0% found this document useful (0 votes)
286 views150 pages

IMS ISO Auditing Tool

The ISO Integrated Management System Auditing Tool is a comprehensive template designed for auditing compliance with ISO 45001:2018, 14001:2015, and 9001:2015 standards. Key features include an integrated audit checklist, audit summary, action plans, and compliance dashboards. The tool simplifies the auditing and reporting process for organizations adhering to ISO standards.

Uploaded by

eng.ad.sallam
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
286 views150 pages

IMS ISO Auditing Tool

The ISO Integrated Management System Auditing Tool is a comprehensive template designed for auditing compliance with ISO 45001:2018, 14001:2015, and 9001:2015 standards. Key features include an integrated audit checklist, audit summary, action plans, and compliance dashboards. The tool simplifies the auditing and reporting process for organizations adhering to ISO standards.

Uploaded by

eng.ad.sallam
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
You are on page 1/ 150

ISO INTEGRATED MANAGEMENT SYSTEM AUDITING TOOL

ISO Integrated Management System Auditing Tool is a turnkey


template for conducting audit on Integrated Management System
in accordance with ISO 45001:2018, 14001:2015 and 9001:2015
standards.

⚙️Features include;

ISO Integrated Audit Checklist;


Audit Summary;
NC, CAPA & Action Plan;
Dashboard;
ISO IMS Compliance;
Compliance, NCs & OFIs;
Audit Findings;
Sub-Clauses Compliance

The integrated management system auditing and reporting in


accordance with ISO standards just got easier.

_x000D_ LIMITED SHARING


#
DITING TOOL

rnkey
t System CLICK HERE TO BEGIN
01:2015

ng in

Password to relevant sheets and workbook: sheqxelisoims

_x000D_ LIMITED SHARING


#
_x000D_ LIMITED SHARING
#
# Table of Content
1 Approved List Click Here

2 Audit Scoring Criteria Click Here

3 ISO Integrated Audit Checklist Click Here

4 Audit Summary Click Here

5 NC, CAPA & Action Plan Click Here

6 Dashboard Click Here

7 ISO IMS Compliance Status Click Here

8 Compliance, NCs & OFIs Click Here

9 Audit Findings Click Here

10 Sub-Clauses Compliance Status Click Here

11 Action Open vs Closed Click Here

_x000D_ LIMITED SHARING


#
APPROVED LIST
# Root Cause
Lack of Scope for QEHS Management System
Lack of Organizational Knowledge
Lack of Organizational Knowledge
Lack of Leadership and Commitment
Lack of Identification and Traceability
Lack of Documented Information
Lack of Customer Focus
Lack of Control of External Properties
Lack of Control of Design and Development Changes
Lack of Continual Improvement of QEHS System
Inadequately Determined Product and Services Requirements
Inadequate Support
Inadequate Review of Product and Services Requirements
Inadequate Quality Planning and Control
Inadequate Planning
Inadequate Organizational Context
Inadequate Operational Planning and Control
Inadequate Operational Planning and Control
Inadequate Monitoring and Measurement Resources
Inadequate Monitoring and Measurement
Inadequate Information with Service Providers
Inadequate External Control
Inadequate Evaluation
Inadequate Environmental Planning and Control
Inadequate Emergency Preparedness and Response
Inadequate Documented Information
Inadequate Design and Development Review
Inadequate Design and Development Planning
Inadequate Design and Development Output
Inadequate Design and Development Input
Inadequate Design and Development Control
Inadequate Control of Production and Service Provision
Inadequate Control of Nonconforming Products and Services
Inadequate Control of External Providers
Inadequate Consultation and Particpation
Inadequate Communication with External Providers

_x000D_ LIMITED SHARING


#
Action Priority Action Status
High Open
Medium Closed
Low

_x000D_ LIMITED SHARING


#
Audit Scoring Crit
Finding Definition/Impact
Compliant means adherence with the requirements of the standard
Complian
and the H&SMS. The process is implemented and documented and
t
records exist to verify this.
A low risk issue that offers an opportunity to improve current
practice. Processes may cumbersome or overly complex but meet
OFI
their targets and objectives. Unresolved OFIs may degrade over time
to become non-compliant.
A medium risk, minor non-conformance resulting in deviation from
Minor NC process practice not likely to result in the failure of the management
system or result in an incident
A high risk, major non-conformance which directly impacts on
Major NC effectiveness of the management system and likely to result in an
incident.

_x000D_ LIMITED SHARING


#
Audit Scoring Criteria
Score Action/Mitigation

100% Continue to monitor trends/indicators.

Not Review and implement actions to improve the process(s). Monitor


Scored trends/indicators to determine if improvement was achieved.

Investigate root cause(s) and implement corrective action by next


50%
reporting period or next scheduled audit.

Implement immediate containment action, investigate root cause(s)


0%
and apply corrective action. Re-audit in 4 weeks to verify correction.

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


4.1 4. Context Understanding the organization and its context 0 2 0 0
Defining internal and external issues relevant
Has your organization determined external and internal issues relevant to its purpose to organization's purpose and the strategic
There is no evidence on SWOT and PESTEL
4.1q1 4. Context Q E HS and its strategic direction that affect its ability to achieve the intended result(s) of its direction and clarification of the strategic aims x
Analysis
IMS? of the organization and determin any issues
couls affect these aims being acgieved
Does your organization monitor and review information about these external and internal Monitoring and reviewing information about There is no evidence on SWOT and PESTEL
4.1q2 4. Context Q E HS x
issues? these external and internal issues Analysis Registers
4.2 4. Context Understanding the needs and expectation of workers and other interested parties 0 4 0 0
Completeing and documenting stakeholder
Has your organization determined the interested parties and workers that are relevant to
4.2q3a 4. Context Q E HS analysis to determine key stakeholders whom x Existing but not approved
the IMS?
have an impact on therequirements of the IMS

Has your organization determined the needs and expectations of these interested parties Considering stakeholders’ expectations for
4.2q3b 4. Context Q E HS x Existing but not approved
and workers that are relevant to the IMS? incorporation into the IMS

Determining which of these needs and


Has your organization determined which of these needs and expectations could become
4.2q3c 4. Context Q E HS expectations could become legal requirement x Existing but not approved
legal requirement and other requirement?
and other requirement
Monitor and reviewing information about
How do you monitor and review information about these interested parties and their
4.2q4 4. Context Q E HS these interested parties and their relevant x Existing but not approved
relevant needs and expectations?
needs and expectations
4.3 4. Context Determining the scope of the management system 0 10 0 0
Has the organization determined the boundaries and applicability of the IMS to establish Determining the boundaries and applicability
4.3q5 4. Context Q E HS x
its scope? of the IMS to establish its scope
When determining this scope, has your organization considered the external and internal Considering the external and internal issues in
4.3q6a 4. Context Q E HS x
issues referred to in 4.1? the scope statement
When determining this scope, has your organization considered the requirements of Considering the requirements of relevant
4.3q6b 4. Context Q E HS x
relevant interested parties referred to in 4.2? interested parties in the scope statement
When determining this scope, has the organization taken into account all relevant Takening into account all relevant products,
4.3q6c 4. Context Q E HS products, services and work-related activities, functions and physical boundaries to the services and work-related activities, functions x
IMS? and physical boundaries to the IMS
When determining this scope, has your organization considered its activities, products,
services and work-related activities and related product lifecycles, such as:

1. Raw material acquisition; considering activities, services and work-


4.3q7 4. Context Q E HS 2. Manufacture; related activities and related product x
3. Packaging/Transport/Delivery; lifecycles
4. Use; IMS Scope Statement is idntfied in IMS Manua,
5. End of life treatment; but not approved
6. Final disposal.
considering activities, and services over which
has your organization considered its activities, products and services over which it has
4.3q8 4. Context Q it has the authority and to exercise control x
the authority and to exercise control and influence?
and influence
Stating all the requirements of ISO 9001:2015,
Has your organization applied all the requirements of ISO 9001:2015, ISO 14001:2015 ISO 14001:2015 and ISO 45001:2018 if they
4.3q9 4. Context Q E HS x
and ISO 45001:2018 if they are applicable within the determined scope of the IMS? are applicable within the determined scope of
the IMS the types of products and services
stating
Does the scope state the types of products and services covered, and provide covered, and provide justification for any
4.3q10 4. Context Q justification for any requirement of ISO 9001:2015 that your organization determines is requirement of ISO 9001:2015 that your x
not applicable to the scope of its IMS? organization determines is not applicable to
the scope of its IMS
considering and documenting ability and
When determining scope, has your organization considered and documented its ability
4.3q11 4. Context E HS authority to control and influence factors x
and authority to control and influence factors relating to external and internal issues?
relating to external and internal issues
Is the scope of your organization’s IMS available and maintained as documented
4.3q12 4. Context Q E HS Scope Statement x
information and available to interested parties and workers? (See 7.5.1a)
4.4 4. Context Integrated Management System 12 1 0 0

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


establishing, implementing, maintaining and
Has your organization established, implemented, maintained and continually improved continually improving the processes needed
4.4q13 4. Context Q E HS its IMS, including the processes needed and their interactions, in accordance with the and their interactions, in accordance with the x Process Maps and interactions are not approved
requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018? requirements of ISO 9001:2015, ISO
14001:2015 and ISO 45001:2018
Has your organization considered the knowledge and information obtained by 4.1 and Obtaining information by 4.1 and 4.2 when
4.4q14 4. Context Q E HS x Process Maps and interactions are not approved
4.2 when implementing and operating it IMS? implementing and operating it IMS
Determining the process required for the IMS,
Has your organization determined the process required for the IMS, including their
including their interactions, in accordance with
4.4q15 4. Context Q E HS interactions, in accordance with requirements and their application throughout the x Process Maps & Intercations are not approved
requirements and their application throughout
organization?
the organization
Has your organization determined the inputs required and the outputs expected from Determining the inputs required and the Process Approach (ex. SIPOC Model) is not
4.4q16 4. Context Q x
these processes? outputs expected from these processes existing
Determining the sequence and interaction of
4.4q17 4. Context Q Has your organization determined the sequence and interaction of these processes? x Process Maps & Intercations are not approved
these processes
Determining and appling the criteria and
Has your organization determined and applied the criteria and methods (including methods (including monitoring, Processes are not approved, there are no criteria
4.4q18 4. Context Q monitoring, measurements and related performance indicators) needed to ensure the measurements and related performance x for the processes
effective operation and control of these processes? indicators) needed to ensure the effective Objectives of Each Process are not determined
operation and control of these processes
Resources Allocation:-
*Human Resources are defined in staff
Has your organization determined the resources needed for these processes and ensure Determining the resources needed for these
4.4q19 4. Context Q x management plan
their availability? processes and ensure their availability
*Physical Resources are determined in the asset
management plan
There is no evidence on assining responsibilities
Assigning responsibilities and authorities for
4.4q20 4. Context Q Has your organization assigned responsibilities and authorities for these processes? x and authorities for these processes. RACI Matrix
these processes
would be a best practice for this requirement
Addressing the risks and opportunities as
Has your organization addressed the risks and opportunities as determined in
4.4q21 4. Context Q determined in accordance with the x Processes Risks and Opportunities Analysis
accordance with the requirements of 6.1?
requirements *There is no evidence on evaluting processes
Evaluating these processes and implementing
Has your organization evaluated these processes and implement any changes needed to *Internal Audit is on going
4.4q22 4. Context Q any changes needed to ensure that these x
ensure that these processes achieve their intended results? *There is no set objectives and targets for
processes achieve their intended results
processes
There is no evidence on processes improvement
4.4q23 4. Context Q Does your organization improve the processes and the IMS? Improving the processes and the IMS x
pan
To the extent necessary, does your organization maintain documented information to
4.4q24 4. Context Q Procedures for Mapped Processes x
support the operation of its processes?
IMS Documents (Ongoing Process)
To the extent necessary, does your organization retain documented information to have
4.4q25 4. Context Q Records on Mapped Processes x
confidence that the processes are being carried out as planned?
5 5. Leadership Leadership, Commitment and Worker Participation
5.1 5. Leadership Leadership and Commitment
5.1.1 5. Leadership General 3 11 0 0
Strategic action plan is ongoing
Does Top Management demonstrated leadership and commitment to the IMS by taking Taking accountability for the effectiveness of There is no evidence on Management Review
5.1.1q1a 5. Leadership Q E HS x
accountability for the effectiveness of your organization’s IMS? your organization’s IMS No Dashborads available
No MoM for the required meetings
Ensuring that QHSE policies and objectives are
Does Top Management demonstrated leadership and commitment to the IMS by *Quality policy is unapproved
established and documented, and are
5.1.1q1b 5. Leadership Q E HS ensuring that QHSE policies and objectives are established and documented, and are x *HSE plocy is approved
compatible your organization’s goals (See 6.2)
compatible your organization’s goals (See 6.2) and its context (See 4.0)? *QHSE Objectives are not defined
and its context (See 4.0
Does Top Management demonstrated leadership and commitment to the IMS by ensuring that QEHS requirements are Processes Mapping and Interactions are not
5.1.1q1c 5. Leadership Q E HS x
ensuring that QEHS requirements are integrated into your organization’s processes? integrated into your organization’s processes approved
Processes Mapping (SIPOC) and SWOT Analysis
for each Key Function (Department) are not
Does Top management demonstrate leadership and commitment with respect to the IMS Promoting the use of the process approach
5.1.1q1d 5. Leadership Q x approved
by promoting the use of the process approach and risk-based thinking? and risk-based thinking
Departmental risk,Corporate risk,hazard log,risk
register

Resources Allocation:-
*Human Resources are defined in staff
Has Top Management demonstrated leadership and commitment to the IMS by ensuring ensuring that your organization has the
5.1.1q1e 5. Leadership Q E HS x management plan and Safety critical staff
that your organization has the required resources to implement it? required resources to implement it
*Physical Resources are determined in the asset
management plan

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


1-Training and awarness sessions are being
communicating the importance of effective
Does top management communicate the importance of effective quality, environmental conducting but there is no plan or schadule as an
quality, environmental and health and safety
5.1.1q1f 5. Leadership Q E HS and health and safety management and of conforming to the QEHS management x evidence
management and of conforming to the QEHS
requirements? 2-Safety bulletins
management requirements
3-Safety meeting (monthly)
Management Reviews are not implemented
ensuring that the IMS achieves its intended
5.1.1q1g 5. Leadership Q E HS Does Top management ensure that the IMS achieves its intended results? x Monthly Data reviews are recorded in monthly
results
reports
1-Training and awarness sessions are being
Does Top management demonstrate leadership and commitment with respect to the IMS
engaging, directing and supporting persons to conducting but there is no plan or schadule as an
5.1.1q1h 5. Leadership Q E HS by engaging, directing and supporting persons to contribute to the effectiveness of the x
contribute to the effectiveness of the IMS evidence
IMS?
Improvement Plan and Programs (eg. Lean Six
Does Top management demonstrate leadership and commitment with respect to the IMS Sigma, Kizen, 5S,….)
5.1.1q1i 5. Leadership Q E HS promoting improvement x
by promoting improvement? 5S project is being implemented but other
improvement rrequirements are not fulfilled
*Monthly meetings of progress review are being
Does Top management demonstrate leadership and commitment with respect to the IMS supporting other relevant management roles
conducting
5.1.1q1j 5. Leadership Q E HS by supporting other relevant management roles to demonstrate their leadership as it to demonstrate their leadership as it applies x
*HSE Committee Meetinds are not conducted
applies to their areas of responsibility? to their areas of responsibility
*Management Review Meetings are not being run

Does top management develop, lead, and promote a culture in the organization that promoting a culture in the organization that There is no evidence on Communication
5.1.1q1k 5. Leadership HS x
supports the intended outcomes of the IMS? supports the intended outcomes of the IMS Participation and Consultation Process

* Incident Investigation and Reporting Procedure


protecting workers from reprisals when
Does top management protect workers from reprisals when reporting incidents, hazards, is unapproved
5.1.1q1l 5. Leadership HS reporting incidents, hazards, risks and x
risks and opportunities? - Hazard Log Review is approved
opportunities
- Risk Register is unapproved

ensuring that the organization establishes and * There is no evidence on Communication


Does top management ensure that the organization establishes and implements a
5.1.1q1m 5. Leadership HS implements a process(es) for consultation and x Participation and Consultation Process
process(es) for consultation and participation of workers (see 5.4)?
participation of workers * Safety Committee is not implemented
* RQHSE Organization Chart is complete
Does top management support the establishment and functioning of health and safety establishment and functioning of health and there is no evidence on HSE Committee meetings
5.1.1q1nn 5. Leadership HS x
committees, [see 5.4 e) 1]? safety committees and actions as HSE Committee is the best
practice to fulfill this requirement
5.1.2 5. Leadership Customer Focus 3 0 0 0

There is no evidence on listing customer,


Does Top management demonstrate leadership and commitment with respect to ensuring that customer and applicable
statutory and regulatory requirements to be
5.1.2q2 5. Leadership Q customer focus by ensuring that customer and applicable statutory and regulatory statutory and regulatory requirements are x
reviewed eg. Legal and other requirements
requirements are determined, understood and consistently met? determined, understood and consistently met
register- customer feedback)

Does Top management demonstrate leadership and commitment with respect to ensuring that the risks and opportunities that
customer focus by ensuring that the risks and opportunities that can affect conformity of can affect conformity of products and services there is no evidence on this requirement as
5.1.2q3 5. Leadership Q x
products and services and the ability to enhance customer satisfaction are determined and the ability to enhance customer SWOT Analysis Register
and addressed? satisfaction are determined and addressed
* Customer Satisfaction and feedback surveys are
Does Top management demonstrate leadership and commitment with respect to Procedure for Measuring Customer
being conducted.
5.1.2q4 5. Leadership Q customer focus by ensuring that the focus on enhancing customer satisfaction is Satisfaction, Customer Satisfaction Index and x
* Dashboards are not completed
maintained? Customer Satisfaction Questionnaires
* Strategic action plan is implemeted
5.2 5. Leadership Management System Policy
5.2.1 5. Leadership Developing the Policy 0 6 0 0
Policy Statement including the nature, scale,
Has top management established, implemented and maintained QEHS policy that is and environmental impacts of its activitities,
appropriate to the purpose and organizational context and support its strategic direction; products or services, including a commitment
HSE Policy is approved and fulfills the
including the nature, scale, and environmental impacts of its activitities, products or to provide safe and healthy working conditions
5.2q1a 5. Leadership Q E HS x requirement but Quality Policy is unapproved
services, including a commitment to provide safe and healthy working conditions to to prevent work-related injury and ill health
IMS Policy has been drafted
prevent work-related injury and ill health and is appropriate to the purpose and specific and is appropriate to the purpose and specific
to the nature of our OH&S risks and OH&S opportunities to the nature of our OH&S risks and OH&S
opportunities

