ISO 9001 Audit Checklist — Step-by-Step Quality Management System Review
Preparing for an ISO 9001 audit can feel like navigating a complex maze of clauses and documentation. As someone responsible for maintaining quality standards, I know that success comes down to asking the right questions—the ones that prove effectiveness, not just compliance. This checklist is your proactive tool, focusing on the six most critical areas of the ISO 9001:2015 standard: Context & Leadership, Support & Resources, Operation, Performance Evaluation, Improvement, and Risk.
We're not just looking for documented procedures; we're verifying that the QMS is actively integrated into daily business decisions. Use this checklist to identify weak spots, drive genuine corrective action, and ensure your system consistently delivers value to your customers. Let's demonstrate that quality is truly the core of your operation.
- 1.
- 1.1.Review documented evidence (e.g., SWOT analysis, PESTLE factors). Ensure that the organization's strategic direction takes into account internal and external issues that could impact quality goals.
- 1.2.Check that measurable objectives exist for relevant functions and levels. Review communication records to confirm all personnel understand their role in achieving these goals.
- 1.3.Seek evidence that management participates in reviews and provides necessary resources. Their commitment must be visible in meetings and decisions, not just on paper.
- 1.4.Review the risk register. Ensure actions are planned to address the highest risks, aiming to prevent quality failures before they happen.
- 2.
- 2.1.Audit training records and job descriptions. Verify that employees working on critical tasks have the required qualifications and have received recent, relevant training.
- 2.2.Inspect maintenance logs and calibration records. A rusty machine or outdated software can directly compromise product quality—ensure preventive checks are done consistently.
- 2.3.Select a key document (e.g., a work instruction) and trace its history. Confirm employees are using the latest version and obsolete versions are properly archived.
- 2.4.
- 3.
- 3.1.Review contracts, orders, and sales documentation. Trace a specific customer request (including non-stated needs) from initial inquiry to final delivery.
- 3.2.Check the approved supplier list and recent supplier evaluation records. If a supplier failed to deliver on time or met a non-conformance, verify corrective action was taken.
- 3.3.Observe an operative performing a key task. Check if they follow the work instructions, use the correct tools, and verify acceptance criteria are clearly understood.
- 3.4.Review the non-conformance log. Ensure that rejected products are properly isolated and that root cause analysis is performed before shipping or re-work.
- 4.
- 4.1.Review survey results, complaint logs, and warranty data. The QMS must prove it knows what the customer thinks, good or bad, and acts on that feedback.
- 4.2.Review recent internal audit reports. Check that the audit scope covered all relevant clauses and that non-conformities resulted in timely corrective actions.
- 4.3.Review the minutes from the last management review. Ensure key topics like performance, resources, and improvement opportunities were covered and led to actionable decisions.
- 5.
- 5.1.Select 3-5 major non-conformities from the past year. Verify that the documented corrective action truly addresses the root cause, not just the symptom.
- 5.2.Look for improvement projects, updated policies, or metrics showing upward trends (e.g., reduced scrap rate, faster cycle time) resulting directly from QMS activities.