ISO 9001 is where many automotive suppliers start
Many Tier 2 and Tier 3 suppliers, and plenty of small Tier 1 shops, hold ISO 9001 rather than IATF 16949. That is a perfectly reasonable place to be. But your customers, and your customers' customers, may still audit you, send supplier quality manuals, require corrective actions on a deadline, and expect process controls that go well beyond a certificate on the wall.
ISO 9001 requires you to plan and run internal audits at planned intervals, with objective and impartial auditors, and to act on what they find. Done well, that gives a small quality team a regular, honest look at the system. Done as a formality, it adds paperwork without finding anything.
What good ISO 9001 internal audits look like
- Process-based. We audit how work really flows through order review, planning, production, inspection, shipping and corrective action, rather than reading clauses aloud.
- Risk-based. We spend more time where problems have occurred: repeat defects, customer complaints, process changes and new products.
- Evidence-based. Findings point to specific records and observations, so there is no argument about what was seen.
- Useful to the auditee. Process owners understand what to fix and why, and leave better prepared for the next audit.
We work with your existing procedures and records. You do not need to rebuild your system to benefit.
Built for small quality teams
If your quality department is one or two people, a few things are probably true. You are the quality manager, the internal auditor, the customer contact and the person who answers every complaint. Audits get pushed back when a customer is waiting. Nobody else knows the system well enough to audit it.
We can run your whole internal audit cycle, or take the parts you cannot do objectively yourself. We can also coach a second person on your team so the program becomes less dependent on one individual. This is the same idea behind everything we do: build systems instead of heroics.
A simple audit cycle that works
A workable ISO 9001 audit cycle does not need to be heavy. A typical outline:
- List your processes, and rank each by risk, past problems and customer sensitivity.
- Set an audit frequency that follows that ranking, with the riskiest processes audited more often.
- Audit each process with objective evidence: records, observations and conversations on the floor.
- Write findings clearly, assign owners and dates, and verify that the fixes worked.
- Report results to top management, so audit results influence decisions.
We can set this up for you, run it, or train your people to run it with our support.
Preparing for customer expectations
Customers often ask ISO 9001-only suppliers for more than the standard asks: problem-solving discipline, control plans, process audits or specific supplier evaluations. We can fold those expectations into your audits. See customer audit readiness and VDA 6.3 internal audits.
If you are considering IATF 16949 down the road, audits are also a low-risk way to see where you stand. Start with what actually changes, then talk with us about whether and when the move makes sense.
Where this connects to cost
Internal audits are not just about compliance. Audit findings often point to the same places where scrap, rework and complaints come from. At EFI in Elkmont, Alabama, tightening requirements, accounting for every scrapped piece and updating work instructions took scrap from 7% to 0.1%. See COPQ reduction for how we tie audit findings to cost.