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Policy Statement providing a framework for
Has top management established, implemented and maintained quality, environmental HSE Policy is approved and fulfills the
5.2q1b 5. Leadership Q E HS setting the QEHS objectives x
and health and safety policy that provides a framework for setting the QEHS objectives? requirement but Quality Policy is unapproved
Objectives on the IMS/PLan
Policy Statement includes a commitment to
Has top management established, implemented and maintained a QEHS policy that HSE Policy is approved and fulfills the
5.2q1c 5. Leadership Q E HS fulfil legal requirements and other x
includes a commitment to fulfil legal requirements and other requirements? requirement but Quality Policy is unapproved
requirements
Has top management established, implemented and maintained a QEHS policy that Policy Statement includes a commitment to
HSE Policy is approved and fulfills the
5.2q1d/e 5. Leadership Q E HS includes a commitment to protect the environment, prevent pollution, eliminate hazards protect the environment, prevent pollution, x
requirement but Quality Policy is unapproved
and reduce OH&S risks (see 8.1.2)? eliminate hazards and reduce OH&S risks
Has top management established, implemented and maintained an QEHS policy that Policy Statement includes a commitment to HSE Policy is approved and fulfills the
5.2q1f 5. Leadership Q E HS x
includes a commitment to continual improvement of the IMS? continual improvement of the IMS requirement but Quality Policy is unapproved
Has top management established, implemented and maintained an OH&S policy that Policy Statement includes a commitment to
HSE Policy is approved and fulfills the
5.2q1g 5. Leadership Q E HS includes a commitment to consultation and participation of workers, and , where they consultation and participation of workers, x
requirement but Quality Policy is unapproved
exist workers representative? and , where they exist workers representative
5.2.2 5. Leadership Communicating the Policy 0 4 0 0
HSE Policy is approved and fulfills the
5.2.2q1a 5. Leadership Q E HS Is the QEHS policy available as documented information? Availability of QEHS policy x
requirement but Quality Policy is unapproved
Communicating QEHS policy within the HSE Policy is approved and fulfills the
5.2.2q1b 5. Leadership Q E HS Is the QEHS policy communicated within the organization? organization x requirement as it is Hanged on Walls, Published
orientation form for new comers on Website but Quality Policy is unapproved
HSE Policy is approved and fulfills the
Availability of QEHS policy to interested
5.2.2q1c 5. Leadership Q E HS Is the QEHS policy available to interested parties, as appropriate? x requirement as it is Hanged on Walls, Published
parties
on Website but Quality Policy is unapproved
*HSE Policy satatement is signed
5.2.2q1d 5. Leadership Q E HS Is the QEHS policy relevant and appropriate? Relevancy and appropriatness of QHSE Policy x
*Quality Policy is unapproved
5.3 5. Leadership Organizational Roles, Responsibilities and Authorities 7 0 0 0
Does top management ensure that the responsibilities and authorities for relevant roles Organization Chart is unapproved and job
Organization Chart, Job Description
5.3q1 5. Leadership Q E HS within the IMS are assigned and communicated at all levels within the organization and x descriptions and acknowledgement forms are not
Acknowledgement
maintained as documented information? activated
workers at each level of the organization Organization Chart is unapproved and job
Do workers at each level of the organization assume responsibility for those aspects of
5.3q2 5. Leadership Q E HS aware of responsibility for those aspects of the x descriptions acknowledgement forms are not
the IMS over which they have control?
IMS over which they have control activated
assigning the responsibility and authority for
Organization Chart is unapproved and job
Does top management assign the responsibility and authority for ensuring that the IMS ensuring that the IMS conforms to the
5.3q3 5. Leadership Q E HS x descriptions acknowledgement forms are not
conforms to the requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018? requirements of ISO 9001:2015, ISO
activated
14001:2015 and ISO 45001:2018
ssigning the responsibility and authority for Organization Chart is unapproved and job
Does Top management assigned the responsibility and authority for ensuring that the
5.3q4 5. Leadership Q ensuring that the processes are delivering x descriptions acknowledgement forms are not
processes are delivering their intended outputs?
their intended outputs activated
assigning the responsibility and authority for Organization Chart is unapproved and job
Does top management assign the responsibility and authority for reporting on the
5.3q5 5. Leadership Q E HS reporting on the performance of the IMS to top x descriptions acknowledgement forms are not
performance of the IMS to top management?
management activated
assigning the responsibility and authority for Organization Chart is unapproved and job
Does Top management assign the responsibility and authority for ensuring the promotion
5.3q6 5. Leadership Q ensuring the promotion of customer focus x descriptions acknowledgement forms are not
of customer focus throughout your organization?
throughout your organization activated
Organization Chart is unapproved and job
Does Top management assign the responsibility and authority for ensuring that the Organization Chart Job Description
5.3q7 5. Leadership Q E HS x descriptions acknowledgement forms are not
integrity of the IMS is maintained when changes to it planned and implemented? Acknowledgement
activated
5.4 5. Leadership Consultation and Participation of Workers and Contractors 20 0 0 0
Has your organization established, implemented and maintained a process(es) for
Communication, Participation and
consultation and participation of workers at all applicable levels and functions, and, There is no Communication, Participation and
5.4q8 5. Leadership HS Consultation Procedure x
where they exist, workers’ representatives, in the development, planning, Consultation Procedure
Safety Committee
implementation, performance evaluation and actions for improvement of the IMS?
providing mechanisms, time, training and Consultation and participation process, and
Has your organization provided mechanisms, time, training and resources necessary for
5.4q9a 5. Leadership HS resources necessary for consultation and x Awarness Sessions are not existing eg.
consultation and participation?
participation Participating in safety committee meetings
Provided timely access to clear, Consultation and participation process, and
Has your organization provided timely access to clear, understandable and relevant
5.4q9b 5. Leadership HS understandable and relevant information x Awarness Sessions are not existing eg.
information about the IMS?
about the IMS Participating in safety committee meetings
determining and removing obstacles or Consultation and participation process, and
Has your organization determined and removed obstacles or barriers to participation and
5.4q10c 5. Leadership HS barriers to participation and minimize those x Awarness Sessions are not existing eg.
minimize those that cannot be removed?
that cannot be removed Participating in safety committee meetings

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


emphasizing the consultation of non-
Has your organization emphasized the consultation of non-managerial workers on There is no evidence on Workers Participation in
5.4q11d1 5. Leadership HS managerial workers on determining the needs x
determining the needs and expectations of interested parties? (see 4.2) Stakeholder Analysis (Surveys)
and expectations of interested parties
emphasizing the consultation of non-
Has your organization emphasized the consultation of non-managerial workers on There is no evidence on Workers Participation in
5.4q11d2 5. Leadership HS managerial workers on establishing the QEHS x
establishing the QEHS policy? (see 5.2) policy reviews (Surveys)
policy
emphasizing the consultation of non-
Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on managerial workers on assigning
5.4q11d3 5. Leadership HS x Awarness Sessions are not existing eg.
assigning organizational roles, responsibilities and authorities, as applicable? (see 5.3) organizational roles, responsibilities and
Participating in safety committee meetings
authorities,
emphasizingasthe
applicable
consultation of non-
Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on managerial workers on determining how to
5.4q11d4 5. Leadership HS x Awarness Sessions are not existing eg.
determining how to fulfil legal requirements and other requirements? (see 6.1.3) fulfil legal requirements and other
Participating in safety committee meetings
requirements
emphasizing the consultation of non- Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on
5.4q11d5 5. Leadership HS managerial workers on establishing QEHS x Awarness Sessions are not existing eg.
establishing QEHS objectives and planning to achieve them? (see 6.2)
objectives and planning to achieve them Participating in safety committee meetings
emphasizing the consultation of non-
Has your organization emphasized the consultation of non-managerial workers on Consultation and participation process, and
managerial workers on determining applicable
5.4q11d6 5. Leadership HS determining applicable controls for outsourcing, procurement and contractors? (see x Awarness Sessions are not existing eg.
controls for outsourcing, procurement and
8.1.4) Participating in safety committee meetings
contractors
emphasizing the consultation of non-
Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on managerial workers on determining what
5.4q11d7 5. Leadership HS x Awarness Sessions are not existing eg.
determining what needs to be monitored, measured and evaluated? (see 9.1) needs to be monitored, measured and
Participating in safety committee meetings(MOM)
evaluated
Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on Communication Participation and Consultation
5.4q11d8 5. Leadership HS x Awarness Sessions are not existing eg.
establishing, implementing and maintaining an audit programme(s)? (see 9.2.2) Procedure
Participating in safety committee meetings
emphasizing the consultation of non- Consultation and participation process, and
Has your organization emphasized the consultation of non-managerial workers on
5.4q11d9 5. Leadership HS managerial workers on ensuring continual x Awarness Sessions are not existing eg.
ensuring continual improvement? (see 10.3)
improvement Participating in safety committee meetings
emphasizing the participation non-managerial Consultation and participation process, and
Has your organization emphasized the participation non-managerial workers in
5.4q12e1 5. Leadership HS workers in determining the mechanisms for x Awarness Sessions are not existing eg.
determining the mechanisms for their consultation and participation?
their consultation and participation Participating in safety committee meetings
emphasizing the participation non-managerial
Has your organization emphasized the participation non-managerial workers in MOM of doing risk Rigester and Dynamic Risk
5.4q12e2 5. Leadership HS workers in identifying hazards and assessing x
identifying hazards and assessing risks and opportunities? (see 6.1.1 and 6.1.2) Assessment
risks and opportunities
emphasizing the participation non-managerial
Has your organization emphasized the participation non-managerial workers in MOM of doing risk Rigester and Dynamic Risk
5.4q12e3 5. Leadership HS workers in determining actions to eliminate x
determining actions to eliminate hazards and reduce OH&S risks? (see 6.1.4) Assessment
hazards and reduce OH&S risks
emphasizing the participation non-managerial
Has your organization emphasized the participation non-managerial workers in there is no evidence on Workers survey on
workers in determining competence
5.4q12e4 5. Leadership HS determining competence requirements, training needs, training and evaluating training? x training needs
requirements, training needs, training and
(see 7.2) Annual Appraisal (Recommend Training Needs)
evaluating training
emphasizing the participation non-managerial
Has your organization emphasized the participation non-managerial workers in
5.4q12e5 5. Leadership HS workers in determining what needs to be x Leading and Lagging Indicators Signs (Tablues)
determining what needs to be communicated and how this will be done? (see 7.4)
communicated and how this will be done
Has your organization emphasized the participation non-managerial workers in emphasizing the participation non-managerial Consultation and participation process, and
5.4q12e6 5. Leadership HS determining control measures and their effective implementation and use? (see 8.1, workers in determining control measures and x Awarness Sessions are not existing eg.
8.1.3 and 8.2) their effective implementation and use Participating in safety committee meetings
emphasizing the participation non-managerial
Has your organization emphasized the participation non-managerial workers in
workers in investigating incidents and
5.4q12e7 5. Leadership HS investigating incidents and nonconformities and determining corrective actions? (see x Incident Investigation and Reporting Procedure
nonconformities and determining corrective
10.2)
actions
6 6. Planning Planning
6.1 6. Planning General
6.1.1 6. Planning Actions to Address Risks and Opportunities 20 0 0 0
Has your organization established, implemented and maintained the processes needed
Procedure for Addressing Risks and
6.1.1q1 6. Planning Q to meet the requirements for addressing risk and opportunities 6.1.1 and planning action x There is no evidence on this requirement
Opportunities
6.1.4?
considering the issues referred to in 4.1
Has the organization considered the issues referred to in 4.1 (context), the requirements (context), the requirements referred to in 4.2 Adressing Risks and opportunities process is not
6.1.1q1 6. Planning Q E HS x
referred to in 4.2 (interested parties) and 4.3 (the scope of its IMS)? (interested parties) and 4.3 (the scope of its defined as risk management plan is not approved
IMS)
determining the risks and opportunities that
Has the organization determined the risks and opportunities that need to be addressed There is no evidence on tackling risks and
6.1.1q2a 6. Planning Q E HS need to be addressed to give assurance that x
to give assurance that the IMS can achieve its intended outcome(s)? opportunities
the IMS can achieve its intended outcome

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


determining the risks and opportunities that
Has the organization determined the risks and opportunities that need to be addressed need to be addressed to prevent, or reduce, Adressing Risks and opportunities process is not
6.1.1q2b 6. Planning Q E HS to prevent, or reduce, undesired effects including the potential for external undesired effects including the potential for x defined and There is no evidence on tackling
environmental conditions to affect the organization? external environmental conditions to affect risks and opportunities
the organization
determining the risks and opportunities that Adressing Risks and opportunities process is not
Has the organization determined the risks and opportunities that need to be addressed
6.1.1q2c 6. Planning Q E HS need to be addressed to achieve continual x defined and There is no evidence on tackling risks
to achieve continual improvement?
improvement and opportunities
When determining the risks and opportunities for the IMS and its intended outcomes that
There is no evidence on defining environmental
6.1.1q3 6. Planning E HS need to be addressed, does the organization take into account environmental aspects taking into account environmental aspects x
aspects and tackling risks and opportunities
(See 6.1.2) and hazards (See 6.1.2.1)
When determining the risks and opportunities for the IMS and its intended outcomes that Adressing Risks and opportunities process is not
6.1.1q4 6. Planning HS need to be addressed, does the organization take into account OH&S risks and other taking into account OH&S risks and other risks x defined and There is no evidence on tackling risks
risks (see 6.1.2.2)? and opportunities
When determining the risks and opportunities for the IMS and its intended outcomes that Adressing Risks and opportunities process is not
taking into account OH&S opportunities and
6.1.1q5 6. Planning HS need to be addressed, does the organization take into account OH&S opportunities and x defined and There is no evidence on tackling risks
other opportunities
other opportunities (see 6.1.2.3)? and opportunities
When determining the risks and opportunities for the IMS and its intended outcomes that Adressing Risks and opportunities process is not
taking into account legal requirements and
6.1.1q6 6. Planning HS need to be addressed, does the organization take into account legal requirements and x defined and There is no evidence on tackling risks
other requirements
other requirements (see 6.1.3)? ans opportunities
Adressing Risks and opportunities process is not
determine and assess the risks and
In its planning process(es), does the organization determine and assess the risks and defined and There is no evidence on tackling
6.1.1q7 6. Planning HS opportunities associated with changes in the x
opportunities associated with changes in the organization, its processes or the IMS? risks and opportunities and legal and other
organization, its processes or the IMS
requirements register
Adressing Risks and opportunities process is not
In the case of planned changes, permanent or temporary, will this assessment be assessment be undertaken before the change
6.1.1q8 6. Planning HS x defined and There is no evidence on tackling risks
undertaken before the change is implemented (see 8.1.3)? is implemented
ans opportunities and change assessment
determining potential emergency situations, There is no evidence on determining
Does the scope of the IMS demonstrate how the organization has determined potential
6.1.1q9 6. Planning E including those which might have an x environmental impacts and its related emergency
emergency situations, including those which might have an environmental impact?
environmental impact
ensuring the action taken to address risks and situations
Adressing Risks and opportunities process is not
Does your organization ensure the action taken to address risks and opportunities is opportunities is proportionate to the potential
6.1.1q10 6. Planning E HS x defined and There is no evidence on tackling risks
proportionate to the potential impacts on the conformity of products and services? impacts on the conformity of products and
and opportunities
services
Does the organization maintain documented information on risks and opportunities that Procedure for Addressing Risks and
6.1.1q11 6. Planning E HS x There is no evidence on this requirement
must be addressed? Opportunities
Has your organization maintained documented information of the processes needed in Procedure for Addressing Risks and
6.1.1q12 6. Planning E HS x There is no evidence on this requirement
6.1.1 to 6.1.4, to the extent that they can be carried out as planned? Opportunities
determining and assessing the risks and
The organization, in its planning process(es), shall determine and assess the risks and opportunities that are relevant to the intended
Adressing Risks and opportunities process is not
opportunities that are relevant to the intended outcomes of the OH&S management outcomes of the OH&S management system
6.1.1q13 6. Planning HS x defined and There is no evidence on tackling risks
system associated with changes in the organization, its processes or the OH&S associated with changes in the organization,
ans opportunities and change assessment
management system. its processes or the OH&S management
system
Adressing Risks and opportunities process is not
In the case of planned changes, permanent or temporary, this assessment shall be assessment shall be undertaken before the
6.1.1q14 6. Planning HS x defined and There is no evidence on tackling risks
undertaken before the change is implemented (see 8.1.3). change is implemented
ans opportunities and change assessment
Adressing Risks and opportunities process is not
planning actions to address risks and
6.1.1q15 6. Planning Q Does your organization plan actions to address risks and opportunities? x defined and There is no evidence on tackling risks
opportunities
ans opportunities
Adressing Risks and opportunities process is not
Does your organization plan actions to integrate and implement the actions into IMS planning actions to integrate and implement
6.1.1q16 6. Planning Q x defined and There is no evidence on tackling risks
processes? the actions into IMS processes
ans opportunities
Adressing Risks and opportunities process is not
defined and There is no evidence on tackling risks
ensuring the action taken to address risks and
ans opportunities but there is an audit plan being
Does your organization ensure the action taken to address risks and opportunities is opportunities is proportionate to the potential
6.1.1q17 6. Planning Q x run to ensures the action taken to address risks
proportionate to the potential impacts on the conformity of products and services? impacts on the conformity of products and
and opportunities is proportionate to the potential
services
impacts on the conformity of products and
services
6.1.2a 6. Planning Environmental Aspects 2 5 0 0
Determining the environmental aspects of the
When planning for the scope of the IMS, has your organization determined the
activities, products and services that it
environmental aspects of the activities, products and services that it controls and can There is no evidence on the identification of
6.1.2aq18 6. Planning E controls and can influence, and their x
influence, and their associated environmental impacts when considering the product environmental aspects
associated environmental impacts when
lifecycle?
considering the product lifecycle

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


taking into account potential change,
When determining applicable environmental aspects, has your organization taken into
including planned or new developments, and
6.1.2aq19 6. Planning E account potential change, including planned or new developments, and new or modified x Change process is not existing
new or modified activities, products and
activities, products and services?
When determining applicable environmental aspects, has your organization taken into services
Taking into account potential abnormal Emergency Response Plan fulfills this
6.1.2aq20 6. Planning E account potential abnormal conditions and reasonably foreseeable emergency conditions and reasonably foreseeable x requirement but there are no environmental
situations? emergency situations emergency scenarios
determining e aspects that may/pose a There is no evidence on the identification of
Has your organization determined those aspects that may pose a significant
6.1.2aq21 6. Planning E significant environmental impact by using x environmental aspects and impacts assessment
environmental impact by using established assessment criteria?
established assessment criteria process
communicating aspects that may/pose a
Has your organization communicated those aspects that may/pose a significant significant environmental impact throughout There is no evidence on environmental training
6.1.2aq22 6. Planning E x
environmental impact throughout the various levels and functions of our organization? the various levels and functions of sessions
organization Procedure for Environmental Aspects and
Does your organization maintain documented information regarding its environmental Procedure for Environmental Aspects
6.1.2aq23 6. Planning E x Environmental Impacts assessment procedure
aspects and associated impacts? Environmental Impacts assessment procedure
are not existing
Does your organization maintain documented information regarding its significant Procedure for Environmental Aspects is not
6.1.2aq24 6. Planning E Procedure for Environmental Aspects x
environmental aspects? existing
6.1.2b 6. Planning Hazards identification and assessment of risks and opportunities
6.1.2b.1 6. Planning Hazard identification 15 1 0 0
Has the organization established, implemented and maintained a process(es) for Procedure for Addressing Risks and
6.1.2b1q11 6. Planning HS x
hazard identification that is ongoing and proactive? Opportunities and OH&S Hazards
taking into account how work is organized,
Do the process(es) take into account how work is organized, social factors (including
6.1.2b.1q1 social factors (including workload, work hours,
6. Planning HS workload, work hours, victimization, harassment and bullying), leadership and the culture x
2a victimization, harassment and bullying),
in the organization?
leadership and the culture in the organization
taking into account routine and non-routine
Do the process(es) take into account routine and non-routine activities and situations, activities and situations, including hazards
6.1.2b.1q1
6. Planning HS including hazards arising from infrastructure, equipment, materials, substances and the arising from infrastructure, equipment, x
2b1
physical conditions of the workplace? materials, substances and the physical
conditions of the workplace
taking into account routine and non-routine
activities and situations, including hazards
Do the process(es) take into account routine and non-routine activities and situations,
6.1.2b.1q1 arising from product and service design,
6. Planning HS including hazards arising from product and service design, research, development, x
2b2 research, development, testing, production,
testing, production, assembly, construction, service delivery, maintenance and disposal?
assembly, construction, service delivery,
maintenance and disposal
taking into account routine and non-routine
6.1.2b.1q1 Do the process(es) take into account routine and non-routine activities and situations,
6. Planning HS activities and situations, including hazards x
2b3 including hazards arising from human factors?
arising from human factors
taking into account routine and non-routine
6.1.2b.1q1 Do the process(es) take into account routine and non-routine activities and situations,
6. Planning HS activities and situations, including hazards x
2b4 including hazards arising from how the work is performed?
arising from how the work is performed
taking into account past relevant incidents,
6.1.2b.1q1 Do the process(es) take into account past relevant incidents, internal or external to the
6. Planning HS internal or external to the organization, x
2c organization, including emergencies, and their causes?
including emergencies, and their causes
6.1.2b.1q1 taking into account potential emergency
6. Planning HS Do the process(es) take into account potential emergency situations? x
2d situations
taking into account people, including
Do the process(es) take into account people, including consideration of those with access consideration of those with access to the
6.1.2b.1q1
6. Planning HS to the workplace and their activities, including workers, contractors, visitors and other workplace and their activities, including x
2e1
persons? workers, contractors, visitors and other
persons
taking into account people, including
6.1.2b.1q1 Do the process(es) take into account people, including consideration of those in the consideration of those in the vicinity of the
6. Planning HS x
2e2 vicinity of the workplace who can be affected by the activities of the organization? workplace who can be affected by the
activities of the organization
taking into account people, including
6.1.2b.1q1 Do the process(es) take into account people, including consideration of workers at a
6. Planning HS consideration of workers at a location not x
2e3 location not under the direct control of our organization?
under the direct control of our organization
taking into account other issues, including
Do the process(es) take into account other issues, including consideration of the design consideration of the design of work areas,
6.1.2b.1q1 of work areas, processes, installations, machinery, equipment, operating procedures and processes, installations, machinery,
6. Planning HS x
2f1 work organization, including their adaptation to the needs and capabilities of the workers equipment, operating procedures and work
involved? organization, including their adaptation to the
needs and capabilities of the workers involved

