How to be a good ISO 9001 2008 internal auditor

First of all, we must learn the ISO9001:2008 system standard, understand them one by one (and finally receive professional training), and then study the internal system documents of the enterprise.

I recommend this book "2008 Edition of the Practical Course for Internal Auditors of Quality Management System", published by China Railway Press.

The general internal auditor should be able to audit the department according to the standard and clause by clause. Excellent internal auditors should review the department in combination with the company's business, find the shortcomings of the department, and put forward constructive suggestions for improvement.

If you are a newcomer, it is best to find a training institution to train the knowledge of ISO9001, of course, this training is generally organized by the company (our company will organize it almost every two years), secondly, check some cases about ISO9001 internal audit on the Internet to deepen the understanding of ISO9001 terms (this is very important, it has a strong guiding role for you to go to the site audit).Again, according to the knowledge of the training, combined with the department to conduct the internal audit, find out the terms involved, and then according to these terms to contact the department to be audited to organize some related questions to conduct internal audit (generally speaking, a mature company, the checklist has a fixed format, which does not need to be designed by the internal auditor, it is the business of the audit team leader, and the terms to be audited have also been prescribed, you only need to think about how to audit the audited department for these terms. )

ISO9000 Internal Auditor.

It is the internal maintenance and maintenance of ISO9001 standard requirements, and the internal audit must be carried out by personnel with internal auditor qualifications, generally the company's managers or department heads.

ISO9000 external auditors are national registered auditors.

The common name is that it is trained and qualified and recognized by CNAT for the record, attached to the certification body and reached 20 audit days, and can only be maintained through the CNAT interview, and every year to maintain the qualifications of the efforts, the external auditor is to prepare or have passed the certification of the enterprise audit personnel, audit whether the enterprise is implemented in accordance with the requirements of ISO9001, whether there is no non-conformity, the right to reflect to the certification company whether the enterprise can pass the certification and obtain the certificate. Of course, it is very respected by enterprises, and it is also a high-paying industry. Auditors' salaries are calculated on a daily basis.

The difference between ISO9000 internal auditor and external auditor.

1. The work tasks are different.

The internal auditor is the internal establishment of the enterprise to use DU to find the ISO system operating errors within the enterprise, and its main task is to manage the review, DAO leakage detection, supervision, and put forward rectification plans. An external auditor is a person from outside the enterprise who examines whether there are any non-conformities and whether the ISO certificate is obtained for the enterprise that is preparing to pass or has passed the ISO system certification.

2. The production mode is not the same.

Internal auditors are generally created by people who have undergone ISO training and are familiar with the company's conditions. External auditors are certification bodies that need to go through more rigorous training, examinations and internship periods, and are affiliated with certification qualifications recognized by the National Accreditation Agency.

3. The stages of work are different.

Internal auditors generally audit their own enterprises before the enterprise carries out system certification or external auditor certification to determine whether the system operation is effective, and rectify the unqualified and weak links found in the audit. The work carried out by the external auditor is generally after the completion of the internal audit work of the enterprise, and the certification body will send an audit team to audit the enterprise, so as to obtain certification qualification or review.

External Auditor Application Requirements:

1. First participate in the ISO9000 external auditor training course, and obtain the training certificate issued by the training institution after passing the examination, and then rely on the ID card.

and training certificate to participate in the CCAA unified arrangement of the examination, after passing the examination (70 points pass) can obtain the qualification of registered auditor.

2. Educational experience: should have a college degree or above (including junior college) or equivalent recognized by the national education department.

3. Work experience.

Should have at least 4 years in a technical or managerial position.

Work experience. (Actually, you can consider taking the exam when you are three years old.)

4. Quality work experience: should have at least 2 years of experience in quality, environment, health and safety (information security, congratulations.

Energy management, food management, and sometimes a related professional background is required) management-related work experience.

Two systems, one certificate, is relatively rare. But it's not for nothing.

Generally speaking, if you are training in the 9001 and 14001 two-standard integrated courses. It is possible to combine the two certificates. It is rare for two separate systems to produce one certificate.

But you don't have to worry too much. These two system certificates are generally not too concerned about his authenticity and style. Because there is almost no way to verify authenticity.

So as long as you can pass this exam during the interview or note-taking. There is not much difference with or without a certificate. Nowadays, enterprises generally don't care too much about whether there are two systems on one certificate.

After all, this certificate sounds like an internal auditor certificate. In layman's terms, it is a training certificate or a record of training. There's no need to worry too much.

Of course, if it's a national registration auditor, that's another matter. Besides, these two systems are not a system that can be built with a certificate. I can only say that I understand a little.

I can say this responsibly. If you have never been in contact with people, you should only train once, not to mention leading internal audit, management review or promoting the system. It is important to know exactly how the relevant clauses in the system requirements apply to the organization or process and the specific requirements.

At least I haven't seen anything like that. It is impossible to lead the internal audit, management review, promotion system or to be a manager representative without many years of relevant experience! Therefore, the experience of these two systems is more important than training.

Except for those who have some system knowledge, they can serve as managers and representatives in the company. In fact, no more than 1% of the 100 people who have a training certificate or an internal audit certificate have the ability to lead an internal audit or conduct a management review for about 10 years or 8 years. Less than one in 1,000 people can independently establish a system and implement it.

So you don't have to think about the gold content of this certificate. How many people do you think of a certificate with little gold content as to its authenticity and format? Moreover, its authenticity is almost impossible to verify!

So I can only say: when you show a certain familiarity and understanding of the system, in the eyes of others, your certificate is genuine. If you don't know anything about the performance of the system, then your certificate is fake!

Even if it's not fake, it's just going through a training process. Training is just a process, it doesn't mean that you have this ability after training! Got it now, right?

According to the requirements of the ISO9000 standard, any unit to obtain the ISO9000 certification certificate, must be regularly conducted by the internal quality audit (referred to as internal audit), and the implementation of internal audit personnel must be trained and capable internal auditors, ISO9000 standard does not require internal auditors to obtain qualification certificates, but also to undertake the task of internal audit in the unit.

Therefore, the internal auditor qualification certificate is the certification certificate with internal audit qualification.

Classification of internal auditor qualification certificate:

ISO9001:2008 Internal Auditor.

ISO14001:2004 Internal Auditor.

TS16949:2009 Internal Auditor.

OHSAS18001:2007 Internal Auditor.

ISO13485:2003 Internal Auditor.

ISO22000 Internal Auditor.

ISO27001 Internal Auditor.