organization determine the necessary competence of its employees whose work affects the performance and effectiveness of the QMS?
2Does the organization ensure that its employees are competent on basis of appropriate education, training or experience?
3Does the organization take applicable actions to acquire the necessary competence and evaluate the effectiveness of action taken?
4Does the organization retain the appropriate documented information as evidence of competence?
7.3Awareness
1Does the organization ensure that the persons doing work under the organization’s control are aware of its quality policy, relevant quality objectives, their contribution to the effectiveness of QMS including the benefits of improved performance and the implications of not meeting QMS requirements?
7.4Communication
1Does the organization determine the internal and external communication relevant to the QMS including on what it will communicate, when to communicate, with whom to communicate, how to communicate, and who communicates?
7.5Documented Information
7.5.1General
1Does the organization’s QMS include documents required by ISO 9001:2015 and documents determined by the organization necessary for the effectiveness of the QMS?
7.5.2Creating and updating
1While creating and updating documented information, does the organization ensure it is appropriate in terms of identification descriptions?
2While creating and updating documented information does the organization ensure that it is in proper format and in the correct media?
3While creating and updating documented information, does the organization ensure that there are appropriate review and approval for suitability and adequacy?
7.5.3Control of documented information
7.5.3.1
1Does the organization control its documented information to ensure that it is available and suitable for use, whenever it is needed?
2Is the documented information adequately protected?
7.5.3.2
1Is the distribution, access, retrieval and use of documented information adequately controlled?
2Is the documented properly stored and adequately preserved and it is legible?
3Is there control of changes (e.g. version control)?
4Are their adequate control in place for retention and disposition?
5Is external origin documented information necessary for planning and operation of QMS appropriately identified and controlled?
6Are records protected for unintended alterations?
Clause 8Operations
1Does the organization plan, implement and control the processes needed to meet the requirement for the provision of product and services and to implement the action determined in clause 6?
8.1Operation planning and control
1Does the organization determine the requirements for the products and services?
2Has the organization established criteria for the processes and acceptance of products and services?
3Does the organization determine the resources needed to achieve conformity to the product and service requirements?
4Does the organization implement controls of the processes in according with the criteria?
5Does the organization determine, maintain and retain necessary documented information to have confidence that the processes have been carried out as planned and to demonstrate the conformity of products and services?
6Does the organization control its planned changes and review the consequences of unintended changes?
7Does the organization take action to mitigate any adverse effects of its unintended changes?
8.2Requirements for products and services
8.2.1Customer communication
1Does the organization communicate with customers to provide information relating to products and services, handling enquiries, contracts or orders (including any changes)?
2Does the organization obtain customer feedback relating to products and services including customer complaint?
3Does the organization communicate with the customers relating to handling or controlling customer property?
4Has the organization established requirements for contingency action, where required?
8.2.2Determining the requirements for products and services
1Has the organization determined the requirements for product and services to be offered the customer?
2Are the requirements defined and does it includes applicable statutory regulatory requirements and those considered necessary by the organization?
3Can the organization meet the claims for the product and services it offers?
8.2.3Review of the requirements for products and services
1Has the organization ensured that it has the ability to meet the requirements for products and services?
2Has the organization conducted a review before committing to supply product and services?
3Has the organization reviewed the requirements specified by the customer, including the requirements for delivery and post-delivery activities?
4Has the organization reviewed the requirements not stated by the customers but necessary for the specified or intended use when know?
5Has the organization reviewed the statutory & regulatory requirements applicable to the product and services and requirements specified by the organization?
6Have the organization reviewed and resolved contract or order requirements differing for those previously defined?
7When the customer does not provide a documented statement of their requirement, does the organization conform to the customer’s requirements before acceptance?
8Does the organization retain documented information on the results of the review and on any new requirements for the products and services?
8.2.4Changes to requirements for products and services
