Q-2 Types of Audits
Q-2 Types of Audits
First Party Audits- are conducted by, or on behalf of, the organisation itself for management
review and other internal purposes, and can form the basis for an organization’s declaration
of conformity. Independence can be demonstrated by the freedom from responsibility for
the activity being audited. (ISO 9000:2015 clause 3.13.1note 3). Carrying out first party
(internal audits) is a requirement set out in the ISO 9001:2015 standard clause 9.2.
Note 3 to Entry: Internal audits, sometimes called first-party audits, are conducted by, or on
behalf of, the organization (3.2.1) itself for management (3.3.3) review (3.11.2) and other
internal purposes, and can form the basis for an organization’s declaration of conformity.
Independence can be demonstrated by the freedom from responsibility for the activity being
audited.
9.2 Internal audit
9.2.1 The organization shall conduct internal audits at planned intervals to provide
information on whether the quality management system:
a) conforms to:
1) the organization’s own requirements for its quality management system;
2) the requirements of this International Standard;
b) is effectively implemented and maintained.
9.2.2 The organization shall:
a) plan, establish, implement and maintain an audit programme(s) including the frequency,
methods, responsibilities, planning requirements and reporting, which shall take into
consideration the importance of the processes concerned, changes affecting the
organization, and the results of previous audits;
b) define the audit criteria and scope for each audit;
c) select auditors and conduct audits to ensure objectivity and the impartiality of the audit
process;
d) ensure that the results of the audits are reported to relevant management;
e) take appropriate correction and corrective actions without undue delay;
f) retain documented information as evidence of the implementation of the audit
programme and the audit results.
Second Party Audits- Second party audits are conducted by parties having an interest in the
organisation, such as customers, or by other persons on their behalf. (ISO 9000:2015 clause
3.13.1 note 4)
Note 4 to entry: External audits include those generally called second and third-party audits.
Second party audits are conducted by parties having an interest in the organization, such as
customers
Third Party Audits- Third-party audits are conducted by external, independent auditing
organisations such as those providing certification/registration of conformity or
governmental agencies. (ISO 9000:2015 clause 3.13.1 note 4).
Note 4 to entry: External audits include those generally called second and third-party audits.
Second party audits are conducted by parties having an interest in the organization, such as
customers.