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


taking into account other issues, including
Do the process(es) take into account other issues, including consideration of situations consideration of situations occurring in the
6.1.2b.1q1
6. Planning HS occurring in the vicinity of the workplace caused by work-related activities under the vicinity of the workplace caused by work- x
2f2
control of our organization? related activities under the control of our
organization
taking into account other issues, including
Do the process(es) take into account other issues, including consideration of situations consideration of situations not controlled by
6.1.2b.1q1
6. Planning HS not controlled by the organization and occurring in the vicinity of the workplace that can the organization and occurring in the vicinity x
2f3
cause injury and ill health to persons in the workplace? of the workplace that can cause injury and ill
health to persons in the workplace
taking into account actual or proposed
6.1.2b.1q1 Do the process(es) take into account actual or proposed changes in organization,
6. Planning HS changes in organization, operations, x
2g operations, processes, activities and the IMS? (see 8.1.3)
processes, activities and the IMS
6.1.2b.1q1 Do the process(es) take into account changes in knowledge of, and information about taking into account changes in knowledge of,
6. Planning HS x
2h hazards? and information about hazards
6.1.2b.2 6. Planning Assessment of OH&S risks and other risks to the IMS 4 0 0 0
Has your organization established, implemented and maintained a process(es) to
6.1.2b.2q1 Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS assess OH&S risks from the identified hazards, while taking into account the x
3a Opportunities adressing risks and opportunities nor a procedure
effectiveness
Has of existing
your organization controls? implemented and maintained a process(es) to
established,
6.1.2b.2q1 Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS determine and assess the other risks related to the establishment, implementation, x
3b Opportunities adressing risks and opportunities nor a procedure
operation and maintenance of the IMS? Establishing criteria for the assessment of
Are your organization’s methodology(ies) and criteria for the assessment of OH&S OH&S defined with respect to their scope,
6.1.2b.2q1 There is neither evidence on a process for
6. Planning HS defined with respect to their scope, nature and timing to ensure they are proactive nature and timing to ensure they are x
3c adressing risks and opportunities nor a procedure
rather than reactive and are used in a systematic way? proactive rather than reactive and are used in
a systematic way
6.1.2b.2q1 Has your organization maintained and retained documented information on the Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS x
3d methodology(ies) and criteria? Opportunities, Risk Assessment Records adressing risks and opportunities nor a procedure
6.1.2b.3 6. Planning Assessment of OH&S opportunities and other opportunities for the IMS 4 0 0 0
Has your organization established, implemented and maintained a process(es) to
6.1.2b.3q1 Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS assess OH&S opportunities to enhance OH&S performance, while taking into account x
4a Opportunities adressing risks and opportunities nor a procedure
planned changes to the organization, its policies, its processes or its activities?
6.1.2b.3q1 Has your organization established, implemented and maintained a process(es) to Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS x
4a1 assess opportunities to adapt work, work organization and work environment to workers? Opportunities adressing risks and opportunities nor a procedure
6.1.2b.3q1 Has your organization established, implemented and maintained a process(es) to Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS x
4a2 assess opportunities to eliminate hazards and reduce OH&S risks? Opportunities adressing risks and opportunities nor a procedure
6.1.2b.3q1 Has your organization established, implemented and maintained a process(es) to assess Procedure for Addressing Risks and There is neither evidence on a process for
6. Planning HS x
4b other opportunities for improving the IMS? Opportunities adressing risks and opportunities nor a procedure
6.1.3 6. Planning Determination of legal requirements and other requirements 4 0 0 0
Has your organization established, implemented and maintained a process(es) to
there is no evidence on Legal and Other
6.1.3q15a 6. Planning E HS determine, and have access to up-to-date relevant compliance obligations related to its Legal and Other Requirements Procedure x
Requirements Procedure
environmental aspects and OHS hazards, risks and the IMS?
Has your organization determined how these compliance obligations and legal there is no evidence on Legal and Other
6.1.3q15b 6. Planning E HS Legal and Other Requirements Register x
requirements apply to your organization? Requirements Register
Has your organization take its compliance obligations, legal and other requirements into taking compliance obligations, legal and other there is no evidence on Legal and Other
6.1.3q15c 6. Planning E HS x
account when establishing, implementing, maintaining and continually improving its IMS? requirements into account Requirements Procedure and a register
Does the organization maintain and retain documented information on its legal
Legal and Other Requirements Procedure, there is no evidence on Legal and Other
6.1.3q16 6. Planning E HS requirements and other requirements and ensure that it is updated to reflect any x
Legal and Other Requirements Register Requirements Procedure and a register
changes?
6.1.4 6. Planning Planning Action 6 1 0 0
Does your organization plan to take actions to address its compliance obligations and taking actions to address its compliance There is no evidence on taking actions to address
6.1.4q17a1 6. Planning E HS x
legal requirements? obligations and legal requirements its compliance obligations and legal requirements
Does your organization plan to take actions to address its risks and opportunities taking actions to address its risks and There is no evidence on taking actions to address
6.1.4q17a2 6. Planning E HS x
identified in 6.1.1. opportunities identified in 6.1.1. its risks and opportunities identified in 6.1.1.
Does your organization plan to take actions to prepare for and respond to emergency taking actions to prepare for and respond to Emergency Response Plan fulfills this
6.1.4q17a3 6. Planning E HS x
situations (see 8.2)? emergency situations requirement
planing how to integrate and implement the
Does the organization plan how to integrate and implement the actions into its IMS
6.1.4q17b 6. Planning E HS actions into IMS processes or other business x There is no evidence on this requirement
processes or other business processes?
processes
*Internal audit is on going
*HSE Inspections are being conducting
planning how to evaluate the effectiveness of
6.1.4q17c 6. Planning E HS Does the organization plan how to evaluate the effectiveness of these actions? x *HSE Performace Monitoring is not exisiting
these actions
*There is no certain tool being used to evaluate
the effectiveness of implemented actions

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


taking into account the hierarchy of controls
Does your organization take into account the hierarchy of controls (see 8.1.2) and There is no evidence on risk aseessment process
6.1.4q17d 6. Planning E HS (see 8.1.2) and outputs from the IMS when x
outputs from the IMS when planning to take action? to be taken into consideration
planning to take action
considering best practices, technological
When planning its actions, does the organization consider best practices, technological
6.1.4q17e 6. Planning E HS options and financial, operational and x There is no HSE management plan
options and financial, operational and business requirements?
business requirements
6.2 6. Planning QEHS objectives and planning to achieve them
6.2.1 6. Planning QEHS Objectives 0 10 0 0
establishing QEHS objectives at relevant
Has the organization established QEHS objectives at relevant functions and levels in functions and levels in order to maintain and There is no evidence on establishing QEHS
6.2.1q18 6. Planning Q E HS x
order to maintain and continually improve the IMS and QEHS performance (see 10.3)? continually improve the IMS and QEHS objectives
performance
Consistency of(see 10.3)
QEHS objectives with the QEHS There is no evidence on establishing QEHS
6.2.1q19a 6. Planning Q E HS Are your organization’s QEHS objectives consistent with the QEHS policy (See 5.2)? x
policy objectives
There is no evidence on establishing QEHS
6.2.1q19b 6. Planning Q E HS Are your organization’s QEHS objectives measurable (SMART), where practicable? objectives measurable (SMART) x
taking into account account applicable objectives
There is no evidence on establishing QEHS
6.2.1q19c1 6. Planning Q E HS Do your organization's objectives take into account account applicable requirements? x
requirements objectives
Do your organization's objectives take into the results of the assessment of risks and taking into the results of the assessment of There is no evidence on establishing QEHS
6.2.1q19c2 6. Planning Q E HS x
opportunities (see 6.1.2.2 and 6.1.2.3)? risks and opportunities objectives
Do your organization's objectives take into the results of consultation with workers (see taking into the results of consultation with There is no evidence on establishing QEHS
6.2.1q19c3 6. Planning Q E HS x
5.4) and, where they exist, workers’ representatives? workers objectives
There is no evidence on establishing QEHS
6.2.1q19d 6. Planning Q E HS Are your organization’s QEHS objectives monitored? QEHS objectives monitored x
objectives
There is no evidence on establishing QEHS
6.2.1q19e 6. Planning Q E HS Are your organization’s QEHS objectives communicated? QEHS objectives communicated x
objectives
There is no evidence on establishing QEHS
6.2.1q19f 6. Planning Q E HS Are your organization’s QEHS objectives update as appropriate? QEHS objectives update as appropriate x
Are your organization’s QEHS objectives maintained as documented information (See objectives
Quality Management Plan and HSE Plan are not
6.2.1q19h 6. Planning Q E HS QHSE Management Plan x
7.5)? existing
6.2.2 6. Planning Planning to Achieve QEHS Objectives 0 7 0 0
When planning how to achieve its QEHS objectives, has your organization determined There is no evidence on establishing QEHS
6.2.2q20a 6. Planning Q E HS determining what will be done x
what will be done? objectives
When planning how to achieve its QEHS objectives, has your organization determined There is no evidence on establishing QEHS
6.2.2q20b 6. Planning Q E HS determining what resources will be required x
what resources will be required? objectives
When planning how to achieve its objectives, Has your organization determine who will There is no evidence on establishing QEHS
6.2.2q20c 6. Planning Q E HS determining who will be responsible x
be responsible? objectives
When planning how to achieve its objectives, Has your organization determine when it There is no evidence on establishing QEHS
6.2.2q20d 6. Planning Q E HS determining when it will be completed x
will be completed? objectives
When planning how to achieve its objectives, Has your organization determine how the determining how the results will be evaluated,
There is no evidence on establishing QEHS
6.2.2q20e 6. Planning Q E HS results will be evaluated, including indicators for monitoring the progress of achievement including indicators for monitoring the x
objectives
of objectives? progress of achievement of objectives
When planning how to achieve its objectives, Has your organization determine how the determining how the actions to achieve QEHS
There is no evidence on establishing QEHS
6.2.2q20f 6. Planning Q E HS actions to achieve QEHS objectives is integrated into the organization’s business objectives is integrated into the organization’s x
objectives
processes? business processes
Has your organization maintain and retain documented information on the QEHS QHSE Management Plan, Objetives and There is no evidence on establishing QEHS
6.2.2gq21 6. Planning Q E HS x
objectives and plans to achieve them? Targets Records objectives
6.2.3 6. Planning Planning for Change 5 0 0 0
There is no evidence on determining the need for
determining the need for changes to the IMS,
When your organization determines the need for changes to the IMS, are the changes changes to the IMS and assuring that the changes
6.2.3q22 6. Planning Q are the changes carried out in a planned x
carried out in a planned manner (see 4.4). carried out in a planned manner (see 4.4) eg.
manner (see 4.4)
Change Action Plan
There is no evidence on considering the purpose
Does your organization consider the purpose of the changes and their potential considering the purpose of the changes and
6.2.3q23 6. Planning Q x of the changes and their potential consequences
consequences? their potential consequences
eg. Change Risk Assessment
Does your organization consider and maintain the integrity of the IMS during the change considering and maintaining the integrity of
6.2.3q24 6. Planning Q x Change management Process is not existing
process? the IMS during the change process
There is no evidence on considering the
considering the availability of resources during
6.2.3q25 6. Planning Q Does your organization consider the availability of resources during the change process? x availability of resources during the change
the change process
process eg. Change Feasibility Study
there is no evidence on considering the allocation
considering the allocation or reallocation of or reallocation of responsibilities and authorities
Does your organization consider the allocation or reallocation of responsibilities and
6.2.3q26 6. Planning Q responsibilities and authorities during the x during the change process eg. Change Action
authorities during the change process?
change process Plan
Organization manual drafted
7 7. Support Support
7.1 7. Support Resources
7.1.1 7. Support General 2 1 0 0
Determining and proviinge the resources
Does your organization determine and provide the resources needed for the needed for the establishment, *Asset Management Plan – Cairo Metro Line 3
7.1.1q1 7. Support Q x
establishment, implementation, maintenance and continual improvement of the IMS? implementation, maintenance and continual *Staffing Management Plan is existing
improvement of the IMS

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


SWOT analysis is the best practice to fulfill this
Does your organization consider the capabilities of, and constraints on existing internal considering the capabilities of, and constraints
7.1.1q2 7. Support Q x requirement even then there is no evidence on
resources? on existing internal resources
this requirement
Contracts with External Providers fulfill this
considering what needs to be obtained from requirement
7.1.1q3 7. Support Q Does your organization consider what needs to be obtained from external providers? x
external providers Request for Proposal
KPIs for external providors
7.1.2 7. Support People 0 1 0 0
determining and providing the staff necessary
*Staffing Management Plan is existing
Does your organization determine and provide the staff necessary resources for the resources for the effective implementation of
7.1.2q4 7. Support Q x *Jobs Descriptions
effective implementation of its IMS and for the operation and control of its processes? its IMS and for the operation and control of its
*Organization Chart
processes
7.1.3 7. Support Infrastructure 1 0 0 0
determining, providing and maintaining the
*Asset Management Plan – Cairo Metro Line 3
Does your organization determine, provide and maintain the infrastructure necessary for infrastructure necessary for the operation of
7.1.3q5 7. Support Q x *Corrective and preventive maintenance
the operation of its processes and to achieve conformity of products and services? its processes and to achieve conformity of
evidences are existing
products and services
7.1.4 7. Support Environment for the Operation of Processes 0 1 0 0
*Operating SOPs is existing
determining, providing and maintaining the
*Rulebook - Cairo Metro L3 is existing
Does organization determine, provide and maintain the environment necessary for the environment necessary for the operation of its
7.1.4q6 7. Support Q x *Workplace Ergonomics Work Instructions is not
operation of its processes and to achieve conformity of products and services? processes and to achieve conformity of
existing
products and service
*5S Project is not existing
7.1.5 7. Support Monitoring and Measuring Resources
7.1.5.1 7. Support General 3 1 0 0
determining and providing the resources
Quality Control techniques eg. Quality Inspection
Does your organization determine and provide the resources needed to ensure valid and needed to ensure valid and reliable results
process is not existing
7.1.5.1q7 7. Support Q reliable results when monitoring or measuring is used to verify the conformity of when monitoring or measuring is used to x
Mystery shopper is being conducting
products and services to requirements. verify the conformity of products and services
Internal Audit is being run
to requirements
ensuring that the resources provided are
Does your organization ensure that the resources provided are suitable for the specific Internal Audits are on going
7.1.5.1q8 7. Support Q suitable for the specific type of monitoring and x
type of monitoring and measurement activities being undertaken; Mystery Shopper is being conducted
measurement activities being undertaken
ensuring that the resources are maintained to Calibration Plan is existing
Does your organization ensure that the resources are maintained to ensure their
7.1.5.1q9 7. Support Q ensure their continuing fitness for their x Corrective and preventive maintenance plan and
continuing fitness for their purpose?
purpose Reports are existing
Equipment Manuals Equipment Manuals are existing
Does your organization retain appropriate documented information as evidence of Calibration Certificates Calibration Certification is ongoing
7.1.5.1q10 7. Support Q x
fitness for purpose of the monitoring and measurement resources? Internal audit records Internal audit records are existing
Quality Inspection Records Mystery shopper records are existing
7.1.5.2 7. Support Measurement Traceability 7 0 0 0
Equipment manuals are existing and define the
7.1.5.2q10 7. Support Q Is there a requirement for measurement traceability? Calibration Documents x
traceability requirements
Where measurement traceability is a requirement, are measurement equipment
7.1.5.2q11 7. Support Q Calibration Documents x Calibration plan
calibrated or verified at specified interval or prior to use?
Is the calibration done against measurements standards traceable to national or Equipment Manuals are existing and define
7.1.5.2q12 7. Support Q Calibration Documents x
international standards? calibration requirements
Where no such standard is existing, are documented information retained for the basis Calibration Certification is ongoing
7.1.5.2q13 7. Support Q Calibration Documents x
used for calibration or verification? calibration process is drafted
calibration process is drafted
7.1.5.2q14 7. Support Q Are measuring equipment identified in order to determine their status? Calibration Documents x Equipment Status Tags (calibrated or out of
service )
Are measuring equipment safeguarded from adjustments, damage or deteriorated that Equipment Safegards and storage are not
7.1.5.2q15 7. Support Q Calibration Documents x
would invalidate the calibration and subsequent measurement results? identified in calibration process
Does the organization determine and take appropriate action if validity of pervious
7.1.5.2q16 7. Support Q measurement results have been adversely affected when measuring equipment is found Calibration Documents x Calibration Procedure is draft
to be unfit for its intended purpose?
7.1.6 7. Support Organizational knowledge 3 0 0 0
determining the knowledge necessary for the Work Instructions and Sops fulfill this requirement
Does the organization determine the knowledge necessary for the operation of its
7.1.6q17 7. Support Q operation of its processes and to achieve x Rule book
processes and to achieve conformity of product and services?
conformity of product and services Maintenance management Plan
Work Instructions and Sops fulfill this requirement
Does the organization maintain this knowledge and make it available to the extent
7.1.6q18 7. Support Q Work Instructions, SOPs x Rule book
necessary?
Maintenance management Plan