1Does the organization ensure that the relevant documented information is amended and the relevant persons are made aware of the changed requirements when the requirements for the products and services are changed?
8.3Design and development of products and services
8.3.1General
1 Has the organization established, implemented and maintain a D&D process that is appropriate to the subsequent provision of product and services?
8.3.2Design and development planning
1In determining the stages and controls for D&D, has the organization is taken into consideration the nature, duration and complexity of D&D activities?
2In determining the stages and controls for D&D, has the organization taken into consideration the required process stages including D&D reviews?
3In determining the stages and controls for D&D, has the organization taken into consideration the D& D verification and validation activities?
4In determining the stages and controls for D&D, has the organization taken into consideration the responsibilities and authorities involved in the D&D process?
5In determining the stages and controls for D&D, has the organization taken into consideration the external and internal resources needed?
6In determining the stages and controls for D&D, has the organization taken into consideration the need to control interfaces between persons involved in D&D?
7In determining the stages and controls for D&D, has the organization taken into consideration the need for involvement of customer and user?
8In determining the stages and controls for D&D, has the organization taken into consideration the requirements of the subsequent provision of product and services?
9In determining the stages and controls for D&D, has the organization taken into consideration the level of the control expected for the D&D by customers and other relevant interested parties?
10In determining the stages and controls for D&D, has the organization taken into consideration the documented information needed to demonstrate that design and development requirement has been met?
8.3.3Design and Development inputs
1Has the organization determined the essential requirements for the specific types of products and services to be designed and developed?
2Does the organization consider the following functional and performance requirements; statutory and regulatory requirements; standards or code of practices that the organization has committed to implement; information derived from previous design and development activities; potential consequences of failure due to the nature of the product and services?
3Does the organization ensure that the inputs are adequate for D&D purpose, complete and unambiguous?
4Does the organization resolve the conflicting D&D inputs?
5Are documented information for D&D inputs retained?
8.3.4Design and development controls
1Has the organization applied the necessary controls to D & D processes to ensure that the result to be achieved are defined?
2Has the organization conducted a review to evaluate the ability of the results of D& D to meet the requirements?
3Has the organization conducted the verification to ensure that D&D meet input requirements?
4Has the organization conducted the validation to ensure that the resulting product and service meet the requirements of the specified application or intended use?
5Has the organization taken necessary action on the problems determined during reviews, verification or validation activities?
6Has the organization retained documented information on the above-mentioned activities?
8.3.5Design and Development outputs
1Does the organization ensure that D&D outputs meet the input requirements?
2Does the organization ensure that D&D outputs are adequate for the subsequent processes for the provision of product and services?
3Does the organization ensure that D&D outputs include (or has reference) monitoring and measuring requirements and acceptance criteria?
4Does the organization ensure that D&D outputs specify the characteristics of the products and services that are essential for their intended use?
8.3.6Design and Development changes
1Has the organization identified, reviewed and controlled changes made during, or subsequent to the D & D of the product and services to ensure that there is no averse to the impact on conformity to requirement?
2Has the organization retained the documented information on D&D changes, the result of reviews, authorization of the changes and the action taken to prevent adverse impact?
8.4Control of externally provided processes, products and services
8.4.1General
1Does the organization ensure that the externally provided processes, products and services conform to the requirements?
2Does the organization determine the controls needed when the product and services from the external providers are incorporated into their own product and services?
3Does the organization determine the controls needed when the product and services from the external providers are provided directly to the customer by external providers?
4Does the organization determine the controls needed when the process or part of the process is provided by the external providers?
5Has the organization determined and applied the criteria for selection, evaluation, monitoring of performance and re-evaluation of external providers?
6Has the organization retained the documented information of these activities and any action arising out or evaluation/re-evaluation?
8.4.2Type and extent of control
1Does the organization ensure that the externally provided processes, product and services do not adversely affect its ability to consistently deliver conforming products and services to the customers?
