The audit a certified company could not do itself

The problem

This project management firm had carried ISO 9001:2015 certification through several cycles, but its own people were too close to the work to audit it objectively, and nobody in-house held auditor training. Surveillance was approaching with corrective actions still hanging open from the prior cycle, and clause 9.2 does not accept good intentions as evidence.

What we did

• Developed a risk-based internal audit schedule covering every applicable clause and process at every office
• Conducted a full clause-by-clause internal audit using the Wilkshire F-18 audit report framework
• Identified three minor nonconformities and two improvement opportunities, each with root-cause guidance
• Reviewed and verified closure of every prior-cycle open NCR before signing off the report
• Delivered a boardroom-ready Internal Audit Report with management review input

Services: Internal audit · NCR review · Management review support · Corrective action