Internal Audit Non-Conformities Guide
Internal Audit Non-Conformities Guide
2) This workbook dully filled ones shall, be used for your continuous assessment on every
day. Please ensure that you submit this workbook to the tutor(s), for daily continuous
assessment at the end of eachday.
3) On the last day, please return back the course feedback forms (dully filled in by you – for
our reference and improvements) and the IRCA written answer papers for thecourse.
Introduction ofParticipants
Exercise 1 Exercise (Pairs) – 15 Minutes
Organization: GLEEDS
Designation: Safety Manager
Working Organization, Role: Project leader in Health & Safety of High Rise Residential Building &
Designation & Role Commercial projects
I & II
Any I/II/III Party Audit Experience:
3
Rank 1(Minimum) to 5(Maximum)
Mapping ENVIRONMENT
# Description Environm # TERMS
ent Terms
1 Objective set by the organization consistent with its 12 1 ENVIRONMENT
environmental policy
2 Legal Requirements that an organization has to 9
comply with and other requirements that an 2 AUDIT
organization has to or chooses to comply with
3 Recurring activity to enhance performance 7 3 PREVENTION OF
POLLUTION
4 Intentions and direction of an organization related to 11 DOCUMENTED
environmental performance, as formally expressed 4 INFORMATION
by its top management
5 Surroundings in which an organization operates, 1 ENVIRONMENTAL
including air, water, land, natural resources, flora, 5 PERFORMANCE
fauna, humans and their interrelationships
6 Performance related to the management of 5 6 ENVIRONMENTAL
environmental aspects. IMPACT
7 Change to the environment, whether adverse or 6 CONTINUAL
beneficial, wholly or partially resulting from an 7 IMPROVEMENT
organization’s environmental aspects
8 Fulfillment of a requirement 15 8 ENVIRONMENTAL
CONDITION
9 Use of processes, practices, techniques, materials, 3
products, services or energy to avoid, reduce or COMPLIANCE
control the creation, emission or discharge of any 9 OBLIGATIONS
type of pollutant or waste, in order to reduce
adverse environmental impacts.
10 Consecutive and interlinked stages of a product (or 16 ENVIRONMENTAL
service) system, from raw material acquisition or 10 MANAGEMENT
generation from natural resources to final disposal SYSTEM
11 Information required to be controlled and 4 ENVIRONMENTAL
maintained by an organization and the medium on 11
which it is contained. POLICY
12 Element of an organization’s activities or products 14 ENVIRONMENTAL
or services that interacts or can interact with the 12
environment. OBJECTIVE
13 State or characteristic of the environment as 8 NON-
determined at a certain point in time 13 CONFORMITY
14 Part of the management system used to manage 10 ENVIRONMENTAL
environmental aspects, fulfill compliance obligations 14 ASPECT
and address risks and opportunities
15 Effect of uncertainty 20 15 CONFORMITY
16 LIFE CYCLE
17 REQUIREMENT
18 COMPETENCE
19 INDICATOR
20 RISK
For an oil and gas refinery, audit if the 5 Internal Issues and 5 external issues for its EMS are correctly
defined as per ISO 14001:2015
Read the Environmental Apex Documented Information of Industrial Gases Company Context of the
Organisation [including Scope] and identify those issues which do not comply with the requirements of
the standard (up to specific sub-clause) with reference to chapter & page number of the Apex Documented
Information
2 IGC failed to identify more internal and external issues P. No. 8 of IGC Apex Clause 4.1
that area relevant and that can affect in achieving Documented Information
intended outcomes like legal, customer issues,
Contracts (External), Capacity and Capability,
Organizational Culture (internal), Law and order
problems not covered
3 Customer and external suppliers including calibration P. No. 8 of IGC Apex Clause 4.2
agency area not covered Documented Information
4 IGC should determine more interested parties That is P. No. 9 of IGC Apex Clause 4.3
relevant to the EMS, Eg: General, Public, etc. Documented Information
5 IGC documentation is not Approved by Managing P. No. 1 of IGC Apex Clause 4.3
Director Documented Information
Read the Environmental Apex Documented Information of Industrial Gases Company Leadership and
identify those issues which do not comply with the requirements of the standard (up to specific sub-clause)
with reference to chapter & page number of the Apex Documented Information.