2Does the organization ensure that the externally provided process remains within the control of its QMS?
3Has the organization defined the controls to be applied to an external provider and its resulting outputs?
4Has the organization taken into consideration the potential impact of the organization’s ability to consistently meet customer and applicable statutory and regulatory requirement?
5Has the organization taken into consideration the effectiveness of the controls applied by the external providers?
6Has the organization determined the verification or other activities, necessary to ensure that the externally provided processes, products and services meet requirements?
8.4.3Information for external providers
1Does the organization ensure the adequacy of requirements prior to their communication to the external provider?
2Does the organization communicate to the external providers its requirements for the processes, products and services required?
3Does the organization communicate to the external providers its requirements for the approval of the product and services; methods, processes and equipment; the release of product and services?
4Does the organization communicate to the external providers its requirements for competence including any qualification of persons?
5Does the organization communicate to the external providers its requirements for external provider’s interactions with the organizations?
6Does the organization communicate to the external providers its requirements for control and monitoring of the external providers’ performance to be applied by the organization?
7Does the organization communicate to the external providers its requirements for verification or validation activities that the organization or its customer intends to perform at the external providers’ premises?
8.5Production and Service provision
8.5.1Control of production and service provision
1Has the organization implemented production and service provision under controlled conditions?
2 Are there any documented information available that defines the characteristics of the product, services or activities to be performed and the results to be achieved?
3Are any suitable monitoring and measuring resources available? Are they being used?
4Are monitoring and measuring activities being performed at appropriate stages?
5Are competent persons (including qualification) being appointed?
6Is the infrastructure and environment being used suitable for operation of processes?
7Has the organization implemented any actions to prevent human error?
8Has the organization implemented any release, delivery and post-delivery activities?
9Where resulting output cannot be verified by subsequent monitoring or measurement, has the organization conducted validation and periodic revalidation of the process for production and service provision?
8.5.2Identification and traceability
1Has the organization used any suitable means to identify output when it is necessary to ensure the conformity of products and services?
2Has the status of outputs with respect to monitoring and measuring requirements throughout the production and service provision being identified by the organization?
3Has the organization controlled the unique identification of the outputs when traceability is a requirement?
4Has the organization retain the documented information necessary to enable traceability, when traceability is a requirement?
8.5.3Property belonging to customers or external providers
1When property belonging to customers or external providers is under the organization’s control or being used by the organization, does the organization exercise adequate care?
2Does the organization identify, verify, protect and safeguard customers’ or external providers’ property?
3When the property or the customer or external provider is lost, damaged or otherwise, fount to be unsuitable for use, does the organization report this to the customer or external provider? Does the organization retain documented information on what has occurred?
8.5.4Preservation
1Does the organization preserve the outputs during production and service provision, to the extent necessary to ensure conformity to requirements?
Post-delivery activities
8.5.5
1Does the organization meet requirements for post-delivery activities associated with the product and services?
2In determining the extent of post-delivery activities does the organization considers the statutory & regulatory requirements; the potential undesired consequences associated with its product and services; customer requirement & feedback; nature, use and intended lifetime of its product and services?
8.5.6Control of change
1Do the organization conduct review and control changes for production or service provision to ensure continuing conformity with requirements?
2Does the organization retain documented information describing the results of the review of changes, the person(s) authorizing the change and any necessary actions arising from the review?
8.6Release of products and services
1Has the organization implemented planned arrangements, at appropriate stages, to verify that the product and service requirements have been met?
2Does the organization ensure that the release of product and service proceed only after the planned arrangement is satisfactorily completed or approved by the relevant authority and as applicable by the customer?
3Does the organization retain the documented information on the release of products and services and it includes information relating to the evidence of conformity with the acceptance criteria; traceability of the person authorizing the release?
