Guide For Internal Audit & Management Review For Laboratories
Guide For Internal Audit & Management Review For Laboratories
NATIONAL ACCREDITATION
GUIDE
for INTERNAL AUDIT AND
MANAGEMENT REVIEW
FOR LABORATORIES
ISSUE NO : 03 AMENDMENT NO : 00
ISSUE DATE: 25.03.2008 AMENDMENT DATE: --
AMENDMENT SHEET
10
Amendment Sheet i
Contents ii
Introduction 1
Terminology 2-3
It is assumed that the laboratories have implemented a management system that meets
the requirement of ISO/ IEC 17025: 2005. This document has been prepared to give
laboratories guidance on how to establish a programme for internal audit and
management review. The document consists of two sections: Section A – Internal Audit
and Section B – Management Review.
The guidelines given in this document are general in nature. The actual accomplishment
of an internal audit or a management review depends on the size, scope and
organisation structure of the laboratory and, for the smaller laboratory, many of the items
described in this document can be carried out in a simplified manner.
An internal audit and a management review must have been conducted preferably
before the assessment team visits the laboratory for the assessment/ surveillance/ re-
assessment.
NABL, at any time, may call for the internal audit and/ or management review reports.
Management System
The organisational structure, responsibilities procedures, processes and resources
needed to implement quality management.
Quality Management
That aspect of the overall management function that determines and implements the
quality policy.
Quality Assurance
All those planned and systematic actions necessary to provide adequate confidence that
a product or service will satisfy given requirements of quality.
Quality Audit
A systematic and independent examination to determine whether quality activities and
related results comply with planned arrangements and whether these arrangements are
implemented effectively and are suitable to achieve objectives.
Note: In this document, the term ‘internal audit’ is used to emphasise that the audit is
done by the laboratory itself.
Management Review
A formal evaluation by top management of the status and adequacy of quality system in
relation to quality policy and objectives.
Quality Manager
A member of staff with defined responsibility and authority for ensuring that the
management system is implemented and followed at all times and shall have direct
access to the highest level of management at which decisions are made on laboratory
policy or resources [ISO/ IEC 17025, clause 4.1.5 (i)].
Auditee
An organisation to be audited.
Note: In this document the term ‘Auditee’ refers to the individuals working in the
laboratory.
Observation
A statement of fact made during an audit and substantiated by objective evidence.
Objective Evidence
Qualitative or quantitative information, records or statements of fact pertaining to the
quality of an item or service or to the existence and implementation of a quality system
element, which is based on observation, measurement or test and which can be verified.
Non-Conformity
The non-fulfillment of specified requirements.
INTERNAL AUDIT
1. Objectives of Internal Audit
1.1 The laboratory should conduct internal audits of its activities to verify that the
operations continue to comply with the requirements of management system.
1.2 The internal audits should ensure that the management system fulfils the
requirements of ISO/ IEC 17025, NABL relevant specific criteria document
and regulatory bodies.
1.3 The audit should also ensure whether or not the requirements of the
laboratory quality manual and related documents are applied at all levels of
work.
1.4 The non-conformities found during the internal audit give valuable information
for the improvement of the laboratory’s management system and technical
competence, which is to be used as a input to management reviews.
2.1 The internal audits should be carried out according to a written procedure as
described in the quality manual.
2.2 The audit should be programmed such that each element of the
management system is checked at least once a year. In large laboratories it
may be advantageous to establish a plan whereby the different element of
management system or different sections of the laboratory are audited
throughout the year.
2.3 The quality manager is responsible for the conduct of the audit and he/ she
should ensure that the audits are carried out in accordance with the schedule
plan.
2.4 The audits shall be carried out by qualified personnel who understand the
technical requirements they are auditing and who are trained specifically in
auditing techniques and processes.
2.5 The quality manager may delegate the task of performing audits provided the
person is familiar with the laboratory’s management system and NABL
accreditation requirements.
2.6 In large laboratories carrying out calibration and/ or testing in a wide range of
technical disciplines, it may be necessary for audits to be carried out by team
of individuals. One of the auditors may act as a lead auditor, however the
responsibility of the conduct of audit lies with the quality manager.
2.7 In small laboratories, the quality manager may carry out the audit, but the
management should ensure that the activities of the quality manager are
audited by another person.
2.8 The auditor shall be independent of the activity to be audited and personnel
shall not audit their own activities.
2.9 Where a laboratory has accreditation for calibration and/ or testing at the
clients’ site, or for sampling, these activities must be included in the audit
programme.