Read the Environmental Apex Documented Information of Industrial Gases Company Planning and
identify those issues which do not comply with the requirements of the standard (up to specific sub-clause)
with reference to chapter & page number of the Apex Documented Information.
Identify the scope of the SEA. Is it for concept, system, design, process or service? What are the
boundaries? How detailed should it be?
Review the IGC SEA procedure (Appendix 1) and audit the same for adequacy.
…………………………………………………………………………………………………………………
…………………………………………………………………………………………………………………
Read the Environmental Apex Documented Information of Industrial Gases Company Operation and
identify those issues which do not comply with the requirements of the standard (up to specific sub-clause)
with reference to chapter & page number of the Apex Documented Information
Read the Environmental Apex Documented Information of Industrial Gases Company Improvements and
identify those issues which do not comply with the requirements of the standard (up to specific sub-clause)
with reference to chapter & page number of the Apex Documented Information
1
Exercise 11 FactsorInference Group Exercise – 30Minutes
Read the following cases and identify whether the statement is a fact or Inference. Also give
reasons in case of your judgment for an inference.
1) Walker was doing an experiment (in lab) on biological changes in humans, when they tell lies. Walker was
surprised to see the results of one test and wanted to inform the professor of her university but the telephone
lines were dead. No mobile connectivity. Walker thought that since the weather was very rough when arrived at
the lab in the morning, looked out of the window and was surprised to see dark clouds and realized that it might
be raining. Took rain coat& test report and went out of the Laboratory and rushed towards the car, to reach the
professor.
2) The swimming pool safe guard was beside the swimming pool and suddenly found that one boy fell into the pool
(slipped on the edge). The guard jumped into the pool to rescue the boon approaching the boy he realized that
the boy knew swimming and he swim him to one side and started smiling. The guard also smiled but suddenly
theboysaid―help‖[Link] came to
senses. The guard insisted for medical checkup by duty doctor and taken immediately forcheckup.
Considering the Environmental Apex Document of Industrial Gases Company, prepare an Audit Plan, as
per following guidelines:
1. Total man days = Calculate audit duration from IAF MD5 Table for 50 employees or take Four
(minimum) [One Man day = 08.00 hrs with Half an hour Lunch Break) or use audit duration as
given bytutor.
2. Use all the personnel in your group as auditors (you can use auditor – 1, 2, or A & B etc.) as
references, rather than actualnames.
3. Avoid if possible two people going for same process areaaudit.
4. Cover one Installation site also in the audit plan as they do execution aswell.
5. The audit plan shall contain basic information asunder:
a) The start time of each process area and the auditor allotted for that specific processarea.
b) Allot5minutesasauditor’sbrushuptimeinmiddleforeffectivesmoothcontinuityand
effective audit, for information sharing and judgment on auditproceedings.
c) You can do this in two ways…one plan accommodating all process areas and auditors or
separate plan for each auditor, with distributing the processareas.
6. Assume that all Non- Conformities raised in Stage 1 audit have been completed andclosed.
MAKE THE AUDIT PLAN IN ROUGH ON THE NEXT PAGE & AS A GROUP ON THE FLIP
CHART(S)THE GROUP LEADER TO MAKE A PRESENTATION OF THE EXERCISE FROM THE
FLIP CHART
For tutor: Tutor to Scan the flip charts and send to the BSCIC. In case Scanning is not
possiblesend photographs.
AssessmentPlan Date:
Organization:
Scope: PRODUCTION, DELIVERY AND INSTALLATION OF INDUSTRIAL AND SPECIALTY GASES
Objective of Assessment:
Criteria System
Documentation:
Team Leader: Audit Start Date Opening
Meeting
Team Audit End Date Closing
Member: Meeting
Audit Schedule
Considering the ISO 14001:2015 standard and Environmental Apex Document of Industrial Gases
Company, and using the organization structure, prepare an Audit Checklist for three process areas
(functions/departments), allotted to your group by the Tutor.
Note: As you are aware, the word “SHALL” means “MANDATORY” and all the requirements after shall
are action points to be verified in an audit. Take this as a tip in preparing Audit Checklist
Make the audit checklists in rough on the next page & as a group on the flip chart(s).
Each Group to make check lists for 3 Department allotted by tutor on three separate flip charts.