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


addressing changing needs and trends, does
While addressing changing needs and trends, does the organization considers its current the organization considers its current
Websites Subscriptions, Standards or Learning
7.1.6q19 7. Support Q knowledge and determine how to acquire or access any necessary additional knowledge knowledge and determine how to acquire or x
Material Purchase Orders, Equipment Manuals
and required updates? access any necessary additional knowledge
and required updates
7.2 7. Support Competence 4 1 0 0
determining the necessary competence of
Does your organization determine the necessary competence of person(s) doing work person(s) doing work under its control that Employees Competencies are not identified
7.2q2a 7. Support Q E HS x
under its control that affects the performance and effectiveness of the IMS? affects the performance and effectiveness of competence management
the IMS
ensuring that these persons are competent
Does your organization ensure that these persons are competent (including the ability to There is no evidence on Employees Competency
(including the ability to identify OHS hazards
7.2q2b 7. Support Q E HS identify OHS hazards and environmental aspects) on the basis of appropriate education, x Assurance
and environmental aspects) on the basis of
training, or experience? competence management
appropriate education, training, or experience
determining the training needs associated
Does your organization determine the training needs associated with mitigating its Environmental Training need analysis are not
7.2q2c 7. Support E with mitigating its environmental aspects and x
environmental aspects and operating its IMS? conducting
operating its IMS
taking actions to acquire the necessary There is no evidence on Employees Competency
Does your organization where applicable, take actions to acquire the necessary
7.2q2d 7. Support Q E HS competence, and evaluate the effectiveness x Assurance
competence, and evaluate the effectiveness of the actions taken?
of the actions taken competence management
Does your organization retain appropriate documented information as evidence of There are Certifications and Achievements
7.2q3 7. Support Q HS Certifications and Achievements records x
competence? (See 7.5.1b) records but not for all required competencies
7.3 7. Support Awareness 0 8 0 0
HSE Policy Awarness Sessions are bring
ensuring that workers are aware of the QEHS
7.3q3 7. Support Q E HS Does your organization ensure that workers are aware of the QEHS policy? x conducted
policy
ensuring workers are aware of the relevant Quality policy is unapproved
Does your organization ensure workers are aware of the relevant objectives, actual and objectives, actual and potential work-related
7.3q4 7. Support Q HS potential work-related aspects and their contribution to the IMS performance, including aspects and their contribution to the IMS x HSE Awarness Sessions Schedule/Plan is draft
the benefits of improved performance? performance, including the benefits of
improved performance?
ensuring that workers are aware of the
Does your organization ensure that workers are aware of the relevant environmental
7.3q5 7. Support E relevant environmental aspects and impacts x HSE Awarness Sessions Schedule/Plan is draft
aspects and impacts associated with their work?
associated with their work
ensuring that workers are aware of their
Awarness Sessions are not being Conducted
Does your organization ensure that workers are aware of their contribution to the contribution to the effectiveness of the IMS,
7.3q6 7. Support Q E HS x There is no evidence on Communication
effectiveness of the IMS, including the benefits of improved performance? including the benefits of improved
Participation and Consultation Process
performance
ensuring that workers are aware of the
Does your organization ensure that workers are aware of the implications of not
implications of not conforming to the IMS
7.3q7 7. Support Q E HS conforming to the IMS requirements and not fulfilling the organization’s compliance x HSE Awarness Sessions Schedule/Plan is draft
requirements and not fulfilling the
objectives?
organization’s compliance
ensuring that workers objectives
are aware of incidents
Does your organization ensure that workers are aware of incidents and the outcomes of
7.3q8 7. Support HS and the outcomes of investigations that are x HSE Awarness Sessions Schedule/Plan is draft
investigations that are relevant to them?
relevant
ensuring to them
that workers are aware of hazards,
Does your organization ensure that workers are aware of hazards, OH&S risks and
7.3q9 7. Support HS OH&S risks and actions determined that are x HSE Awarness Sessions Schedule/Plan is draft
actions determined that are relevant to them?
relevant to them
ensuring that workers are aware of the ability
Does your organization ensure that workers are aware of the ability to remove to remove themselves from work situations
themselves from work situations that they consider present an imminent and serious that they consider present an imminent and
7.3q10 7. Support HS x HSE Awarness Sessions Schedule/Plan is draft
danger to their life or health, as well as the arrangements for protecting them from serious danger to their life or health, as well
undue consequences for doing so? as the arrangements for protecting them from
undue consequences for doing so
7.4 7. Support Communcation
7.4.1 7. Support Communcation - General 10 0 0 0
determining the internal and external
Does your organization determine the internal and external communications relevant to Communication Plan is not existing
7.4.1q4a 7. Support Q E HS communications relevant to the IMS, including x
the IMS, including what it will communicate? Correspondance log is existing
what it will communicate
Does your organization determine the internal and external communications relevant to Communication Plan is not existing
7.4.1q4b 7. Support Q E HS including when to communicate x
the IMS, including when to communicate? Correspondance log is existing
including with whom to communicate
Does your organization determine the internal and external communications relevant to
internally among the various levels and
the IMS, including with whom to communicate internally among the various levels and Communication Plan is not existing
7.4.1q4c1 7. Support Q E HS functions of the organization, among x
functions of the organization, among contractors and visitors to the workplace and Correspondance log is existing
contractors and visitors to the workplace and
among other interested parties?
among other interested parties
Does your organization determine the internal and external communications relevant to Communication Plan is not existing
7.4.1q4c2 7. Support Q E HS including how to communicate x
the IMS, including how to communicate? Correspondance log is existing

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


* Communication Plan is not existing
Does your organization take into account its compliance obligations and legal taking into account its compliance obligations * Safety Committee is not implemented
7.4.1q4c3 7. Support E HS x
requirements when establishing its communication process? and legal requirements * Communication, Consultation and Participation
Procedure is not existing
ensuring that when environmental or health * Communication Plan is not existing
Does your organization ensure that when environmental or health and safety information
and safety information that is communicated, * Safety Committee is not implemented
7.4.1q4d 7. Support E HS that is communicated, it is consistent with the information generated by the IMS is x
it is consistent with the information generated * Communication, Consultation and Participation
reliable?
by the IMS is reliable Procedure is not existing
responding to relevant communications
7.4.1q5 7. Support E HS Does your organization respond to relevant communications regarding its IMS? x correspondence Log is existing
regarding its IMS
Does your organization retaining documented information as evidence of its
7.4.1q6 7. Support E HS Communication Responds Records x correspondence Log is existing
communications as appropriate?
taking into account diversity aspects (e.g.
Does your organization take into account diversity aspects (e.g. gender, language,
7.4.1q7 7. Support HS gender, language, culture, literacy, disability) x correspondence Log is existing
culture, literacy, disability) when considering its communication needs?
when considering its communication needs
ensuring that the views of external interested * Safety Committee is not implemented
Dos your organization ensure that the views of external interested parties are considered
7.4.1q8 7. Support HS parties are considered in establishing its x * Communication, Consultation and Participation
in establishing its communication process(es)?
communication process(es) Procedure is not existing
7.4.2 7. Support Communcation - Internal communication 2 0 0 0
internally communicating information relevant
Does your organization internally communicate information relevant to the IMS including
7.4.1q9 7. Support E HS to the IMS including changes to the IMS as x correspondence Log is existing
changes to the IMS as appropriate?
appropriate
ensuring that is communication process
Does your organization ensure that is communication process enables persons doing enables persons doing work under your
7.4.1q10 7. Support E HS x Communication Plan is not existing
work under your organization’s control to contribute to continual improvement? organization’s control to contribute to
continual improvement
7.4.3 7. Support Communcation - External communication 1 0 0 0
externally communicate information relevant
Does your organization externally communicate information relevant to the IMS, via the to the IMS, via the communications process
7.4.3q11 7. Support E HS communications process and as required by the compliance obligations, legal and as required by the compliance x correspondence Log is existing
requirements and other requirements? obligations, legal requirements and other
requirements
7.5 7. Support Documented Information
7.5.1 7. Support Documented Information - General 1 0 0 0
Does your organization’s IMS include documented information determined by your
7.5.1q13c 7. Support Q E HS The Processes x The Processes are ongoing
organization as being necessary for the effectiveness of the IMS?
7.5.2 7. Support Documented Information - Creating and Updating 3 0 0 0
When creating and updating documented information, does your organization ensure ensuring appropriate identification and
7.5.2q14a 7. Support Q E HS appropriate identification and description (e.g. a title, date, author, or reference description (e.g. a title, date, author, or x Document control Process fulfill this requirement
number)?
When creating and updating documented information, does your organization ensure reference
ensure number) format (e.g. language,
appropriate
7.5.2q14b 7. Support Q E HS appropriate format (e.g. language, software version, graphics) and media (e.g. paper, software version, graphics) and media (e.g. x Document control Process fulfill this requirement
electronic)? paper, electronic)
When creating and updating documented information, does your organization ensure ensuring appropriate review and approval for
7.5.2q14c 7. Support Q E HS x Document control Process fulfill this requirement
appropriate review and approval for suitability and adequacy? suitability and adequacy
7.5.3 7. Support Documented Information - Control 7 1 0 0
Is documented information (required by the QEHS and ISO 9001:2015, ISO 14001:2015
ensuring it is available and suitable for use,
7.5.3q15a 7. Support Q E HS and ISO 45001:2018) controlled to ensure it is available and suitable for use, where and x Document control Process fulfill this requirement
where and when it is needed
when it is needed?
Is documented information (required by the QEHS and ISO 9001:2015, ISO 14001:2015 ensuring it is adequately protected from loss
7.5.3q15b 7. Support Q E HS and ISO 45001:2018) controlled to ensure it is adequately protected from loss of of confidentiality, improper use, or loss of x Document control Process fulfill this requirement
confidentiality, improper use, or loss of integrity? integrity
For the control of documented information, does your organization address the addressing the distribution, access, retrieval
7.5.3.2q16 7. Support Q E HS x Document control Process fulfill this requirement
distribution, access, retrieval and use? and use
For the control of documented information, does your organization address storage and addressing storage and preservation,
7.5.3.2q17 7. Support Q E HS x Document control Process fulfill this requirement
preservation, including preservation of legibility? including preservation of legibility
For the control of documented information, does your organization address control of addressing control of changes (e.g. version
7.5.3.2q18 7. Support Q E HS x Document control Process fulfill this requirement
changes (e.g. version control)? control)
For the control of documented information, does your organization address retention and
7.5.3.2q19 7. Support Q E HS addressing retention and disposition x Document control Process fulfill this requirement
disposition?
How does your organization ensure documented information of external origin is ensuring documented information of external
7.5.3.2q20 7. Support Q E HS x Document control Process fulfill this requirement
identified and controlled? origin is identified and controlled

Is documented information retained as evidence of conformity protected from Archiving Hard Copies Sharepoint has access authority
7.5.3.2q21 7. Support Q E HS x
unintended alterations? Sharepoint access permissions and authorities There is no hard copies archiving system

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


8 8. Operation Operation
8.1a 8. Operation Quality Planning & Control 7 3 0 0

Does your organization plan, implement and control the processes (see 4.4) needed to
meet the requirements for the provision of products and services, and to implement the Rulebook – Cairo Metro Line 3 fullfill the
8.1aq1 8. Operation Q Determining Service Requirements x
actions determined in Clause 6 by determining the requirements for the products and requirement
services? (Chapter one 'Compliance with regulations and
customer requirements' )
(Chapter two 'Duties and competence of
Does your organization plan, implement and control the processes (see 4.4) needed to operation and maintenance workers')
8.1aq2 8. Operation Q meet the requirements for the provision of products and services, and to implement the Establishing Criteria for Processes x Contracutal KPI's are not implemented
actions determined in Clause 6 by establishing criteria for the processes? Internal Company KPI's are ongoing
Does your organization plan, implement and control the processes (see 4.4) needed to
meet the requirements for the provision of products and services, and to implement the Establishing criteria for the acceptance of
8.1aq3 8. Operation Q x
actions determined in Clause 6 by establishing criteria for the acceptance of products services
and services? The resources needed as minimum staffing
Does your organization plan, implement and control the processes (see 4.4) needed to
requirements for each post and equipment are
meet the requirements for the provision of products and services, and to implement the determining the resources needed to achieve
8.1aq4 8. Operation Q x mentioned in:
actions determined in Clause 6 by determining the resources needed to achieve conformity to service requirements
Operations Management Plan, Rulebook, and
conformity to product and service requirements?
Asset Management Plan

PTW Current Procedure


Normal Mode Standard Operating Procedures for
Does your organization plan, implement and control the processes (see 4.4) needed to (Driver, CCP and Stations)
meet the requirements for the provision of products and services, and to implement the Implementing control of the processes in Degraded Mode Standard Operating Procedures
8.1aq5 8. Operation Q x
actions determined in Clause 6 by implementing control of the processes in accordance accordance with the criteria for (Driver, CCP and Stations)
with the criteria? Emergency Mode Standard Operating Procedures
for (Driver, CCP and Stations)
PTW Procedure

Does your organization plan, implement and control the processes (see 4.4) needed to
Operations Management Plan
meet the requirements for the provision of products and services, and to implement the
Operations Plan
8.1aq6 8. Operation Q actions determined in Clause 6 by determining, maintaining and retaining x
Procedure for Auditing operation Operations Management Plan is Approved
documented information to the extent necessary to have confidence that the processes
Audit Records Operation Audit Reports are Unapproved
have been carried out as planned?
Does your organization plan, implement and control the processes (see 4.4) needed to Operation Audit Plan and Reports are unapproved
meet the requirements for the provision of products and services, and to implement the Operating Manual Railway Safety Audit Reports are unapproved
8.1aq7 8. Operation Q actions determined in Clause 6 by determining, maintaining and retaining Audit plan RDMC Operation x
documented information to the extent necessary to demonstrate the conformity of Operation Audit Records
products and services to their requirements?
Suitability of Planning process outputs for
8.1aq8 8. Operation Q Are the outputs of the planning process suitable for your organization’s operations? x
organization’s operations
control of planned changes and review the
Does your organization control planned changes and review the consequences of Change Management Plan does not exist
8.1aq9 8. Operation Q consequences of unintended changes x
unintended changes, taking action to mitigate any adverse effects, as necessary? (Planned Changes are not managed)
Change implementation plan
* Contracts with External Providers
equest for proposal
* Contract Review (Shall be covered inside
8.1aq10 8. Operation Q Does your organization ensure that outsourced processes are controlled (see 8.4)? Ensure the control of outsourced processes x
Contracts)
* External Providers Evaluation Form and
Renewal Form are not approved
8.1b 8. Operation Environmental Planning & Control 4 8 0 0
Has the organization established, implemented, controlled and maintained the processes Environmental Management Plan
Environmental Aspects and Impacts have not
8.1bq11 8. Operation E needed to meet IMS requirements, and to implement the actions identified in Section Procedure for Identification and Evaluation of x
been neither identified nor assessed
6.1? Environmental Aspects and Risks

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Operational Control of Significant Environmental
Aspects as:-
- Emissions to air
- Releases to water
- Releases to land
- Uses of raw materials and natural resources
8.1bq12 8. Operation E Has the organization established operating criteria for each process? Operating criteria for each process x - Uses of energy
- Energy emission such as heat, radiation, or
vibrations
- Waste and by-products
- Physical attributes of the organization affecting
the environment)
Not identified
Operational Control of Significant Environmental
Aspects has not been identified:-
- Emissions to air
- Releases to water
- Releases to land
Has the organization implement control of the processes in accordance with the Implementing control of the processes in - Uses of raw materials and natural resources
8.1bq13 8. Operation E x
operating criteria? accordance with the operating criteria - Uses of energy
- Energy emission such as heat, radiation, or
vibrations
- Waste and by-products
- Physical attributes of the organization affecting
the environment)
control of planned changes and review the Change Management Plan does not exist
Does the organization control planned changes and review the consequences of
8.1bq14 8. Operation E consequences of unintended changes x (Planned Changes are not managed)
unintended changes, and taking action to mitigate any adverse effects?
Change implementation plan Emergency Response Plan

Contracts with External Providers


8.1bq15 8. Operation E Does your organization ensure that outsourced process are controlled and influenced? Controls of Outsourced Processes x
Procurement Procedure (Unapproved)

Operational Control of Significant Environmental


Aspects has not been identified:-
- Emissions to air
- Releases to water
- Releases to land
Does your organization define the extent of control or influence that it applies to each Defining the extent of control or influence that - Uses of raw materials and natural resources
8.1bq16 8. Operation E x
process within the IMS? it applies to each process within the IMS - Uses of energy
- Energy emission such as heat, radiation, or
vibrations
- Waste and by-products
- Physical attributes of the organization affecting
the environment)
establishing controls to ensure that its
Has your organization established controls to ensure that its environmental requirements environmental requirements are addressed in
Resources Consumption and Waste life Cycle
8.1bq17 8. Operation E are addressed in the design and development process for the product or service as the design and development process for the x
have not been identified
appropriate considering each life cycle stage? product or service as appropriate considering
each life cycle stage
determining environmental requirements for Environmental Requirements for Procurement of
Does your organization determine environmental requirements for the procurement of
8.1bq18 8. Operation E the procurement of products and services as x products and services and Warehousing are not
products and services as appropriate?
appropriate determined
Contractors conditions Procedure hilights these
communicating the relevant environmental requirement to contractors
Does your organization communicate the relevant environmental requirements to
8.1bq19 8. Operation E requirements to external providers and x there is no evidence on communicating
external providers and contractors?
contractors environmental requirement with external
providers
providing information about potential
Does your organization consider the need to provide information about potential significant environmental impacts related to Environmental Impact Assessement is not
8.1bq20 8. Operation E significant environmental impacts related to the transportation, delivery, use, end of life the transportation, delivery, use, end of life x implemented
treatment and final disposal of its products and services? treatment and final disposal of its products Waste management Plan is Unapproved
and services

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


provide information about potential significant
Does your organization consider the need to provide information about potential environmental impacts related to the Environmental Impact Assessement is not
8.1bq21 8. Operation E significant environmental impacts related to the transportation, delivery, use, end of life transportation, delivery, use, end of life x implemented
treatment and final disposal of its products and services? treatment and final disposal of its products Waste management Plan is Unapproved
and services
Does the organization maintain documented information to the extent necessary to Performance meaurement, monitoring and
8.1bq22 8. Operation E x Partially Implemented
have confidence that its processes are carried out as planned? evaluation Procedure
8.1.1 8. Operation OH&S Operational Planning & Control - General 3 3 0 0
Has your organization planned, implemented, controlled and maintained the processes
8.1.1q1a 8. Operation HS needed to meet requirements of the IMS, and to implement the actions determined in Safety Management Plan x Processes
Clause 6, by establishing criteria for the processes?
Operational Control Procedure ((SOP for
Chemical Hazards- – SOP for Environmental
and Physical Hazards- SOP for Electrical
Hazards - SOP for Working on Height Hazards-
Has your organization planned, implemented, controlled and maintained the processes SOP for Display Screens and Posture Hazards
8.1.1q1b 8. Operation HS needed to meet requirements of the IMS, and to implement the actions determined in (Office Hazards)- SOP For OPERATING HEAVY x Partially Implemented
Clause 6, by implementing control of the processes in accordance with the criteria? MACHINERY- SOP For RADIOACTIVE HAZARDS-
SOP For ERGONOMIC HAZARDS- SOP For
PERSONAL PROTECTIVE EQUIPMENT- Good
Practice for Maintenance of Tools and
Machinery))
Has your organization planned, implemented, controlled and maintained the processes Performance Measurement and Monitoring
needed to meet requirements of the IMS, and to implement the actions determined in Procedure
8.1.1q1c 8. Operation HS x Partially Implemented
Clause 6, by maintaining and retaining documented information to the extent necessary Performance Measurement and Monitoring
to have confidence that the processes have been carried out as planned? Records (Monthly Report)
Operational Control Procedure ((SOP for
Chemical Hazards- – SOP for Environmental
Has your organization planned, implemented, controlled and maintained the processes and Physical Hazards- SOP for Electrical
Ergonomics and Job hazard analysis are not
8.1.1q1d 8. Operation HS needed to meet requirements of the IMS, and to implement the actions determined in Hazards - SOP for Working on Height Hazards- x
existing
Clause 6, by adapting work to workers? SOP for Display Screens and Posture Hazards
(Office Hazards)- SOP For OPERATING HEAVY
MACHINERY-
Contractors conditions Procedure fulfills this
At multi-employer workplaces, does your organization coordinate the relevant parts of Contractors Conditions Procedure
8.1.1q2 8. Operation HS x requirement
the IMS with the other organizations? Contracts with External Providers
Contracts
ensuring that outsourced processes are Contracts with External Providers
8.1.1q3 8. Operation HS How does your organization ensure that outsourced processes are controlled (see 8.4)? x
controlled Procurement Procedure (Unapproved)
8.1.2 8. Operation Operation - Eliminating Hazards and Reducing OH&S Risks 0 1 0 0
Has the organization established, implemented and maintained a process(es) for the
elimination of hazards and reduction of OH&S risks using the hierarchy of controls below?
a) eliminate the hazard;
Procedure for Addressing Risks and Risk management plan is unapproved
8.1.2q4 8. Operation HS b) substitute with less hazardous processes, operations, materials or equipment; x
Opportunities there is no risk assessment procedure
c) use engineering controls and reorganization of work;
d) use administrative controls, including training;
e)use adequate personal protective equipment.
8.1.3 8. Operation Operation - Management of Change 5 0 0 0
Has the organization established a process(es) for the implementation and control of
planned changes that impact OH&S performance, including new and upgraded products,
services and processes??
Including:
There is no an established process(es) for the
8.1.3q5a 8. Operation HS - workplace locations and surroundings; Management of Change Process x
implementation and control of planned changes
- work organization;
- working conditions;
- equipment;
- work force;
Has the organization established a process(es) for the implementation and control of
There is no an established process(es) for the
8.1.3q5b 8. Operation HS planned changes that impact OH&S performance, including changes to legal Management of Change Process x
implementation and control of planned changes
requirements and other requirements?
Has the organization established a process(es) for the implementation and control of
There is no an established process(es) for the
8.1.3q5c 8. Operation HS planned changes that impact OH&S performance, including changes in knowledge or Management of Change Process x
implementation and control of planned changes
information about hazards and OH&S risks?
Has the organization established a process(es) for the implementation and control of
There is no an established process(es) for the
8.1.3q5d 8. Operation HS planned changes that impact OH&S performance, including developments in knowledge Management of Change Process x
implementation and control of planned changes
and technology?
Does the organisation review the consequences of unintended changes, taking action to There is no an established process(es) for the
8.1.3q6 8. Operation HS Management of Change Process x
mitigate any adverse effects, as necessary? implementation and control of planned changes