8.7Control of nonconforming outputs
8.7.1
1Does the organization ensure that the outputs which do not conform to their requirements are identified and controlled to prevent their unintended use or delivery?
2Is the action appropriate to the nature of the nonconformity and its effect on the conformity of products and services?
3Do the organization also consider nonconforming product and services detected after delivery of products, during and after the provision of services?
4When non-conforming products and services are detected does the organization take correction action and/or segregation, containment, return, or suspension of the provision of product & services and/or informing the customer and/or obtaining authorization for acceptance under concession?
5Does the organization retain documented information that describes the nonconformity; describes the actions taken; describes any concession obtained; identifies the authority deciding the action in respect of the nonconformity?
Clause 9Performance evaluation
9.1Monitoring, measurement, analysis, and evaluation
9.1.1General
1Did the organization plan how to monitor, measure, analyze, and evaluate its QMS?
2Did the organization plan how to monitor QMS performance and effectiveness?
3Did the organization figure out what needs to be monitored and select methods?
4Did the organization determine its QMS monitoring requirements?
5Does the organization select monitoring methods that can produce valid results?
6Did the organization establish when monitoring should be done and who should do it?
7Did the organization plan how to measure QMS performance and effectiveness?
8Did the organization figure out what needs to be measured and did the organization select methods?
9Did the organization determine its QMS measurement requirements?
10Does the organization select measurement methods that can produce valid results?
11Did the organization establish when measuring should be done and who should do it?
12Did the organization plan how to analyze QMS performance and effectiveness?
13Did the organization select analytical methods that are capable of producing valid results?
14Did the organization decide when monitoring and measurement results are analyzed?
15Did the organization plan how to evaluate QMS performance and effectiveness?
16Did the organization select evaluation methods that are capable of producing valid results?
17Did the organization decide when monitoring and measurement results are evaluated?
18Do the organization monitor, measure, analyze, and evaluate the organization’s QMS?
19Does the organization monitor the performance and effectiveness of the organization’s QMS?
20Do the organization record monitoring results and does the organization retain and control these records?
21Does the organization measure the performance and effectiveness of the organization’s   QMS?
22Do the organization record measurement results and does the organization retain and control these records?
23Does the organization analyze the performance and effectiveness of its   QMS?
24Do the organization record analytical results and does the organization retain and control these records?
25Does the organization evaluate the performance and effectiveness of its QMS?
26Do the organization record evaluation results and does the organization retain and control these records?
9.1.2Customer satisfaction
1Does the organization establish methods that the organization can use to monitor customer perceptions?
2Does the organization figure out how the organization is going to obtain information about how customers feel about how well it is meeting their needs and expectations?
3Does the organization figure out how the organization is going to review information about how customers feel about how well it is meeting their needs and expectations?
4Do the organization monitor how well customer needs and expectations are being fulfilled?
5Do the organization monitor how the organization’s customers feel about how well the organization is meeting their needs and expectations (do the organization monitor the organization’s customers’ perceptions)?
9.1.3Analysis and evaluation
1Does the organization analyze its monitoring and measurement results?
2Does the organization analyze and evaluate appropriate data and information?
3Does the organization use its analytical results to evaluate performance?
4Does the organization evaluate the performance of its QMS?
5Does the organization determine if it needs to improve its performance?
6Does the organization evaluate the performance of its external providers?
7Does the organization use its analytical results to evaluate effectiveness?
8Does the organization evaluate the effectiveness of its QMS?
9Does the organization determine if it needs to improve its effectiveness?
10Does the organization evaluate the effectiveness of its planning?
11Does the organization determine if its plans were effectively implemented?
12Does the organization evaluate the effectiveness of its actions?
13Does the organization evaluate the effectiveness of actions taken to address risks?
14Does the organization evaluate the effectiveness of actions taken to address opportunities?
15Does the organization use its analytical results to evaluate conformity?
16Does the organization evaluate the conformity of products and services?
17Does the organization use its analytical results to evaluate satisfaction?
18Does the organization evaluate the degree of customer satisfaction?
9.2Internal Audit
9.2.1
1Does the organization conduct internal audits at planned intervals?