The group leaders to make a presentationof the exercise from the flip chart
Tutor guidance: In a training course, tutor should preferably ensure that all departments Industrial Gases
Company are covered in Ex 14 for making check list and in Exercise 16 for conducting role play. The eight
departments to be covered are (in order of priority): Production, Installation, Maintenance (including
Utilities), HR (including Admin), Purchase, Transportation & Dispatch, MR, Top Management and Sales
and Marketing i.e. If the batch has only four or five delegates, two groups will be made and each group will
cover 3 departments, If the batch has 6 or more delegates, then three groups will be formed and each
group will cover 3 departments each. If the batch has 12 or more delegates, then four groups will be
formed and each group will cover 3 departmentseach.
Incident 1
During the audit of acid plant, you identify that a major acid spill had taken place during the production
process 6 months ago and four employees had been hospitalized with respiratory problems. The evidence
seen showed that the organization had fully documented the incident, completed an investigation, taken
corrective actions and evaluated them to be effective. You then ask to see the environmental emergency
response plan. These were dated 17 months before the incident. You enquire whether these emergency
response plans had been reviewed following the acid spill incident. You are told that the organization did
not consider it necessary since the incident had been fully documented. Also, changes in handling of acid
containers had been implemented.
NONCONFORMITYNOTE Incident:1
Requirement (WHY):
Comments:
Incident 2
You are auditing the waste management activity in a chemical industry which manufactures a range of
pesticides in granular form. Just outside the building, you notice only one large waste drum (container). On
examining the contents you see a mixture of items including cardboard packaging, plastic bottles, waste
paper, empty tin cans, food waste and some powdery material.
The waste drum is covered, as required by local regulations that prohibit liquids from going to landfill. The
environmental manager tells you that the only other waste stream is within the plant and involves recycling
of granules and ingredients, none of which is wasted.
NONCONFORMITYNOTE Incident:2
Requirement (WHY):
Comments:
Incident 3
A textile mill takes in wool, cotton and used fabrics and, by a series of chemical processes, breaks this
input material down into its original fibers through re-combing before spinning it into large reels of yarn.
The production process uses a large volume of water extracted from a local lake/reservoir. This water
becomes heavily contaminated by the process, especially oil and grease, and needs to be treated before
being discharged back into the lake. This is licensed by the local Pollution Control Board (Government’s
Regulatory Authority) but there is a limit on the amount of suspended solids in the discharged water. The
Regulatory Authority takes and checks a sample every six months. The results have been within the
[Link]―Half Yearly
statement of compliance‖ to the Regulatory Authority.
You are reviewing this process and note that in the previous six month period the limit was exceeded by
between 35%, 55%, 45% and 39% on four consecutive weeks before returning to the range of values
normally seen at the weekly sampling. The Plant Manager informed the auditor that the situation was
caused by a failure in the filtration process but the plant could not be shut down to repair the fault
because it was a high demand period when an urgent export order needed to be completed. Later the
auditor read a note which was recorded in the management review meeting minutes held 10 days ago
that the company remained in legal compliance during the previous half year and a statement to this
effect had been issued to the RegulatoryAuthority.
NONCONFORMITYNOTE Incident:3
Requirement (WHY):
Comments:
Incident 4
During an audit of a warehouse an auditor noted that members of the staff were washing a chemical
storage area and sweeping the water into the rainwater drain. There was an environmental assessment
carried out for this activity and procedure established to send this to the effluent treatment plant. On
enquiry as to why the procedure was not followed, the reasoning given was that the person wasnew.
NONCONFORMITYNOTE Incident:4
Requirement (WHY):
Comments:
Incident 5
While auditing the Top Management area (internal audit process), you noticed that one of the internal audit
NC reveals the fact of the internal audits frequency was half yearly and three internal audits results
revealed that 70% of the Non-conformities were on Maintenance. You also noted that there were no
changes in the Environmental aspects & impacts and audit programme& no trainings imparted for EMS in
Maintenance Section.
NONCONFORMITYNOTE Incident:5
Requirement (WHY):
Comments:
Incident 6
During an audit of the administrative office of the Call Centre, you notice a large number of IT
equipment being used like PC’s, Printers, CD’s, Photocopiers, and external hard discs. You go near
one of the work desks and find that two CD’s have been dropped in the waste paper basket. On
asking the person concerned, you are told that the CD is defective and hence it has been thrown.