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


8.1.4 8. Operation Operation - Procurement
8.1.4.1 8. Operation Procurement - General 1 0 0 0
Has your organization established, implemented and maintained a process(es) to control
8.1.4.1q7 8. Operation HS Procurement Procedure x Request for proposal is Unapproved
the procurement of products and services in order to ensure their conformity to its IMS?
8.1.4.2 8. Operation Procurement - Contractors 5 0 0 0
Does your organization coordinate its procurement process(es) with its contractors, in
Contractors conditions procedure fulfills this
8.1.4.2q8a 8. Operation HS order to identify hazards and to assess and control the OH&S risks arising from the Control of Contractors x
requirement
contractors’ activities and operations that impact the organization?
Does your organization coordinate its procurement process(es) with its contractors, in
Contractors conditions procedure fulfills this
8.1.4.2q8b 8. Operation HS order to identify hazards and to assess and control the OH&S risks arising from the Control of Contractors x
requirement
organization’s activities and operations that impact the contractors’ workers?
Does your organization coordinate its procurement process(es) with its contractors, in
order to identify hazards and to assess and control the OH&S risks arising from the Contractors conditions procedure fulfills this
8.1.4.2q8c 8. Operation HS Control of Contractors x
contractors’ activities and operations that impact other interested parties in the requirement
workplace? Contractors conditions procedure fulfills this
Does your organization ensure that the requirements of its IMS are met by contractors Contractor workers competencies and requirement
8.1.4.2q9 8. Operation HS x
and their workers? certifications Contractors
Contractors conditions
conditions checklist
procedurefulfills
fulfillsthis
this
Does your organization’s procurement process(es) define and apply occupational health requirement
requirement
8.1.4.2q10 8. Operation HS Contractors selection criteria x
and safety criteria for the selection of contractors? Contractors conditions checklist fulfills this
8.1.4.3 8. Operation Procurement - Outsourcing 3 0 0 0 requirement
Contracts with External Providers
8.1.4.3q11 8. Operation HS Does your organization ensure that outsourced functions and processes are controlled? Ensure the control of outsourced processes x
Procurement Procedure (Unapproved)
Does your organization ensure that its outsourcing arrangements are consistent with
Contracts with outsourced parties
8.1.4.3q12 8. Operation HS legal requirements and other requirements and with achieving the intended outcomes of Evaluation of outsourced processes x
Outsourced Parties evaluation is not recorded
the IMS?
Is the type and degree of control applied to these functions and processes defined within Applying Controls to functions and processes Contracts with External Providers
8.1.4.3q13 8. Operation HS x
the IMS? defined within the IMS Procurement Procedure (Unapproved)
8.2a 8. Operation Emergency Preparedness & Response 17 0 0 0
Emergency Management Plan Cairo Line 3 and
Has your organization established, implemented and maintained process required to Emergency Management Plan Cairo Line 3
8.2aq14 8. Operation E x Emergency Response Plan are fulfilling this
prepare for and to respond to potential emergency situations identified in Section 6.1.1? Emergency Response Plan
requirement
Emergency Management Plan Cairo Line 3
Does your organization prepare and respond by planning actions to prevent or mitigate Emergancy Response Plans fulfill this
8.2aq15a 8. Operation E Emergency Response Plan x
adverse impacts arising from emergency situations? requirement
Incidents Scenarios
Emergancy Response Plans fulfill this
8.2aq15b 8. Operation E Does your organization respond to emergency situations? Respond to emergency situations x
Does your organization take action to prevent or mitigate the consequences of requirement
There is only one Emergency Response Record
8.2aq15c 8. Operation E emergency situations appropriate to the magnitude of the emergency and the potential Environmental Emergency Scenarios records x
which is not enough
environmental impact?
There is only one Emergency Response Record
8.2aq15d 8. Operation E Does your organization periodically test the planned responses where practicable? Emergency Scenarios Plan x
which is not enough (not periodically)
Does your organization periodically review the planned responses, in particular, after an
8.2aq15e 8. Operation E Emergency Scenarios Plan x Emergency Scenarios Plan
emergency situation has occurred?
Does your organization provide relevant information and training related to emergency There is only one Emergency Response Record
8.2aq15f 8. Operation E Emergency Scenarios Drills x
response and preparedness to relevant interested parties and staff? which is not enough
Firefighting Performance Mangement
Does the organization maintain documented information to the extent necessary to Firefighting Performance Mangement Procedure
8.2aq15g 8. Operation E Procedure x
have confidence that its processes are carried out as planned? Emergency Response Drills are not existing
Emergency Response Drills
Has organization established, implemented and maintained process required to prepare Emergency Response Plan fulfills this
8.2aq16 8. Operation HS Emergency Response Plan x
for and to respond to potential emergency situations identified in Section 6.1.2.1? requirement
Has your organization established a planned response to emergency situations, including
8.2aq17 8. Operation HS First aid x First Aid content Checklist (Unapproved)
the provision of first aid?
There is only one Emergency Response Record
8.2aq18 8. Operation HS Has your organization provided training for the planned response? Emergency Scenarios Drills x
which is not enough
8.2aq19 8. Operation HS Has your organization periodically tested and exercised the planned response capability? Emergency Scenarios Plan x Emergency Scenarios Plan is not mentioned
Has your organization evaluated performance and, as necessary, revised the planned
8.2aq20 8. Operation HS response, including after testing and, in particular, after the occurrence of emergency Emergency Scenarios Plan x Emergency Scenarios Plan
situations?
Has your organization communicated and provided relevant information to all workers on Emergency Response Plan
8.2aq21 8. Operation HS x Evacuation Plan is unapproved
their duties and responsibilities? Evacuation Plan
Has your organization communicated relevant information to contractors, visitors,
8.2aq22 8. Operation HS emergency response services, government authorities and, as appropriate, the local Awareness and Induction Sessions x HSE Induction Sessions
community?
Has your organization taken into account the needs and capabilities of all relevant Interested parties involvement, as
Emergancy Response Plan covers this
8.2aq23 8. Operation HS interested parties and ensured their involvement, as appropriate, in the development of appropriate, in the development of the x
requirement
the planned response? planned response

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Emergency Response Plan
Does you organization maintain and retain documented information on the process(es) Emergency Response Plan
8.2aq24 8. Operation HS x There is only one Emergency Response Record
and on the plans for responding to potential emergency situations? Emergency Scenarios records
which is not enough
8.2b 8. Operation Requirements for Products and Services
8.2b.1 8. Operation Customer communication 5 0 0 0
Does communication with customers include providing information relating to products Providing customers with information relating Website, Social Media, RDMC Family Events, NAT
8.2b.1q5 8. Operation Q x
and services? to services Monthly Reports

Does communication with customers include handling enquiries, contracts or orders, Handling enquiries, contracts or orders, Website, Social Media, Subscription Signs,
8.2b.1q6 8. Operation Q x
including changes? including changes with customers Contact Channels Signs, RDMC Moile Application
Handling customer feedback and complaints
Does communication with customers include obtaining customer feedback relating to
8.2b.1q7 8. Operation Q (Registry of Customer Complaints and x Customer Survey Reports
products and services, including customer complaints?
feedback)
Communication on handling or controlling
8.2b.1q8 8. Operation Q Does communication with customers include handling or controlling customer property? x Correspondances
customer property
Does communication with customers include establishing specific requirements for Communication on establishing specific Evacuation Plan
8.2b.1q9 8. Operation Q x
contingency actions, when relevant? requirements for contingency actions Drills (Fire Fighting, …..)
8.2b.2 8. Operation Determining the requirements for products and services 3 0 0 0
When determining the requirements for the products and services to be offered to
Applicable statutory and regulatory Rulebook and Operations Management Plan fulfill
8.2b.2q10 8. Operation Q customers, does your organization ensure that the requirements for the products and x
requirements this requirement
services are defined, including any applicable statutory and regulatory requirements?
When determining the requirements for the products and services to be offered to
Rulebook and Operations Management Plan fulfill
8.2b.2q11 8. Operation Q customers, does your organization ensure that the requirements for the products and Organization Service Requirements x
this requirement
services are defined, including those considered necessary by your organization?
When determining the requirements for the products and services to be offered to
Customer Feedback and Compliants
8.2b.2q12 8. Operation Q customers, does your organization ensure that your organization can meet the claims for Dealing with claims for service x
Questionnaires
the products and services it offers?
8.2b.3 8. Operation Review of the requirements for products and services 10 0 0 0
Does your organization ensure that it has the ability to meet the requirements for
8.2b.3q13 8. Operation Q Identification of customer requirements x Mystery Shopper Reports fulfill this requirement
products and services to be offered to customers?
Does your organization conduct a review before committing to supply products and
Operations Timetables and Maintenance Plan
8.2b.3q14 8. Operation Q services to a customer, including requirements specified by the customer, including the Customer Requirement Review Checklist x
fulfill this requirement
requirements for delivery and post-delivery activities?
Review before committing to supply products
Does your organization conduct a review before committing to supply products and
and services to a customer, including Operations Timetables and Maintenance Plan
8.2b.3q15 8. Operation Q services to a customer, including requirements not stated by the customer, but x
requirements not stated by the customer, but fulfill this requirement
necessary for the specified or intended use, when known?
necessary for the specified or intended use
Review before committing to supply products
Does your organization conduct a review before committing to supply products and Operations Timetables and Maintenance Plan
8.2b.3q16 8. Operation Q and services to a customer, including x
services to a customer, including requirements specified by your organization? fulfill this requirement
requirements specified by organization
Does your organization conduct a review before committing to supply products and
Operations Timetables and Maintenance Plan
8.2b.3q17 8. Operation Q services to a customer, including statutory and regulatory requirements applicable to the Service Conformance Checklist x
fulfill this requirement
products
Does yourand services? conduct a review before committing to supply products and
organization
Operations Timetables and Maintenance Plan
8.2b.3q18 8. Operation Q services to a customer, including contract or order requirements differing from those Customer Requirement Review Checklist x
fulfill this requirement
previously expressed?
Does your organization ensure that contract or order requirements differing from those Operations Timetables and Maintenance Plan
8.2b.3q19 8. Operation Q Customer Requirement Review Checklist x
previously defined are resolved? fulfill this requirement
Are customer’s requirements confirmed by your organization before acceptance, when Operations Timetables and Maintenance Plan
8.2b.3q20 8. Operation Q Customer Requirement Review Checklist x
the customer does not provide a documented statement of their requirements? fulfill this requirement
Does your organization retain documented information, as applicable on the results of Customer Requirement Review Operations Timetables and Maintenance Plan
8.2b.3q21 8. Operation Q x
the review? (See 7.5.1b) Checklist/Record fulfill this requirement
Does your organization retain documented information, as applicable on any new Customer Requirement Review Operations Timetables and Maintenance Plan
8.2b.3q22 8. Operation Q x
requirements for the products and services? (See 7.5.1b) Checklist/Record fulfill this requirement
8.2b.4 8. Operation Changes to requirements for products and services 1 0 0 0
Does the organization ensure that the relevant documented information is amended and
Notification to a Customer about Changes on
8.2b.4q23 8. Operation Q the relevant persons are made aware of the changed requirements, when the x Correspondances with NAT
his Property
requirements for the products and services are changed?
8.3 8. Operation Design and development of products and services N/A
8.3.1 8. Operation General N/A ############
8.3.2 8. Operation Design and development planning N/A ############
8.3.3 8. Operation Design and Development inputs N/A ############
8.3.4 8. Operation Design and development controls N/A ############

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


8.3.5 8. Operation Design and Development outputs N/A ############
8.3.6 8. Operation Design and Development changes N/A ############
8.4 8. Operation Control of externally provided processes, products and services
8.4.1 8. Operation General 6 0 0 0
Does the organization ensure that the externally provided processes, products and Ensuring conformity of externally provided
8.4.1q35 8. Operation Q x Coverd in Contracts with external providers
services conform to the requirements? processes, products and services
Determining the controls needed when the
Does the organization determine the controls needed when the product and services product and services from the external
8.4.1q36a 8. Operation Q x Coverd in Contracts with external providers
from the external providers are incorporated into their own product and services? providers are incorporated into their own
product and services
Determining the controls needed when the
Does the organization determine the controls needed when the product and services product and services from the external
8.4.1q36b 8. Operation Q x Coverd in Contracts with external providers
from the external providers are provided directly to the customer by external providers? providers are provided directly to the
customer by the
Determining external providers
controls needed when
Does the organization determine the controls needed when process or part of process is
8.4.1q36c 8. Operation Q process or part of process is provided by the x Coverd in Contracts with external providers
provided by the external providers?
external providers
Determining and appling the criteria for
Has the organization determined and applied the criteria for selection, evaluation, selection, evaluation, monitoring of
8.4.1q37 8. Operation Q x Coverd in Contracts with external providers
monitoring of performance and re – evaluation of external providers? performance and re – evaluation of external
providers
Has the organization retained the documented information of these activities and any
8.4.1q38 8. Operation Q External Providers Evaluation Records x Coverd in Contracts with external providers
action arising out or evaluation/re-evaluation?
8.4.2 8. Operation Type and extent of control 6 0 0 0
Ensuring that the externally provided
Does the organization ensure that the externally provided processes, product and processes, product and services do not
8.4.2q39a 8. Operation Q services do not adversely affect the its ability to consistently deliver conforming products adversely affect the its ability to consistently x
and services to the customers? deliver conforming products and services to
the customers
Does the organization ensure that the externally provided process remain within the Ensuring that the externally provided process
8.4.2q39b 8. Operation Q x
control of its QMS? remain within the control of its QMS
Has the organization defined the controls to be applied to external provider and its Defining the controls to be applied to external
8.4.2q39c 8. Operation Q x
resulting outputs? provider and its resulting outputs
Considering the potential impact of the
Has the organization taken into consideration the potential impact of the organization’s
organization’s ability to consistently meet
8.4.2q39c1 8. Operation Q ability to consistently meet customer and applicable statutory and regulatory x
customer and applicable statutory and
requirement?
regulatory requirement
Has the organization taken into consideration the effectiveness of the controls applied by Considering the effectiveness of the controls
8.4.2q39c2 8. Operation Q x
the external providers? applied by the external providers
Determining the verification or other
Has the organization determined the verification or other activities, necessary to ensure activities, necessary to ensure that the
8.4.2q39d 8. Operation Q x
that the externally provided processes, products and services meet requirements? externally provided processes, products and
services meet requirements
8.4.3 8. Operation Information for external providers 7 0 0 0
Does the organization ensure adequacy of requirements prior to their communication to Ensuring adequacy of requirements prior to
8.4.3q40 8. Operation Q x Lists of Approved Suppliers are not existing
the external provider? their communication to the external provider
communicating to the external providers its
Does the organization communicate to the external providers its requirements for the
8.4.3q41a 8. Operation Q requirements for the processes, products and x
processes, products and services required?
services required
communicating to the external providers its
Does the organization communicate to the external providers its requirements for the requirements for the approval of the product
8.4.3q41b 8. Operation Q approval of the product and services; methods, processes and equipment; the release of and services; methods, processes and x
product and services? equipment; the release of product and
services
communicating to the external providers its
Does the organization communicate to the external providers its requirements for
8.4.3q41c 8. Operation Q requirements for competence including any x
competence including any qualification of persons?
qualification of persons
communicate to the external providers its
Does the organization communicate to the external providers its requirements for
8.4.3q41d 8. Operation Q requirements for external provider’s x
external provider’s interactions with the organizations
interactions with the organizations
communicate to the external providers its
Does the organization communicate to the external providers its requirements for control requirements for control and monitoring of the
8.4.3q41e 8. Operation Q x
and monitoring of the external providers’ performance to be applied by the organization? external providers’ performance to be applied
by the organization
communicating to the external providers its
Does the organization communicate to the external providers its requirements for requirements for verification or validation
8.4.3q41f 8. Operation Q verification or validation activities that the organization or its customer intends to activities that the organization or its customer x
perform at the external providers’ premises? intends to perform at the external providers’
premises
8.5 8. Operation Production and Service provision

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


8.5.1 8. Operation Control of production and service provision 5 4 0 0
Has the organization implemented production and service provision under controlled Implementing production and service Procedures Normal Mode – Cairo Metro Line 3
8.5.1q35a 8. Operation Q x
conditions? provision under controlled conditions fulfills this requirement
Procedures Normal Mode – Cairo Metro Line 3
defining the characteristics of the product,
Are there any documented information available that defines the characteristics of the Rulebook – Cairo Metro Line 3
8.5.1q35b 8. Operation Q services or activities to be performed and the x
product, services or activities to be performed and the results to be achieved? Operations Management Plan are fulfilling this
results to be achieved
requirement
* KPI's Sheet is ongoing
Availability of suitable monitoring and * Calibration Log (Measuring Devices Monitoring)
8.5.1q35c 8. Operation Q Are any suitable monitoring and measuring resources available? Are they being used? x
measuring resources is not complete
* Myster Shopper Surveys are implemented
Performing monitoring and measuring *Calibration Log (Measuring Devices Monitoring)
8.5.1q35d 8. Operation Q Are monitoring and measuring activities being performed at appropriate stages? x
activitiesat appropriate stages is not complete
Appointing competent persons (including Competency and training evidence are not
8.5.1q35e 8. Operation Q Are competent persons (including qualification) being appointed? x
qualification) existing
Using suitable infrastructure and environment Asset Management Plan is approved
8.5.1q35f 8. Operation Q Is the infrastructure and environment being used suitable for operation of processes? x
for operation of processes Ergonomics Work Instructions is not approved
1-Equipment Status Tag is ongoing
Implementing any actions to prevent human 2- Calibration Tag is ongoing
8.5.1q35g 8. Operation Q Has the organization implemented any actions to prevent human error? error (Gage Repeatability and Reproducibility x 3- Machine Guarding Instructions is not
(Gage R & R), Poka yoka) implemented
4- Poka Yoke still under disscussion
Implementing any release, delivery and post-
8.5.1q35h 8. Operation Q Has the organization implemented any release, delivery and post-delivery activities? x Customer feedback Surveys are implemented
delivery activities
Where resulting output cannot be verified by subsequent monitoring or measurement,
Process Review is not implemented
8.5.1q35i 8. Operation Q has the organization conducted validation and periodic revalidation of the process for Service Conformance Records x
Control of document Procedure is approved
production and service provision?
8.5.2 8. Operation Identification and traceability 4 0 0 0
Useing any suitable means to identify output
Has the organization used any suitable means to identify output when it is necessary to
8.5.2q36 8. Operation Q when it is necessary to ensure the conformity x Calibration Documents are being drafted
ensure the conformity of products and services?
of products and services
Identifying status of outputs with respect to
Has the status of outputs with respect to monitoring and measuring requirements monitoring and measuring requirements
8.5.2q37 8. Operation Q x Calibration Documents are being drafted
throughout the production and service provision being identified by the organization? throughout the production and service
provision
Has the organization controlled the unique identification of the outputs when traceability Controlling the unique identification of the
8.5.2q38 8. Operation Q x Calibration Documents are being drafted
is a requirement? outputs when traceability is a requirement
Has the organization retain the documented information necessary to enable
8.5.2q39 8. Operation Q Records of traceability x Calibration Documents are being drafted
traceability, when traceability is a requirement?
8.5.3 8. Operation Property belonging to customers or external providers 3 0 0 0
When property belonging to customers or external providers is under the organization’s exercising adequate care about property
8.5.3q40 8. Operation Q control or being used being used by the organization, does the organization exercise belonging to customers or external providers x Outgoing Letters Process is approved
adequate care? is under the organization’s control
Does the organization identify, verify, protect and safeguard customers’ or external Identifying , verifing, protecting and safeguard
8.5.3q41 8. Operation Q x Outgoing Letters Process is approved
providers’ property? customers’ or external providers’ property
When the property or the customer or external provider is lost, damaged or otherwise
fount to be unsuitable for use, does the organization report this to the customer or
8.5.3q42 8. Operation Q Incidents corrospondences records x Outgoing Letters Process is approved
external provider? Does the organization retain documented information on what has
occurred?
8.5.4 8. Operation Preservation 1 0 0 0
preserving the outputs during production and
Does the organization preserve the outputs during production and service provision, to Maintenance Plan and Asset Management Report
8.5.4q43 8. Operation Q service provision, to the extent necessary to x
the extent necessary to ensure conformity to requirements? are implemented
ensure conformity to requirements
8.5.5 8. Operation Post-delivery activities 2 0 0 0
meeting requirements for post-delivery
Does the organization meet requirements for post-delivery activities associated with the Customer Complaints and feedback Surveysand
8.5.5q44 8. Operation Q activities associated with the product and x
product and services? Customer satisfaction Surveys are implemented
services
considering the statutory & regulatory
In determining the extent of post-delivery activities does the organization considers the requirements; the potential undesired
statutory & regulatory requirements; the potential undesired consequences associated consequences associated with its product and Customer Complaints and feedback Surveysand
8.5.5q45 8. Operation Q x
with its product and services; customer requirement & feedback; the nature, use and services; customer requirement & feedback; Customer satisfaction Surveys are implemented
intended lifetime of its product and services? the nature, use and intended lifetime of its
product and services
8.5.6 8. Operation Control of change 2 0 0 0