2Did the organization plan a program that can find out if QMS meets the Organization’s own requirement and ISO 9001:2015 requirements?
3Did the organization plan a program that can find out if QMS is effectively implemented and maintained?
9.2.2
1Did the organization plan, establish, implement, and maintain an audit program?
2Did the audit program include the frequency, methods, responsibilities, planning requirements, and reporting?
3Does the audit program take into consideration the importance of the process concerned, changes affecting the organization, and the results of previous audits?
4Did the organization define the audit criteria and scope of each audit?
5Does the organization ensure that the audit is conducted by the auditors to ensure objectivity and impartiality of the audit process?
6Does the organization ensure that the results of the audits are reported to relevant management?
7Does the organization take appropriate correction and corrective action without undue delays?
8Does the retain documented information as evidence of the implementation of the audit program and the audit results?
9.3Management review
9.3.1General
1Does the Top Management review the organization QMS at planned intervals?
2Does the review ensure QMS’s continuing suitability, adequacy, effectiveness, and alignment with the strategic direction of the organization?
9.3.2Management review inputs
1Does the review take into consideration the status of actions from previous management reviews?
2Are the changes in external and internal issues relevant to QMS considered?
3Does the review take into consideration information on the performance and effectiveness of the QMS?
4Does the review take into consideration customer satisfaction and feedback from relevant interested parties?
5Does the review take into consideration the extent to which the quality objectives have been met?
6Does the review take into consideration the process performance and conformity of products and services?
7Does the review take into consideration nonconformities and corrective actions?
8Does the review take into consideration monitoring and measuring results?
9Does the review take into consideration audit results?
10Does the review take into consideration the performance of external providers?
11Does the review take into consideration the adequacy of resources?
12Does the review take into consideration the effectiveness of actions taken to address risks and opportunities?
13Does the review take into consideration the opportunities for improvement?
9.3.3Management review outputs
1Do the outputs of the Management review include decisions and actions related to the opportunities for improvement; any need for changes to the QMS; and resources needed?
2Does the organization retain documented information as evidence of the result of the management review?
Clause 10Improvement
10.1General
1Has the organization determine and select opportunities for improvement?
2Has the organization implemented any necessary action to meet customer requirements and enhance satisfaction?
3Has the organization taken action for improving products & services to meet requirements as well as to address future needs and expectations?
4Has the organization taken action for correcting, preventing, or reducing undesired effects?
5Has the organization taken action for improving the performance and effectiveness of the QMS?
10.2Nonconformity and corrective action
1When any nonconformity (including complaints) occurs, does the organization take action to control and correct it and deal with the consequences?
2When any nonconformity (including complaints) occurs, does the organization evaluate the need for action to eliminate the causes of the nonconformity?
3Does the organization reviews and analyzes the nonconformity?
4Does the organization determine the causes of the nonconformity?
5Does the organization determine similar nonconformity exist or could potentially occur?
6Has the organization implemented any action needed?
7Has the organization reviewed the effectiveness of the corrective action taken?
8Has the organization updated risk and opportunities determined during planning if necessary?
9Has the organization made changes to the QMS if necessary?
10Are the corrective actions appropriate to the effects of the nonconformities encountered?
10.2.2
1Does the organization retain documented information on the nature of the nonconformities and any subsequent actions taken; and the result of any corrective action?
10.3Continual improvement
1Does the organization continually improve the suitability, adequacy, and effectiveness of the QMS?
2Does the organization consider the results of analysis and evaluation, and output from management review to determine if there are needs or opportunities to be addressed as part of continual improvement?

Subscribe to get access

Read more of this content when you subscribe today.

Back to Home Page

If you need assistance or have any doubt and need to ask any questions contact me at preteshbiswas@gmail.com. You can also contribute to this discussion and I shall be happy to publish them. Your comment and suggestion are also welcome.

One thought on “ISO 9001:2015 Audit checklist

  1. Great als always

    On Thu, 1 Oct 2020, 13:58 ISO Consultant in Kuwait, wrote:

    > preteshbiswas posted: “by Pretesh Biswas ISO 9001:2015 GAP ANALYSIS TOOLS > The following checklist can be used for both internal audits as well as Gap > Analysis tools. ISO 9001:2015 Checklist Clause 4: Context of the > organization 4.1 Understanding the organ” >

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s