You ask as to how it will be disposed. You are told that it will be disposed along with the other
office waste material like paper, cardboard, pens, cartons etc. You enquire whether there is a
danger of pollution if the CD is dumped on the ground or in water, there was no reply. On enquiry
you are told that this is not included in aspect-impact analysis.
NONCONFORMITYNOTE Incident:6
Requirement (WHY):
Comments:
Group Exercise –
Exercise 15 Role Play – Interview Process 510 Min. for Role Play
60 Minutes for presenting audit findings
30 Minutes for Tutor Review
Role play for Stage 2 audit of Industrial Gas Company will be conducted after Stage 1 audit already
done. It is assumed that the company has taken corrective actions on all NC’s of Stage 1 audit
including scope.
Teams will be same as made for the exercise on Checklist # 15 – Each Team will audit for the
specific 3 functions allotted by tutor.
Tutor will act as Auditee.
Conduct the role play involving each team so that all get a chance for the LIVE AUDIT. And record
at least 2 NC of each function i.e. total 6 NCs.
The group (s) which are not auditing shall observe the other group while auditing and present their
observations and findings at the end of each role play.
Questions in this section are designed to test student’s ability to analyse audit situations,
evaluate audit evidence and apply knowledge of the audit criteria correctly.
Students are also required to demonstrate their ability to write a well- constructed
nonconformity statement that describes clearlythe weakness or failure of the management
system, the audit evidence and the requirement(s) of the standard.
Note to marker:
To raise a nonconformity report when there is not sufficient audit evidence should
be penalized and markers should normally award zero mark.
To complete an audit investigation where there is sufficient evidence to report
nonconformity can often be supported and be given marks, normally up to a
maximum of 7 marks from a possible 10 marks.
To be awarded marks a student must state clearly their reason for thinking there is not yet
sufficient evidence to report the findings as a nonconformity and describe the investigation
they would follow to determine conformity or nonconformity; including audit trails and audit
evidence they would seek and for what purpose, quoting relevant ISO 14001 clause
numbers.
Exceptionally, where there was some obvious ambiguity in the description of the audit
situation or the student demonstrates logical argument, knowledge of the subject and the
answer shows an ability to make a reasoned judgement leading to a clear determination of
conformity or nonconformity marks up to the maximum available may be given.
Typical solutions for nonconformities follow a standard method of presentation: i.e. failure
in the system (3 marks for identifying the failure), audit evidence (3 marks for identifying
the audit evidence) and requirements (1 mark for identifying the ISO 14001 clause and
requirement). Alternative structure or presentation of the nonconformity by a student is
acceptable provided these three components of the nonconformity are clearly present and
the distribution of marks adhered to.
Write NCRs for any two NC’s for the three functions in the prescribed format (i.e. Total of 6 NC’s)
on subsequent pages
Requirement (WHY):
Requirement (WHY):
Requirement (WHY):
Requirement (WHY):
Requirement (WHY):
Requirement (WHY):
Based on the audit done and findings recorded, please prepare Audit Report as below:
ASSESSMENT REPORT
Address:
Management Standard:
Assessment Type:
Assessment Commencement Date: Assessment Completion Date:
Assessment Team:
Name Status
Mandays :
Nonconformities raised during Assessment
NCR Ref. No.
Minor/Major
Nonconformities raised during last visit
NCR Ref. No.
Closed/Open
NA
Leadership (5.0)
COMPETENCE (7.2):
COMMUNICATION (7.4):
ASSESSMENT COMMENTARY
Subsequently this Assessment Report Pack along with your satisfactory Corrective Action Plan and objective
evidences (if applicable) shall be reviewed independently with in BSCIC. Once the recommendations are found as
sound, BSCIC will be pleased to issue a Certificate of Registration. This will come along with the BSCIC Logo and
Accreditation Mark. The conditions for use of BSCIC Logo and Accreditation Mark have been stipulated and the
same will be provided toyou.
BSCIC believes in value added partnership with its clients, and we will be pleased to revisit your company for the
Surveillance Assessments for a visit every Year for 2 Manday per visit.
Activity NA
2. This assessment is based on random samples therefore nonconformities may exist which have not been
identified.