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Reviewing and controlling changes for
Does the organization conduct review and control changes for production or service
8.5.6q46 8. Operation Q production or service provision to ensure x System does not enhance Change Management
provision to ensure continuing conformity with requirements?
continuing conformity with requirements
Does the organization retain documented information describing the results of the
change assessment record and Change
8.5.6q47 8. Operation Q review of changes, the person(s) authorizing the change and any necessary actions x System does not enhance Change Management
implementation action plan
arising from the review?
8.6 8. Operation Release of products and services 4 0 0 0
implementing planned arrangements, at
Has the organization implemented planned arrangements, at appropriate stages, to Daily Reports are implemented for operations,
8.6q48 8. Operation Q appropriate stages, to verify that the product x
verify that the product and service requirements have been met? maintenance and RQHSE
and service requirements have been met
ensuring that the release of product and
Does the organization ensure that the release of product and service proceed only after service proceed only after the planned
Daily Reports are implemented for operations,
8.6q49 8. Operation Q the planned arrangement is satisfactorily completed or approved by relevant authority arrangement is satisfactorily completed or x
maintenance and RQHSE
and as applicable by the customer? approved by relevant authority and as
applicable by the customer
Has the organization retained documented information on the release of products and Daily Reports are implemented for operations,
8.6q50a 8. Operation Q Service conformance records x
services which includes evidence of conformity with the acceptance criteria? maintenance and RQHSE
Has the organization retained documented information on the release of products and Daily Reports are implemented for operations,
8.6q50b 8. Operation Q Traceability of service records x
services which includes traceability to the person(s) authorizing the release? maintenance and RQHSE
8.7 8. Operation Control of nonconforming outputs 6 0 0 0
ensuring that the outputs which do not *Mystery shopper reports are implemented
Does the organization ensure that the outputs which do not conform to their conform to their requirements are identified *Strategic Action Plan is implemented
8.7.1q51 8. Operation Q x
requirements are identified and controlled to prevent their unintended use or delivery? and controlled to prevent their unintended use Non-conformity Reports
or delivery Treatment Plans
*Mystery shopper reports are implemented
Ensuring that action appropriate to the nature
Is the action appropriate to the nature of the nonconformity and its effect on the *Strategic Action Plan is implemented
8.7.1q52 8. Operation Q of the nonconformity and its effect on the x
conformity of product and services? Non-conformity Reports
conformity of product and services
Treatment Plans
*Mystery shopper reports are implemented
considering nonconforming product and
Do the organization also consider nonconforming product and services detected after *Strategic Action Plan is implemented
8.7.1q53 8. Operation Q services detected after delivery of products, x
delivery of products, during and after provision of services? Non-conformity Reports
during and after provision of services
Treatment Plans
taking correction action and/or segregation,
When non-conforming product and services is detected does the organization take *Mystery shopper reports are implemented
containment, return or suspension of provision
correction action and/or segregation, containment, return or suspension of provision of *Strategic Action Plan is implemented
8.7.1q54 8. Operation Q of product & services and/or informing the x
product & services and/or informing the customer and/or obtaining authorization for Non-conformity Reports
customer and/or obtaining authorization for
acceptance under concession? Treatment Plans
acceptance under concession
*Mystery shopper reports are implemented
Has the organization verified conformity to the requirements when nonconforming verifing conformity to the requirements when *Strategic Action Plan is implemented
8.7.1q55 8. Operation Q x
outputs are corrected? nonconforming outputs are corrected Non-conformity Reports
Treatment Plans
*Mystery shopper reports are implemented
Does the organization retain documented information that describes the nonconformity;
*Strategic Action Plan is implemented
8.7.2q56 8. Operation Q describes the actions taken; describes any concession obtained; identifies the authority CAR/PAR Actions records x
Non-conformity Reports
deciding the action in respect of the nonconformity?
Treatment Plans
9 9. Evaluation Performance Evaluation
9.1 9. Evaluation Performance Evaluation - Monitoring, Measurement, Analysis and Evaluation
9.1.1 9. Evaluation Monitoring, Measurement, Analysis and Evaluation - General 14 0 0 0
RQHSE Monthly Reports are implemented
Has your organization established, implemented and maintained a process(es) for HSE Performance Measurement and
9.1.1q1 9. Evaluation E HS x KPI's still ongoing
monitoring, measurement, analysis and performance evaluation? Monitoring Procedure
Dashboard still ongoing
RQHSE Monthly Reports are implemented
Determining what needs to be monitored and
9.1.1q2a 9. Evaluation Q E HS Does your organization determine what needs to be monitored and measured? x KPI's still ongoing
measured
Dashboard still ongoing
RQHSE Monthly Reports are implemented
Does the extent of your organization's monitoring and measurement include the extent Fulfilling legal requirements and other
9.1.1aq2a1 9. Evaluation HS x KPI's still ongoing
to which legal requirements and other requirements are fulfilled? requirements
Dashboard still ongoing
RQHSE Monthly Reports are implemented
Does the extent of your organization's monitoring and measurement include its activities including activities and operations related to
9.1.1aq2a2 9. Evaluation HS x KPI's still ongoing
and operations related to identified hazards, risks and opportunities? identified hazards, risks and opportunities
Dashboard still ongoing

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


RQHSE Monthly Reports are implemented
Does the extent of your organization's monitoring and measurement include progress including progress towards achievement of
9.1.1aq2a3 9. Evaluation HS x KPI's still ongoing
towards achievement of the organization’s OH&S objectives? the organization’s OH&S objectives
Dashboard still ongoing
RQHSE Monthly Reports are implemented
Does the extent of your organization's monitoring and measurement include the including the effectiveness of operational and
9.1.1aq2a4 9. Evaluation HS x KPI's still ongoing
effectiveness of operational and other controls? other controls
Dashboard still ongoing
methods for monitoring, measurement, RQHSE Monthly Reports are implemented
Does your organization determine the methods for monitoring, measurement, analysis
9.1.1q2b 9. Evaluation Q E HS analysis and evaluation needed to ensure x KPI's still ongoing
and evaluation needed to ensure valid results?
valid results Dashboard still ongoing
RQHSE Monthly Reports are implemented
9.1.1q2c 9. Evaluation Q E HS Does your organization determine when monitoring and measuring is performed ? when monitoring and measuring is performed x KPI's still ongoing
Dashboard still ongoing
Criteria against which evaluation of
Does your organization determine the criteria against which the organization evaluates environmental performance and appropriate RQHSE Monthly Reports are implemented
9.1.1q2d 9. Evaluation E HS its environmental performance and appropriate indicators and the criteria against which indicators and the criteria against which the x KPI's still ongoing
the organization will evaluate its OH&S performance? organization will evaluate its OH&S Dashboard still ongoing
performance
determining when the results from monitoring RQHSE Monthly Reports are implemented
Does your organization determine when the results from monitoring and measurement
9.1.1q2e 9. Evaluation Q E HS and measurement are analysed, evaluated x KPI's still ongoing
are analysed, evaluated and communicated?
and communicated Dashboard still ongoing
RQHSE Monthly Reports are implemented
evaluating the performance and the
9.1.1q3 9. Evaluation Q E HS Does your organization evaluate the performance and the effectiveness of the IMS? x KPI's still ongoing
effectiveness of the IMS
Dashboard still ongoing
RQHSE Monthly Reports are implemented
Does your organization ensure that calibrated or verified monitoring and measurement Maintenance and Calibration Records
9.1.1q4 9. Evaluation E HS x KPI's still ongoing
equipment is used and maintained as required? Plan for Preventive Maintenance of Equipment
Dashboard still ongoing
Communicating relevant environmental
Does your organization internally and externally communicate relevant environmental RQHSE Monthly Reports are implemented
performance information as required by its
9.1.1q5 9. Evaluation E performance information as required by its communication process and its compliance x KPI's still ongoing
communication process and its compliance
obligations? Dashboard still ongoing
obligations
Inspection Procedure
Does your organization maintain documented information as evidence of monitoring, RQHSE Monthly Reports are implemented
Calibration Procedure (Calibration of
9.1.1q6 9. Evaluation E HS measurement, analysis and evaluation of results, and results of calibration or verification x KPI's still ongoing
measuring equipment, Software validation,
of measuring equipment? Dashboard still ongoing
Measuring equipment storage)
9.1.2a 9. Evaluation Customer Satisfaction 2 0 0 0
Monitoring customers’ perceptions of the Mystery Shopper Audits are being conducting but
Does your organization monitor customers’ perceptions of the degree to which their
9.1.2aq7 9. Evaluation Q degree to which their needs and expectations x Customer Satisfaction Survey and Customer
needs and expectations have been fulfilled?
have been fulfilled Satisfaction Index are not existing as records
Does your organization determine the methods for obtaining, monitoring and reviewing methods for obtaining, monitoring and Mystery Shopper Audits and records analysis
9.1.2aq8 9. Evaluation Q x
this information? reviewing this information Customer Surveys analysis are not exisiting
9.1.2b 9. Evaluation Monitoring, Measurement, Analysis and Evaluation - Evaluation of Compliance 0 5 0 0
Has your organization established implemented and maintained processes to evaluate
There is no evidence on Evaluation of Compliance
9.1.2bq6 9. Evaluation E HS the fulfilment of its compliance obligations and to establish compliance with legal and Evaluation of Compliance Procedure x
Register
other requirements?
There is no evidence on Evaluation of Compliance
9.1.2bq7a 9. Evaluation E HS Has your organization determined the frequency that compliance is evaluated? frequency that compliance is evaluated x
Register
There is no evidence on Evaluation of Compliance
9.1.2bq7b 9. Evaluation E HS Does your organization evaluate compliance and take action where required? taking action where required x
Does your organization maintain knowledge and understanding of its compliance Register
There is no evidence on Evaluation of Compliance
9.1.2bq7c 9. Evaluation E HS Evaluation of Compliance Procedure x
status?
Does your organization retain documented information of the compliance evaluation Register
There is no evidence on Evaluation of Compliance
9.1.2bq7d 9. Evaluation HS Evaluation of Compliance Record x
results? Register
9.1.3 9. Evaluation Analysis & Evaluation 7 0 1 0
*There is no process of analyzing and evaluating
Analyzing and evaluating data and data and information arising from monitoring and
Does your organization analyse and evaluate appropriate data and information arising
9.1.3q9 9. Evaluation Q information arising from monitoring and x measurement
from monitoring and measurement.
measurement *Monthly Data Statistics Analysis is being run but
without a framework
Mystery Shopper Reports shows the extent od
Does your organization ensure that the results of analysis are used to evaluate evaluating conformity of products and service conformity
9.1.3q10a 9. Evaluation Q x
conformity of products and services? services Internal Audit Plan is ongoing but Car/Par Actions
Record are not existing
Does your organization ensure that the results of analysis are used to evaluate the evaluation of the degree of customer Customer Satisfaction Questionnaires are not
9.1.3q10b 9. Evaluation Q x
degree of customer satisfaction? satisfaction exisiting

Does your organization ensure that results of analysis are used to evaluate the evaluating the performance/effectiveness of Performance Evaluation Records are not existing
9.1.3q10c 9. Evaluation Q x
performance/effectiveness of the IMS? the IMS Internal Auit Plan and Reports are ongoing

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Does your organization ensure that the results of analysis are used to evaluate if evaluating if planning has been implemented
9.1.3q10d 9. Evaluation Q x Performance Evaluation Records are not existing
planning has been implemented effectively? effectively

Does your organization ensure that the results of analysis are used to evaluate the evaluating the effectiveness of actions taken There is no any evidence on ensure the
9.1.3q10e 9. Evaluation Q x
effectiveness of actions taken to address risks and opportunities? to address risks and opportunities effectiveness of implemented actions

Does your organization ensure that the results of analysis are used to evaluate the evaluating the performance of external There are no evidence on external providers
9.1.3q10f 9. Evaluation Q x
performance of external providers? providers evaluation
Does your organization ensure that the results of analysis are used to evaluate the need evaluate the need for improvements to the There are no evidence on improvement action
9.1.3q10g 9. Evaluation Q x
for improvements to the IMS? IMS plans
9.2 9. Evaluation Performance Evaluation - Internal Audit
9.2.1 9. Evaluation Performance Evaluation - Internal Audit - General 3 0 0 0
conducting internal audits at planned intervals
Does your organization conduct internal audits at planned intervals to provide
to provide information on whether the IMS
9.2.1q8 9. Evaluation Q E HS information on whether the IMS conforms to your organization’s own requirements for its x Internal audit plan is approved and is ongoing
conforms to your organization’s own
IMS?
requirements for its IMS
providing information on whether the IMS
Does your organization conduct internal audits at planned intervals to provide
conforms to the requirements of ISO
9.2.1q9a 9. Evaluation Q E HS information on whether the IMS conforms to the requirements of ISO 9001:2015, ISO x Internal audit plan is approved and is ongoing
9001:2015, ISO 14001:2015 and ISO
14001:2015 and ISO 45001:2018?
45001:2018
Does your organization conduct internal audits at planned intervals to provide providing information on whether the IMS is
9.2.1q9b 9. Evaluation Q E HS x Internal audit plan is approved and is ongoing
information on whether the IMS is effectively implemented and maintained? effectively implemented and maintained
9.2.2 9. Evaluation Performance Evaluation - Internal Audit Programme 6 0 0 0
Does your organization plan, establish, implement and maintain EHQMS audit
programme(s) including the frequency, methods, responsibilities, planning requirements
9.2.2q10a 9. Evaluation Q E HS Internal Audit Procedure x Internal Audit Procedure is unapproved
and reporting, which take into consideration the importance of the processes concerned,
changes affecting your organization, and the results of previous audits?
Each conducted audit scope and criteria are
defining the audit criteria and scope for each
9.2.2q10b 9. Evaluation Q E HS Does your organization define the audit criteria and scope for each audit? x mentioned in audits reports, checklists and
audit
select auditors and conduct audits to ensure reports
Does your organization select auditors and conduct audits to ensure objectivity and the
9.2.2q10c 9. Evaluation Q E HS objectivity and the impartiality of the audit x Internal Audit Procedure is unapproved
impartiality of the audit process?
process
Does your organization ensure that the results of the audits are reported to relevant ensuring that the results of the audits are Internal Audit reports are not approved to be sent
9.2.2q10d 9. Evaluation Q E HS x
management? reported to relevant management to relevant management
Corrective actions are written in the audit reports
Does your organization take appropriate correction and corrective actions without undue taking appropriate correction and corrective
9.2.2q10e 9. Evaluation Q E HS x but they are not approved to be reviewing actions
delay? actions without undue delay
estimated and actual dates
Does your organization retain documented information as evidence of the
9.2.2q10f 9. Evaluation Q E HS Internal Audit Records x Internal audit reports and checklists
implementation of the audit programme and the audit results? (See 7.5.1b)
9.3 9. Evaluation Performance Evaluation - Management Review 0 16 0 0
Reviewing IMS, at planned intervals, to ensure
Does Top management review your organization’s IMS, at planned intervals, to ensure its
its continuing suitability, adequacy, Mangement Review Meetings have not been
9.3q11 9. Evaluation Q E HS continuing suitability, adequacy, effectiveness and alignment with the strategic direction x
effectiveness and alignment with the strategic conducted yet
of your organization?
direction of your organization
Is the management review planned and carried out taking into consideration the status Considering the status of actions from Mangement Review Meetings Agenda and actions
9.3q12a 9. Evaluation Q E HS x
of actions from previous management reviews? previous management reviews follow-up is not existing
Is the management review planned and carried out taking into consideration changes in
external and internal issues that are relevant to the IMS? Including:

1. Changes in external and internal issues; there is no evidence on top management review
9.3q12b 9. Evaluation Q E HS Top management review MOM and Reports x
2. Changes in the needs and expectation of interested parties, compliance with MOM and Reports
obligations and legal requirements;
3. Changes in its significant environmental aspects;
4. The effectiveness of actions taken to address risks and opportunities.

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization

Is the management review planned and carried out taking into consideration information
on the performance and effectiveness of the IMS, including trends in:

1. Customer satisfaction;
2. Feedback from relevant interested parties;
3. Incidents, nonconformities, corrective actions and continual improvement;
4. Monitoring and measurement results; there is no evidence on top management review
9.3q12c 9. Evaluation Q E HS Top management review MOM and Reports x
5. Results of evaluation of compliance with legal and other requirements; MOM and Reports
6. Audit results;
7. Consultation and participation of workers;
8. Risks and opportunities;
9. Performance of external providers;
10. Process performance and conformity of products and services;
11. The extent to which QEHS objectives have been met.

