AeroQuality InsightINTERNAL AUDIT
Move from a completed audit schedule to a review that tests process controls, follows evidence and supports improvement.
An audit plan, checklist and signed report show that an audit activity was organized and recorded. They do not, by themselves, show whether the audit examined the risks that matter or identified weaknesses in implementation.
This practical guide adapts the Chinese article into an English review method. The objective is to connect planning, process sampling, findings and follow-up rather than to measure success by the number of completed forms or findings.
Imagine a manufacturer that completes its audit schedule every year. Later reviews find an obsolete instruction at a workstation, a mismatch between equipment status and calibration records, and quarantined stock that remains available in the inventory system. Supplier performance has also declined without affecting audit priorities.
These observations do not establish a real organization's compliance status. They illustrate why a document-only audit can miss the interfaces where controls fail.
Consider process importance, previous findings, complaints, quality and delivery trends, supplier performance and significant changes. Record why the scope, timing and depth are appropriate. Avoid repeating last year's plan without reviewing those inputs.
Instead of stopping at “Is there a procedure?”, select a transaction and trace its execution. Follow an order to release, a supplier problem to reassessment, or a management decision to completion evidence.
Combine observation, interviews, record sampling and system comparisons as appropriate to the scope. For quarantined stock, compare identification, quantity, physical access and system availability.
Link the applicable criterion to the sampled evidence and the identified gap. Missing signatures can matter, but also examine whether they indicate a broader authorization or release-control weakness. Do not infer a systemic failure without supporting evidence.
Separate immediate correction from action on the cause. Check the owner, due date and implementation evidence, then evaluate results against a defined effectiveness criterion. A revised document alone does not demonstrate that recurrence is controlled.
Consider whether auditors understand the processes and relevant risks, whether sampling reaches actual operations, and whether recurring issues influence future audits. Review findings for clarity and evidential support. Neither a high finding count nor a zero-finding report is sufficient to establish audit effectiveness.
Present management with trends, unresolved risks, overdue actions and resource needs alongside the audit results. If action implementation is complete but the agreed effectiveness review is still pending, retain that distinction in the status.
Choose a process with a recent performance concern. Define its relevant criteria, select a sample linked to that concern, compare documentary and operational evidence, and record the conclusion with its limits. Feed the result into corrective action and the next planning cycle.
Risk-based planning → Process verification → Evidence comparison → Findings → Corrective action → Effectiveness review → Management input
An English editorial adaptation of our Chinese article, with independently written practical guidance and synthetic examples. It is not a clause-by-clause translation, an official interpretation or a substitute for the applicable standard, customer requirements and organizational procedures.
FROM KNOWLEDGE TO PRACTICE
Start with the free Audit Evidence Starter Sheet to connect an audit question with its sample, evidence and conclusion. For a broader internal-audit workflow, explore the AS9100D Internal Audit & Objective Evidence Master Toolkit.
Independent professional toolkit · Editable Excel · English + Traditional Chinese
Get email updates from AeroQuality Insight.