2.10 Audits carried out by the other parties, such as customers or NABL, cannot
be considered to substitute for or override the laboratory’s own internal audit
responsibilities.
3.1 An audit plan needs to be established by quality manager and should include
the audit scope, the audit criteria, the audit schedule, reference documents
(such as the laboratory’s quality manual and audit procedure) and audit team
members.
3.2 The audit programme may include horizontal audit / vertical audit so that all
the sections/ departments are audited for every aspect/ clause of the
management system and ISO/ IEC 17025.
3.3 Each auditor should be assigned specific management system elements or
functional departments to audit. Such assignments should be made by the
quality manager or the lead auditor in consultation with the auditors
concerned. The auditors should have adequate technical knowledge of the
activities they are to audit.
3.4 Working documents required to facilitate the auditor’s investigations and to
document and report results, may include:
- ISO/ IEC 17025 and any specific criteria document
- Laboratory’s quality manuals and associated documents such as system
procedures, test methods, work instructions, records etc.
- Checklist used for evaluating management system elements (normally
prepared by the auditor assigned to audit that specific element).
- Forms for reporting audit observations, such as non-conformity form or
corrective action form. These forms should include nature of non-
conformity, agreed corrective action, time required for corrective actions
and confirmation that the corrective action has been taken and is effective.
3.5 An audit timetable should be developed by each auditor in conjunction with
their auditee to ensure the smooth and systematic progress of the audit.
3.6 Prior to the actual audit, a review of documents, manuals, previous audit
reports and records should occur to check for compliance with the system
criteria and to develop a checklist of key issues to be audited.
5.1 The implementation of the agreed corrective action is the responsibility of the
quality manager.
5.2 When a non-conformity that may jeopardize the result of calibration/ test, is
discovered the corresponding activity should be halted until appropriate
corrective action has been taken to lead to satisfactory results. In addition,
results that may have been affected by the non-conforming work should be
investigated and customers informed if the validity of corresponding
certificates/ reports is in doubt.
5.3 The corrective actions procedure may need to be followed to reveal the root
causes of some problems and to implement effective corrective actions.
5.4 The effectiveness of corrective actions should be checked by the quality
manager as soon as possible after the agreed time limit has elapsed and
clear/ close the non-conformity.
Dept./ Section to be audited JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC
HV Laboratory X X
Motors X
Transformers X
Domestic appliances X X
Activity to be audited JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC
Note: These are examples, the schedule may vary according to the size, scope, type and organisational
structure of the laboratory.
NC No. : Ref. to lab. documents & ISO / IEC 17025 Clause No.:
MANAGEMENT REVEIW
1. Objectives of Management Reviews
1.1 The top management of the laboratory shall periodically conduct a review of
the laboratory’s management system and testing and/ or calibration activities
to ensure their suitability and effectiveness and to introduce any necessary
changes or improvements.
1.2 Management reviews should be planned to establish what changes, if any,
are necessary to ensure that the management system for the laboratory
continue to meet both the laboratory’s needs and the requirements of ISO/
IEC 17025. Quality policy and objectives should be reviewed and revised if
necessary.
1.3 Management review should also take note of changes that have taken place
(or are expected to take place) in the organisation, facilities, equipment,
procedures and/ or activities of the laboratory and ensure (through quality
manager) that quality management system continues to conform to ISO/ IEC
17025.
1.4 The need for changes to the system may also arise as a result of findings
from internal or external quality audits, inter-laboratory comparisons or
proficiency tests, surveillance or reassessment visits by NABL, regulatory
bodies, complaints from customers or change in policies of NABL or APLAC/
ILAC.
2.1 The top management of the laboratory should be responsible for conducting
reviews of the management system.
2.2 Those members of top management having overall responsibility for the
design and implementation of the laboratory’s management system, and for
taking decisions resulting from the findings of internal audits, should be
involved in management reviews.
2.3 The quality manager should be responsible for ensuring that all reviews are
conducted in a systematic manner according to an established procedure,
and that the management review are recorded.
2.4 The quality manager should also be responsible for ensuring that any action
identified during a review is implemented within the agreed time limit.
3.1 Management reviews should be carried out at least once a year. The review
should be programmed and the meeting should be attended by the top
management, including the person under whose authority the quality manual
has been issued. It is essential that the head of the laboratory, technical
management, the quality manager and the section heads are present.
3.2 It is recognized that in a small laboratory, one person may be fulfilling more
than one of the above functions. Good management reviews can occur even
in single person laboratories.