Is the management review planned and carried out taking into consideration the there is no evidence on top management review
9.3q12d 9. Evaluation Q E HS considering the adequacy of resources x
adequacy of resources? MOM and Reports
Is the management review planned and carried out taking into consideration the considering the effectiveness of actions taken there is no evidence on top management review
9.3q12e 9. Evaluation Q E HS x
effectiveness of actions taken to address risks and opportunities (see 6.1)? to address risks and opportunities MOM and Reports
Is the management review planned and carried out taking into consideration there is no evidence on top management review
9.3q12f 9. Evaluation Q E HS considering opportunities for improvement x
opportunities for improvement? MOM and Reports
Do the outputs of the management review include decisions and actions related to
there is no evidence on top management review
9.3q12g 9. Evaluation Q E HS opportunities for improvement and the continuing suitability, adequacy and effectiveness Top management review MOM and Reports x
MOM and Reports
of the IMS in achieving its intended outcomes?
Do the outputs of the management review include decisions and actions related to any there is no evidence on top management review
9.3q13 9. Evaluation Q E HS Top management review MOM and Reports x
need for changes to the IMS? MOM and Reports
Do the outputs of the management review include decisions and actions related to there is no evidence on top management review
9.3q14 9. Evaluation Q E HS Top management review MOM and Reports x
resource needs? MOM and Reports
Do the outputs from the management review include decisions related to continual there is no evidence on top management review
9.3q15 9. Evaluation Q E HS Top management review MOM and Reports x
improvement opportunities? MOM and Reports
Do the outputs from the management review include decisions relating to the need for there is no evidence on top management review
9.3q16 9. Evaluation Q E HS Top management review MOM and Reports x
changes to the IMS, including resources? MOM and Reports
Do the outputs from the management review include the actions necessary when there is no evidence on top management review
9.3q17 9. Evaluation Q E HS Top management review MOM and Reports x
objectives are not achieved? MOM and Reports
Do the outputs from the management review include the opportunities to improve the there is no evidence on top management review
9.3q18 9. Evaluation Q E HS Top management review MOM and Reports x
integration of the IMS with other business processes as required? MOM and Reports
Do the outputs from the management review include the implications for the there is no evidence on top management review
9.3q19 9. Evaluation Q E HS Top management review MOM and Reports x
organization’s strategic direction? MOM and Reports
Does your organization retain documented information as evidence of the results of There is no evidence on Management Review
9.3q20 9. Evaluation Q E HS Management Review MOM/ Reports x
management reviews? (See 7.5.1b) Records
10 10. Improvement Improvement
10.1 10. Improvement Improvement - General 1 4 0 0
determining and selecting opportunities for
Does your organization determine and select opportunities for improvement and
improvement and implement any necessary There is no evidence on improvement action
10.1q1 10. Improvement Q E HS implement any necessary actions to meet customer requirements and enhance customer x
actions to meet customer requirements and plans or projects
satisfaction?
enhance customer satisfaction
determining and selecting opportunities for
Does your organization determine and select opportunities for improvement and improvement and implement any necessary There is no evidence on improvement action
10.1q2 10. Improvement E HS x
implement any necessary actions to achieve the intended outcomes of its IMS? actions to achieve the intended outcomes of plans or projects
its IMS
Does your organization determine and select opportunities for improvement and improving products and services to meet
There is no evidence on improvement action
10.1q3 10. Improvement Q E HS implement any necessary actions to improving products and services to meet requirements as well as to address future x
plans or projects
requirements as well as to address future needs and expectations? needs and expectations
*Internal audit plan is approved and is ongoing
Does your organization determine and select opportunities for improvement and implement any necessary actions to
*HSE inspection plan is not approved
10.1q4 10. Improvement Q E HS implement any necessary actions to correcting, preventing or reducing undesired correcting, preventing or reducing undesired x
*Mystery Shopper inspections are being
effects? effects
Does your organization determine and select opportunities for improvement and conducted
improving the performance and effectiveness There is no evidence on improvement action
10.1q5 10. Improvement Q E HS implement any necessary actions to improving the performance and effectiveness of the x
of the IMS plans or projects
IMS?
10.2 10. Improvement Improvement - Incident, Nonconformity and Corrective Action 0 14 0 0
process for corrective and preventive actions
When an incident or nonconformity occurs, including any arising from complaints, does
10.2q2 10. Improvement Q E HS Car/PAR Action Plans x drafted
your organization react to the non-conformity take action to control and correct it?
Treatment Plan drafted

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


process for corrective and preventive actions
When an incident or nonconformity occurs, including any arising from complaints, does
10.2q3a1 10. Improvement Q E HS Car/PAR Action Plans x drafted
your organization react to the non-conformity deal with the consequences?
Treatment Plan drafted
When an incident or nonconformity occurs, including any arising from complaints, does
your organization evaluate, with the participation of workers (see 5.4) and the Incident investigation process (defining root process for corrective and preventive actions
10.2q3a1 10. Improvement Q E HS involvement of other relevant interested parties, the need for corrective action to causw analysis) x drafted
eliminate the root cause(s) of the incident or nonconformity, in order that it does not Car/PAR Actions Treatment Plan drafted
recur or occur elsewhere, by investigating the incident or reviewing the nonconformity?
When an incident or nonconformity occurs, including any arising from complaints, does evaluating, with the participation of workers
your organization evaluate, with the participation of workers (see 5.4) and the (see 5.4) and the involvement of other
There is no process for incident investigation and
10.2q3b1 10. Improvement Q E HS involvement of other relevant interested parties, the need for corrective action to relevant interested parties, the need for x
involving workers and interested parties in it
eliminate the root cause(s) of the incident or nonconformity, in order that it does not corrective action to eliminate the root
recur or occur elsewhere, by determining the cause(s) of the incident or nonconformity? cause(s) of the incident or nonconformity
When an incident or nonconformity occurs, including any arising from complaints, does
evaluating, with the participation of workers
your organization evaluate, with the participation of workers (see 5.4) and the
(see 5.4) and the involvement of other
involvement of other relevant interested parties, the need for corrective action to There is no process for incident investigation and
10.2q3b2 10. Improvement Q E HS relevant interested parties, the need for x
eliminate the root cause(s) of the incident or nonconformity, in order that it does not involving workers and interested parties in it
corrective action to eliminate the root
recur or occur elsewhere, by determining if similar incidents have occurred, if
cause(s) of the incident or nonconformity
nonconformities exist, or if they could potentially occur?
When an incident or nonconformity occurs, including any arising from complaints, does
implementing any needed and review existing
10.2q3b3 10. Improvement Q E HS your organization implement any needed and review existing assessments of OH&S risks x There is no risks review process
assessments of OH&S risks and other risks
and other risks, as appropriate (see 6.1)?
When non-conformities occur, including any arising from complaints, does your reviewing the effectiveness of any corrective There is no process for corrective and preventive
10.2q3c 10. Improvement Q E HS x
organization review the effectiveness of any corrective action taken? action taken actions to be addressed
When non-conformities occur, including any arising from complaints, does your updating risks and opportunities determined
organization update risks and opportunities determined during planning, if necessary, as during planning, if necessary, as well as There is no process for corrective and preventive
10.2q3d 10. Improvement Q E HS x
well as assessing OH&S risks that relate to new or changed hazards, prior to taking assessing OH&S risks that relate to new or actions to be addressed
action? changed hazards, prior to taking action
When non-conformities occur, including any arising from complaints, does your determine and implement any action needed,
organization determine and implement any action needed, including corrective action, in including corrective action, in accordance with There is no process for corrective and preventive
10.2q3e 10. Improvement HS x
accordance with the hierarchy of controls (see 8.1.2) and the management of change the hierarchy of controls (see 8.1.2) and the actions to be addressed
(see 8.1.3)? management of change
When non-conformities occur, including any arising from complaints, does your Applying changes resulted from Corrective There is no process for corrective and preventive
10.2q3f 10. Improvement Q E HS x
organization makes changes to the IMS as necessary? and preventive actions actions to be addressed
ensuring that corrective actions are
Does your organization ensure that corrective actions are appropriate to the effects of There is no process for corrective and preventive
10.2q3g 10. Improvement Q E HS appropriate to the effects of the incident or x
the incident or nonconformity encountered? actions to be addressed
nonconformity encountered
Does your organization retain documented information as evidence of the nature of the Incident investigation records including root There is no evidence on incident investigation
10.2q14 10. Improvement Q E HS x
incident or nonconformity and any subsequent actions taken? (See 7.5.1b) cause analysis records
Does your organization retain documented information as evidence of the nature of the
10.2q15 10. Improvement Q E HS CAR/PAR Actions Records x There is no evidence on CAR/PAR records
results of any corrective action? (See 7.5.1b)
communicating this documented information
There is no process for cmmunicating incident
Does your organization communicate this documented information to relevant workers, to relevant workers, and, where they exist,
10.2q16 10. Improvement Q E HS x investigation and involving workers and
and, where they exist, workers’ representatives, and other relevant interested parties? workers’ representatives, and other relevant
interested parties in it
interested parties
10.3 10. Improvement Continual Improvement 0 7 0 0
Does your organization continually improve the suitability, adequacy and effectiveness of improving the suitability, adequacy and there is no evidence on implementing
10.3q17 10. Improvement Q E HS x
the IMS? effectiveness of the IMS improvement for QHSE system
outputs from management review, to
Does your organization consider the results of analysis and evaluation, and the outputs
determine if there are needs or opportunities
10.3q18 10. Improvement Q E from management review, to determine if there are needs or opportunities that can be x There is no a management review report
that can be addressed as part of continual
addressed as part of continual improvement?
improvement
Does your organization continually improve the suitability, adequacy and effectiveness of There is no evidence on actions to enhance QHSE
10.3q19a 10. Improvement Q E HS enhancing QEHS performance x
the management system, by enhancing QEHS performance? performance
training and awarness sessions are being
Does your organization continually improve the suitability, adequacy and effectiveness of
10.3q19b 10. Improvement HS promoting a culture that supports an IMS x conducting but there is no plan or schadule as an
the management system, by promoting a culture that supports an IMS?
evidence
Does your organization continually improve the suitability, adequacy and effectiveness of promoting the participation of workers in
There is no evidence on communication and
10.3q19c 10. Improvement HS the management system, by promoting the participation of workers in implementing implementing actions for the continual x
workers participation process
actions for the continual improvement of the IMS? improvement of the IMS
Does your organization continually improve the suitability, adequacy and effectiveness of communicating the relevant results of
There is no evidence on communication and
10.3q19d 10. Improvement HS the management system, by communicating the relevant results of continual continual improvement to workers, and, where x
workers participation process
improvement to workers, and, where they exist, workers’ representatives? they exist, workers’ representatives

_x000D_ LIMITED SHARING


#
Audit Findings

ISO

ISO
14001:2015

45001:2018
ISO 9001:2015

Compliant

Minor NC

Major NC
Clause
Main Clauses ISO Integrated Audit Questions Objective Evidence Audit Evidence & Notes

OFI
No.

4 4. Context Context of the Organization


Does your organization continually improve the suitability, adequacy and effectiveness of
Continuous Improvement Procedure
10.3q19e 10. Improvement HS the management system, by maintaining and retaining documented information as x There is no evidence on theses requirements
Continuous Improvement Plan
evidence of continual improvement?

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

Defining all these resources for


each process separately

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

Service acceptance criteria are


not mentioned directly

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

if there is a procedure for the


Control of outsourcing
highlighting the process of
auditing outsourced processes
this will sustain the ensurance
process

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Opportunities For Improvement
(OFI)

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

50

100

100

50

50

50

50

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

50

100

50

50

50

50

50

50

100

100

100

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

50

50

50

50

50

50

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

50

100

50

50

50

50

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

50

50

50
50
50
50

50
50
50
50
50

50

50
50
50

50

50

50

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

100

50

100

50

50

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

50

100

100

50

50

50

50

50

50

50

50

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100
100
100

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

100

100

100

100

100

100

100

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

100

50

50

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

100

50

50

50

100

100

50

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100
100

100

100

100

100

100

100

100
100
100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

50

100
100
50

50

100

50

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

50

50
50
50
50

100

100

100

100

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

100

100

100

100

100

100

100

100

100

100

100

100

50

50

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

100

50

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

50

_x000D_ LIMITED SHARING


#
Audit 0 Entries yet to be entered
Score 0 Errors

Status % Error Checking Summary

50

_x000D_ LIMITED SHARING


#
I S O I M S AU D I T &

No. Audit Questions ISO IMS Compliance

434 62% 77% 85% 87% 9

No. Compliant se t ip g t
ex sh in or
lau t r n p
ra
C on e la
n u p
n .C ad .S pe
ai .P

292
4 L e 7 .O
M 6
5. 8

No. Major NC Data Column C

1 ISO IMS Compliance, NC and OF


No. Minor NC
0
24
0 0
14
21

141
0
17 33 60 44
12
se xt t
hi
p ng or
lau n te rs n ni p p
r
C e
No. OFI n Co ad Pl
a S u
pe
ai 4 .
Le 6. 7. . O
M
5. 8

0 Data Column C Column D Column

_x000D_ LIMITED SHARING


#
M S AU D I T & C O M P L I A N C E D A S H B O A R D

O IMS Compliance

85% 87% 94% 84% 53% Audit Score


g t n n t
in p or tio tio en
n p a a
an Su pe
r
al
u
ve
m
v
7. . O E p r o
8 9. I m
1 0.

85%
Data Column C

Compliance, NC and OFIs


0
19
0
24 0
14 110 0
1
60 21
44 32 0
25
1
t
ng or io
n
tio
n
en
t
n ni p p
r at a
u u m
la S pe al ve
7. .O Ev p r o
8 9. I m
1 0.

olumn C Column D Column E

D A S H B O A R D

_x000D_ LIMITED SHARING


#
D

This shape represents a slicer.


it Score Slicers are supported in Excel
2010 or later.
Total High Priority
If the shape was modified in
an earlier version of Excel, or
if the workbook was saved in
Excel 2003 or earlier, the
slicer cannot be used.

5%

_x000D_ LIMITED SHARING


#
_x000D_ LIMITED SHARING
#
Clause No. Sub Clause
Understanding the organization and
4.1 its context
Understanding the needs and
expectation of workers and other
4.2 interested parties
Determining the scope of the
4.3 management system
4.4 Integrated Management System

_x000D_ LIMITED SHARING


#
Audit Findings
Thematic Area Main Clause Compliant

4.1 Organizational Context 4. Context 0

4.2 Relevant Interested Parties 4. Context 0

4.3 Management System Scope 4. Context 0


4.4 QEHS Management System 4. Context 12

_x000D_ LIMITED SHARING


#
Audit Findings
Minor NC Major NC OFI % Compliance Target

2 0 0 50% 100%

4 0 0 50% 100%

10 0 0 50% 100%
1 0 0 96% 100%

_x000D_ LIMITED SHARING


#
This shape represents a table
slicer. Table slicers are not
supported in this version of
Excel.

RefIf the shape was modified in


an earlier version of Excel, or
if the workbook was saved in
Excel 2007 or earlier, the
4.1q2slicer can't be used.

4.2q3a

4.3q9

5.1.1q1a

5.1.1q1b

5.1.1q1c

5.2.2q1c

5.2.2q1d

_x000D_ LIMITED SHARING


#
6.2.1q19

6.2.1q19

6.2.2q20

7.1.2q4

7.1.4q6

7.3q4

7.3q7

_x000D_ LIMITED SHARING


#
Err:508

8.1aq1

8.1aq2

8.1aq3

8.1bq14

_x000D_ LIMITED SHARING


#
Err:508

Err:508

Err:508

Err:508

Err:508

Err:508

8.5.1q35

_x000D_ LIMITED SHARING


#
9.1.2bq6
9.1.2bq7
9.1.2bq7

9.1.3q10

9.3q11

9.3q12a

_x000D_ LIMITED SHARING


#
9.3q12b

9.3q12d

9.3q12e

10.2q3d

10.2q3g

10.2q16

10.3q19

10.3q19

_x000D_ LIMITED SHARING


#
This shape represents a table
slicer. Table slicers are not NC, CAPA & Action Plan
supported in this version of
Excel.

If the shape was modified in Audit Question


an earlier version of Excel, or
if theDoes
workbook
your wasorganization
saved in monitor and review information about these external and
Excel 2007 or earlier, the
slicerinternal issues?
can't be used.
Has your organization determined the interested parties and workers that are
relevant
Has yourto the IMS? applied all the requirements of ISO 9001:2015, ISO
organization
14001:2015 and ISO 45001:2018 if they are applicable within the determined scope
of the IMS?

Does Top Management demonstrated leadership and commitment to the IMS by


taking accountability for the effectiveness of your organization’s IMS?

Does Top Management demonstrated leadership and commitment to the IMS by


ensuring that QHSE policies and objectives are established and documented, and
are compatible your organization’s goals (See 6.2) and its context (See 4.0)?
Does Top Management demonstrated leadership and commitment to the IMS by
ensuring that QEHS requirements are integrated into your organization’s processes?

Is the QEHS policy available to interested parties, as appropriate?

Is the QEHS policy relevant and appropriate?

_x000D_ LIMITED SHARING


#
Do your organization's objectives take into the results of the assessment of risks
and opportunities (see 6.1.2.2 and 6.1.2.3)?
Do your organization's objectives take into the results of consultation with workers
(see 5.4) and, where they exist, workers’ representatives?
When planning how to achieve its objectives, Has your organization determine when
it will be completed?

Does your organization determine and provide the staff necessary resources for the
effective implementation of its IMS and for the operation and control of its
processes?
Does organization determine, provide and maintain the environment necessary for
the operation of its processes and to achieve conformity of products and services?

Does your organization ensure workers are aware of the relevant objectives, actual
and potential work-related aspects and their contribution to the IMS performance,
including the benefits of improved performance?

Does your organization ensure that workers are aware of the implications of not
conforming to the IMS requirements and not fulfilling the organization’s compliance
objectives?

_x000D_ LIMITED SHARING


#
Does your organization plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by determining the requirements for
the
Doesproducts and services?
your organization plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by establishing criteria for the
processes?
Does your organization plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by establishing criteria for the
acceptance of products and services?

Does the organization control planned changes and review the consequences of
unintended changes, and taking action to mitigate any adverse effects?

_x000D_ LIMITED SHARING


#
Are any suitable monitoring and measuring resources available? Are they being
used?

_x000D_ LIMITED SHARING


#
Has your organization established implemented and maintained processes to
evaluate the fulfilment of its compliance obligations and to establish compliance
with legal and other requirements?
Has your organization determined the frequency that compliance is evaluated?
Does your organization evaluate compliance and take action where required?

Does your organization ensure that the results of analysis are used to evaluate the
need for improvements to the IMS?
Does Top management review your organization’s IMS, at planned intervals, to
ensure its continuing suitability, adequacy, effectiveness and alignment with the
strategic direction of your organization?
Is the management review planned and carried out taking into consideration the
status of actions from previous management reviews?

_x000D_ LIMITED SHARING


#
Is the management review planned and carried out taking into consideration
changes in external and internal issues that are relevant to the IMS? Including:

1. Changes in external and internal issues;


2. Changes in the needs and expectation of interested parties, compliance with
obligations and legal requirements;
3. Changes in its significant environmental aspects;
4. The effectiveness of actions taken to address risks and opportunities.
Is the management review planned and carried out taking into consideration the
adequacy of resources?
Is the management review planned and carried out taking into consideration the
effectiveness of actions occur,
When non-conformities taken to addressany
including risks and opportunities
arising (seedoes
from complaints, 6.1)?your
organization update risks and opportunities determined during planning, if
necessary, as well as assessing OH&S risks that relate to new or changed hazards,
prior to taking action?

Does your organization ensure that corrective actions are appropriate to the effects
of the incident or nonconformity encountered?
Does your organization communicate this documented information to relevant
workers, and, where they exist, workers’ representatives, and other relevant
interested parties?

Does your organization continually improve the suitability, adequacy and


effectiveness of the management system, by enhancing QEHS performance?
Does your organization continually improve the suitability, adequacy and
effectiveness of the management system, by promoting a culture that supports an
IMS?