5. TeamrecommendsaLimitedSupplementaryAssessmentfor---Manday(s)orafullRe-assessmentfor-----
Manday(s).Thesamecouldbeconductedby----/----/--------------, upon satisfactory correctiveaction plan submitted
by client to BSCIC’sChief Executive---------NA
6. Client to inform their readiness to BSCIC’s Chief Executive for the further assessment as in 4 above so that the
same could be satisfactorily planned & conducted.
[Link] 1year
S.A. Conduct Number SA1 SA2 REA
Re
Assess.
Man day(s) X X X
MM / YYYY MM/YY MM/YY MM/YY
Functions/ Areas / Site
Context of theOrganization
Leadership
MR or a resource assigned by top
management for responsibility and
authority as per clause 5.3 (a) to (b)
Planning, Aspect and Impact,
Compliance Obligations, Risks and
Opportunities
Marketing and Sales
Design & development of products
and services
Control of externally provided
processes, products and services
Production and Service provision
Performance Evaluation /
Monitoring and Measuring
resources
HR and Admin
Management Review
EMS Documented Information &
Changes
Internal Audits
Complaints Management
Previous NCR & Corrective Actions
Use of BSCIC Logo & Marks
Re-assessment (Tick )
Legal (EMS specific)
Notice: 1. Fill the areas as per the client activities and processes. Mandatory fields are already mentioned.
2. Assessor to please in boxes indicating a full plan. This is required to be updated upon each Surveillance
Assessment.
The onsite Registration Assessment of M/S Industrial Gases Company was completed.
BSCIC through its Team Leader / Lead Auditor confirms the Confidentiality of the information received, Observed
and Reported by the Team BSCIC.
Team Leader / Lead Auditor by signing this sheet confirm the Non Conflict of Interests with the Organization.
This report and its full contents are completely understood and accepted.
Based on the audit done and findings recorded, please prepare Audit Report as below:
ASSESSMENT REPORT
Address:
Contact Person:
Position:
AlternateContact Person: Position:
Registration Scope:
Mandays : 4
Nonconformities raised during Assessment
NCR Ref. No. NC 01
Minor/Major Minor
Nonconformities raised during last visit
NCR Ref. No. NIL
Closed/Open
Areas Assessed :
**Disclaimer - Auditing & its conclusion is based on a sampling process of the available information**
Leadership
Planning
Support
Operation
Performance Evaluation
Improvement
ASSESSMENT COMMENTARY
Subsequently this Assessment Report Pack along with your satisfactory Corrective Action Plan and
objective evidences (if applicable) shall be reviewed independently with in BSCIC. Once the
recommendations are found as sound, BSCIC will be pleased to issue a Certificate of Registration. This
will come along with the BSCIC Logo and Accreditation Mark. The conditions for use of BSCIC Logo and
Accreditation Mark have been stipulated and the same will be provided toyou.
BSCIC believes in value added partnership with its clients, and we will be pleased to revisit your company
for the Surveillance Assessments for a visit every Year for 2 Manday per visit.
Activity NA
2. This assessment is based on random samples therefore nonconformities may exist which have not
been identified.
6. Client to inform their readiness to BSCIC’s Chief Executive for the further assessment as in 4 above
so that the same could be satisfactorily planned & conducted.
Leadership
MR or a resource assigned by
top management for
responsibility and authority as per
clause 5.3 (a) to(b)
Design & development of
products and services
Performance Evaluation /
Monitoring and Measuring
resources
HR and Admin
Management Review
Notice: 1. Fill the areas as per the client activities and processes. Mandatory fields are already mentioned.
2. Assessor to please in boxes indicating a full plan. This is required to be updated upon each
Surveillance Assessment.
The onsite Registration Assessment of M/S Industrial Gases Company was completed.
BSCIC through its Team Leader / Lead Auditor confirms the Confidentiality of the information received,
Observed and Reported by the Team BSCIC.
Team Leader / Lead Auditor by signing this sheet confirm the Non Conflict of Interests with the
Organization.
This report and its full contents are completely understood and accepted.
Review the closure submitted by auditee and judge weather this closure is acceptable or not, for the below
three cases.
TOR
[C] A U D I T O R
DITOR