_x000D_ LIMITED SHARING


#
Type of Non-
Main Clause Sub-clause
compliance
Stakeholders Engagement
Management
and interface Review MOM
Management Minor NC
4. Context Strategic Action parties
Plan (Interested Plan can
be documented in the form of Minor NC
4. Context a map)

Minor NC
4. Context

Minor NC
5. Leadership

Minor NC
5. Leadership

Minor NC
5. Leadership

Minor NC
5. Leadership

Minor NC
5. Leadership

_x000D_ LIMITED SHARING


#
Minor NC
6. Planning

Minor NC
6. Planning

Minor NC
6. Planning

Minor NC
7. Support

Minor NC
7. Support

Minor NC
7. Support

Minor NC
7. Support

_x000D_ LIMITED SHARING


#
Err:508

8. Operation Minor NC

8. Operation Minor NC

8. Operation Minor NC

Change Management Plan


8. Operation Emergency Response Plan Minor NC

_x000D_ LIMITED SHARING


#
Err:508

Err:508

Err:508

Err:508

Err:508

Err:508

8. Operation Minor NC

_x000D_ LIMITED SHARING


#
9. Evaluation Minor NC
9. Evaluation Minor NC
9. Evaluation Minor NC

9. Evaluation Major NC

9. Evaluation Minor NC

9. Evaluation Minor NC

_x000D_ LIMITED SHARING


#
9. Evaluation Minor NC

9. Evaluation Minor NC

9. Evaluation Minor NC

10.
Improvement Minor NC

10.
Improvement Minor NC

10.
Improvement Minor NC

10.
Improvement Minor NC

10.
Improvement Minor NC

_x000D_ LIMITED SHARING


#
Root Cause
Inadequate
Organizational
Context
Inadequate
Organizational
Context
Inadequate
Organizational
Context
Inadequate
Organizational
Context
Inadequate
Organizational
Context

Lack of Leadership
and Commitment

Lack of Leadership
and Commitment
Lack of Leadership
and Commitment

Lack of Leadership
and Commitment
Lack of Leadership
and Commitment
Lack of Leadership
and Commitment
Lack of Leadership
and Commitment

Inadequate Planning

_x000D_ LIMITED SHARING


#
Inadequate Planning

Inadequate Planning

Inadequate Planning

Inadequate Planning

Inadequate Planning

Inadequate Planning

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

_x000D_ LIMITED SHARING


#
Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Support

Inadequate Quality
Planning and Control

Inadequate Quality
Planning and Control

Inadequate Quality
Planning and Control

Inadequate Quality
Planning and Control
Inadequate Quality
Planning and Control
Inadequate Quality
Planning and Control
Inadequate
Environmental
Planning and Control
Inadequate
Environmental
Planning and Control
Inadequate
Operational Planning
and Control
Inadequate
Emergency
Preparedness and
Response

_x000D_ LIMITED SHARING


#
Inadequate
Emergency
Preparedness and
Response
Inadequately
Determined Product
and Services
Requirements
Inadequate Review of
Product and Services
Requirements
Inadequate Review of
Product and Services
Requirements
Inadequate Review of
Product and Services
Requirements
Inadequate Control of
Production and
Service Provision
Inadequate Design
and Development
Review
Inadequate
Documented
Information
Inadequate Design
and Development
Input
Inadequate Design
and Development
Input
Inadequate Design
and Development
Control
Inadequate Design
and Development
Output
Inadequate External
Control
Inadequate External
Control
Inadequate Control of
Production and
Service Provision
Inadequate
Communication with
External Providers
Inadequate
Monitoring and
Measurement
Resources

_x000D_ LIMITED SHARING


#
Inadequate Control of
Production and
Service Provision
Lack of Identification
and Traceability
Lack of Identification
and Traceability

Lack of Organizational
Knowledge
Inadequate Control of
Nonconforming
Products and Services

Lack of Documented
Information
Inadequate
Evaluation

Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation

Inadequate
Evaluation
Inadequate
Evaluation

_x000D_ LIMITED SHARING


#
Inadequate
Evaluation
Inadequate
Evaluation
Inadequate
Evaluation
Lack of Continual
Improvement of QEHS
System
Lack of Continual
Improvement of QEHS
System
Lack of Continual
Improvement of QEHS
System
Lack of Continual
Improvement of QEHS
System
Lack of Continual
Improvement of QEHS
System

_x000D_ LIMITED SHARING


#
Corrective Action and Preventive Action

Organization must monitor and review information about these external and
internal issues?
Organization must determined the interested parties and workers that are
relevant to the
Organization QEHS
must management
apply system
all the requirements of ISO 9001:2015, ISO 14001:2015
and ISO 45001:2018 if they are applicable within the determined scope of the
QEHS management system?
Organization must determine the resources needed for these processes and
ensure their availability
Organization must retain documented information to have confidence that the
processes are being carried out as planned

Ensure top management demonstrate leadership and commitment to the QEHS


management system by taking accountability for the effectiveness of your
organization’s QEHS management system
Ensure top management demonstrate leadership and commitment to the QEHS
management system by ensuring that your organization’s environmental
policies and objectives are established and documented, and are compatible
your
Ensureorganization’s goals demonstrated
top management (See 6.2) and its context (See
leadership 4.0)
and commitment to the
QEHS management system by ensuring that QEHS requirements are integrated
into your organization’s processes

Make QEHS policy available to interested parties, as appropriate

Ensure the QEHS policy relevant and appropriate


Ensure Top management assigns the responsibility and authority for ensuring
that thethe
Ensure processes are delivering
organization emphasizestheir
theintended outputs
participation non-managerial workers in
determining control measures and their effective implementation and use? (see
8.1, 8.1.3 and 8.2)
Ensure the organization emphasizes the participation non-managerial workers in
investigating incidents and nonconformities and determining corrective actions?
(see 10.2)

When determining the risks and opportunities for the QEHS management
system and its intended outcomes that need to be addressed, the organization
must take into account legal requirements and other requirements (see 6.1.3)

_x000D_ LIMITED SHARING


#
Organization must ensure the action taken to address risks and opportunities is
proportionate to the potential impacts on the conformity of products and
services
Organization must plan actions to integrate and implement the actions into
QEHS management system processes
The organization's objectives must take into the results of the assessment of
risks and opportunities (see 6.1.2.2 and 6.1.2.3)
The organization's objectives must take into the results of consultation with
workers (see 5.4) and, where they exist, workers’ representatives?
When planning how to achieve its objectives, your organization must determine
when it will be completed
Your organization must consider and maintain the integrity of the QEHS
management system during the change process

Your organization must determine and provide the staff necessary resources for
the effective implementation of its QEHS management system and for the
operation andmust
Organization control of its processes
determine, provide and maintain the environment necessary
for the operation of its processes and to achieve conformity of products and
services
Organization must ensure that the resources provided are suitable for the
specific type of monitoring and measurement activities being undertaken;
Where no such standard is existing, documented information must be retained
for the basis used for calibration or verification
Organization must maintain this knowledge and make it available to the extent
necessary

Organization must ensure that these persons are competent (including the
ability to identify OHS hazards and environmental aspects) on the basis of
appropriate education, training, or experience
Organization must retain appropriate documented information as evidence of
competence? (See 7.5.1b)
Organization must ensure workers are aware of the relevant objectives, actual
and potential work-related aspects and their contribution to the QEHS
management system performance, including the benefits of improved
performance.

Organization must ensure that workers are aware of the implications of not
conforming to the QEHS management system requirements and not fulfilling the
organization’s compliance objectives
Organization must determine the internal and external communications
relevant to the QEHS management system, including how to communicate
Organization must take into account its compliance obligations and legal
requirements when establishing its communication process

_x000D_ LIMITED SHARING


#
Organization must internally communicate information relevant to the QEHS
management system including changes to the QEHS management system as
appropriate
Organization must externally communicate information relevant to the QEHS
management system, via the communications process and as required by the
compliance obligations,
Organization’s legal requirements
QEHS management and other
system must requirements
include documented
information as evidence of communication as required by ISO 9001:2015, ISO
14001:2015 and
Organization’s ISO 45001:2018
QEHS management system must include documented
information determined by your organization as being necessary for the
effectiveness of the QEHS management system
For the control of documented information, organization must address retention
and disposition
Organization must ensure documented information of external origin is
identified and controlled
Organization must plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by determining the requirements
for the products
Organization and
must services
plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by establishing criteria for the
processes
Organization must plan, implement and control the processes (see 4.4) needed
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by establishing criteria for the
acceptance
Organizationofmust
products
plan,and servicesand control the processes (see 4.4) needed
implement
to meet the requirements for the provision of products and services, and to
implement the actions determined in Clause 6 by implementing control of the
processes in accordance with the criteria
Ensure that the outputs of the planning process suitable for your organization’s
operations
Organization must control planned changes and review the consequences of
unintended changes, taking action to mitigate any adverse effects, as
necessary
Organization must control planned changes and review the consequences of
unintended changes, and taking action to mitigate any adverse effects

Organization must communicate the relevant environmental requirements to


external providers and contractors

Organization must plan, implement, control and maintain the processes needed
to meet requirements of the QEHS management system, and to implement the
actions determined in Clause 6, by establishing criteria for the processes

Organization must establish a planned response to emergency situations,


including the provision of first aid

_x000D_ LIMITED SHARING


#
Organization must provide training for the planned response

When determining the requirements for the products and services to be offered
to customers, the organization must ensure that the requirements for the
products and services are defined, including those considered necessary by
your organization
Organization must conduct a review before committing to supply products and
services to a customer, including requirements specified by the customer,
including the requirements for delivery and post-delivery activities

Organization must conduct a review before committing to supply products and


services to a customer, including requirements specified by your organization

Customer’s requirements must be confirmed by your organization before


acceptance, when the customer does not provide a documented statement of
their requirements
Organization must ensure that the relevant documented information is
amended and the relevant persons are made aware of the changed
requirements, when the requirements for the products and services are
changed
In determining the stages and controls for design and development, the
organization must take into consideration the required process stages including
design and development reviews
In determining the stages and controls for design and development, the
organization must take into consideration the documented information needed
to demonstrate that design and development requirement have been met

The organization must consider functional and performance requirements


The organization must ensure that the inputs are adequate for design and
development purpose, complete and unambiguous
The organization must conduct the verification to ensure that design and
development meet input requirements
The organization must ensure that design and development outputs are
adequate for the subsequent processes for provision of product and services
The organization must ensure that the externally provided process remain
within the control of its QMS
The organization must define the controls to be applied to external provider and
its resulting outputs
The organization must communicate to the external providers its requirements
for the approval of the product and services; methods, processes and
equipment; the release of product and services
The organization must communicate to the external providers its requirements
for control and monitoring of the external providers’ performance to be applied
by the organization

Ensure suitable monitoring and measuring resources available and are used

_x000D_ LIMITED SHARING


#
The organization must implemented any release, delivery and post-delivery
activities
Ensure the status of outputs with respect to monitoring and measuring
requirements throughout the production and service provision being identified
by the organization
The organization must retain the documented information necessary to enable
traceability, when traceability is a requirement
The organization must ensure that the release of product and service proceed
only after the planned arrangement is satisfactorily completed or approved by
relevant authority and as applicable by the customer

The organization must also consider nonconforming product and services


detected after delivery of products, during and after provision of services

The organization must retain documented information that describes the


nonconformity; describes the actions taken; describes any concession obtained;
identifies the authority deciding the action in respect of the nonconformity
The organization must determine what needs to be monitored and measured
The organization must determine the criteria against which the organization
evaluates its environmental performance and appropriate indicators and the
criteria against which the organization will evaluate its OH&S performance
The organization must ensure that calibrated or verified monitoring and
measurement equipment is used and maintained as required
Organization must monitor customers’ perceptions of the degree to which their
needs and expectations have been fulfilled
Organization must establish, implement and maintain processes to evaluate the
fulfilment of its compliance obligations and to establish compliance with legal
and other requirements
Organization must determine the frequency that compliance is evaluated
Organization must evaluate compliance and take action where required
Does your organization ensure that the results of analysis are used to evaluate
the degree of customer satisfaction?
Does your organization ensure that the results of analysis are used to evaluate
the need for improvements to the QEHS management system?
Does Top management review your organization’s QEHS management system,
at planned intervals, to ensure its continuing suitability, adequacy, effectiveness
and alignment with the strategic direction of your organization?
Ensure management review is planned and carried out taking into consideration
the status of actions from previous management reviews

_x000D_ LIMITED SHARING


#
Ensure management review is planned and carried out taking into consideration
changes in external and internal issues that are relevant to the QEHS
management system? Including:

1. Changes in external and internal issues;


2. Changes in the needs and expectation of interested parties, compliance with
obligations and legal requirements;
3. Changes in its significant environmental aspects;
4. The effectiveness of actions taken to address risks and opportunities.
Ensure management review is planned and carried out taking into consideration
the adequacy of resources
Ensure management review is planned and carried out taking into consideration
the effectiveness of actions taken to address risks and opportunities (see 6.1)
When non-conformities occur, including any arising from complaints, your
organization must update risks and opportunities determined during planning, if
necessary, as well as assessing OH&S risks that relate to new or changed
hazards, prior to taking action
Organization must ensure that corrective actions are appropriate to the effects
of the incident or nonconformity encountered

Organization must communicate this documented information to relevant


workers, and, where they exist, workers’ representatives, and other relevant
interested parties?

Organization must continually improve the suitability, adequacy and


effectiveness of the management system, by enhancing QEHS performance

Organization must continually improve the suitability, adequacy and


effectiveness of the management system, by promoting a culture that supports
an QEHS management system

_x000D_ LIMITED SHARING


#
Responsibl Action
Target date Days Due Priority
e Status

High
HSE Manage 30-Jun -1303 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May Closed

High
HSE Manage 31-May -1333 Open

High

HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May Closed

High
HSE Manage 31-May -1333 Open

High

HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May Closed

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High

HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May Closed

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open
HSE Manage 31-May -1333 High Open

High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open
HSE Manage 31-May -1333 High Open
HSE Manage 31-May -1333 High Open
High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
High

HSE Manage 31-May -1333 Open


High
HSE Manage 31-May -1333 Open
High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

High
HSE Manage 31-May -1333 Open

_x000D_ LIMITED SHARING


#
_x000D_ LIMITED SHARING
#
Data
Sum of Compliant 292
Sum of Minor NC 141
Sum of Major NC 1
Sum of OFI 0

292

141

Sum of Compliant Sum of Minor N

_x000D_ LIMITED SHARING


#
Audit Findings

141

1 0
Sum of Minor NC Sum of Major NC Sum of OFI

_x000D_ LIMITED SHARING


#
This shape represents a slicer.
Slicers are supported in Excel
2010 or later. Sum of Complia
Sum of Major N
If the shape was modified in Sum of Minor N
an earlier version of Excel, or
Sum of OFI
if the workbook was saved in
Excel 2003 or earlier, the Total
slicer cannot be used.

_x000D_ LIMITED SHARING


#
292
1
141
0
434

_x000D_ LIMITED SHARING


#
Data
Main Clause Average of Target Average of % Compliance IS
4. Context 100% 62%
5. Leadership 100% 77%
6. Planning 100% 85%
7. Support 100% 87%
8. Operation 100% 94%
9. Evaluation 100% 84%
10. Improvement 100% 53%
Total Result 100% 85%

62% 77%

se t ip
ex sh
lau t r
C on e
n .C ad
ai 4 L e
6
M
5.

_x000D_ LIMITED SHARING


#
ISO IMS Compliance

62% 77% 85% 87% 94% 84% 53%

t ip t
ex ng or io
n
tio
n
en
t
t r sh ni p at a
on e n p r u em
.C ad la Su pe al
ov
4 L e
6 .P 7. . O Ev r
p
5. 8 9. m
.I
10

Data Column C

_x000D_ LIMITED SHARING


#
This shape represents a slicer.
Slicers are supported in Excel
2010 or later.

If the shape was modified in


an earlier version of Excel, or
if the workbook was saved in
Excel 2003 or earlier, the
slicer cannot be used.

_x000D_ LIMITED SHARING


#
85%

_x000D_ LIMITED SHARING


#
15%

_x000D_ LIMITED SHARING


#
COMPANY LOGO AUDIT REPORT REV:

Company Date of Audit

Auditor Audit Standard(s)

Audit Summary:

Auditor to attach supporting documents e.g. Checklists, evidence of compliance, etc)


Attendees:

Summary of Non Conformities Raised

Summary of Observations Raised

Summary of OFI Raised

Noteworthy Efforts

Comments of Auditee:

The attached NCR’s and observations are all noted and their content, basic cause and corrective/preventative action agreed with.

Signed__________________________________________ Auditee

(Signature confirms acceptance of findings raised and that results of the audits have been brought to the attention of all personnel
having responsibility in the area involved)

137_x000D_ LIMITED SHARING


# C
COMPANY LOGO AUDIT REPORT REV:

Signed :_________________________________________ Auditor

138_x000D_ LIMITED SHARING


# C
COMPANY LOGO AUDIT REPORT REV:

Audit Number:

Department

compliance, etc)

basic cause and corrective/preventative action agreed with.

the audits have been brought to the attention of all personnel


he area involved)

139_x000D_ LIMITED SHARING


# C
COMPANY LOGO AUDIT REPORT REV:

140_x000D_ LIMITED SHARING


# C
Data
Main Clause Sum of CompSum of MinoSum of MajoSum of OFI 140
4. Context 12 17 0 0
5. Leadership 33 21 0 0
120
6. Planning 60 24 0 0
7. Support 44 14 0 0
8. Operation 110 19 0 0 100
9. Evaluation 32 21 1 0
10. Improvement 1 25 0 0 80
Total Result 292 141 1 0
60

2
40

0
20 17
3
12
0
Main Clause 4. Context 5. Lead

_x000D_ LIMITED SHARING


#
ISO IMS Compliance Status

0
19

24

0
0 110 0
1
14
21 21

0 60
0
17 44
33 32 25
12
1
Clause 4. Context 5. Leadership 6. Planning 7. Support 8. Operation 9. Evaluation 10. Improvement

Data Column C Column D Column E

_x000D_ LIMITED SHARING


#
This shape represents a slicer.
Slicers are supported in Excel
2010 or later.

If the shape was modified in an


earlier version of Excel, or if the
workbook was saved in Excel
2003 or earlier, the slicer cannot
be used.

25

1
10. Improvement

_x000D_ LIMITED SHARING


#
Thematic Area
4.1 Organizational Context
4.2 Relevant Interested Parties
4.3 Management System Scope
6.2.2 Objectives & Planning to Achieve Them
7.2 Competence
7.3 Awareness
7.4.2 Internal communication
7.4.3 External communication
7.5.3 Documented Information - Control
8.1.4.1 Procurement - General
9.1.1 Monitoring, Measurement, Analysis and Evaluation - General
5.1.1 General
5.1.2 Customer Focus
5.2.1 Developing the Policy
5.2.2 Communicating the Policy
5.3 Roles, Responsibilities and Authority
5.4. Consultation and Participation
6.1.1 Action to Address Risk and Opportunities
6.1.2a Environmental Aspects
6.1.2b.1 Hazard Identification
6.1.2b.2 Assessment of OH&S risks and Other Risks
6.1.2b.3 Assessment of OH&S Opportunities and Other Opportunities
6.1.3 Determining Legal Requirements
6.1.4 Planning Actions
6.2.1 QEHS Objectives
6.2.2 Planning for Change
7.1.1 General
7.1.2 People
7.1.3 Infrastructure
7.1.4 Environment for the Operation of Processes
7.1.5.1 General
7.1.5.2 Measurement Traceability
7.1.6 Organizational knowledge
7.4.1 Communcation - General
7.5.2 Creating and Updating
8.1a Quality Planning & Control
8.1b Environmental Planning & Control
8.1.2 Operation - Eliminating Hazards and Reducing OH&S Risks
8.1.3 Operation - Management of Change
8.1.4.2 Procurement - Contractors
8.1.4.3 Procurement - Outsourcing
8.2a Emergency Preparedness & Response
8.2b.1 Customer communication

_x000D_ LIMITED SHARING


#
8.2b.2 Determining the requirements for products and services
8.2b.3 Review of the requirements for products and services
8.2b.4 Changes to requirements for products and services
8.3.1 General
8.3.2 Design and development planning
8.3.3 Design and Development inputs
8.3.4 Design and development controls
8.3.5 Design and Development outputs
8.3.6 Design and Development changes
8.4.1 General
8.4.2 Type and extent of control
8.4.3 Information for external providers
8.5.1 Control of production and service provision
8.5.2 Identification and traceability
8.5.3 Property belonging to customers or external providers
8.5.4 Preservation
8.5.5 Post-delivery activities
8.5.6 Control of change
8.6 Release of products and services
8.7 Control of nonconforming outputs
9.1.2a Customer Satisfaction
9.1.2b Monitoring, Measurement, Analysis and Evaluation - Evaluation of Complianc
9.1.3 Analysis & Evaluation
9.2.1 Performance Evaluation - Internal Audit - General
9.2.2 Performance Evaluation - Internal Audit Programme
9.3 Performance Evaluation - Management Review
10.1 Improvement - General
10.2 Improvement - Incident, Nonconformity and Corrective Action
10.3 Continual Improvement
4.4 QEHS Management System
7.5.1 Documented Information
8.1.1 OH&S Operational Planning & Control
Total Result

_x000D_ LIMITED SHARING


#
Average of % Compliance This shape represents a slicer.
50% Slicers are supported in Excel
50% 2010 or later.
50%
If the shape was modified in
50%
an earlier version of Excel, or
90% if the workbook was saved in
50% Excel 2003 or earlier, the
100% slicer cannot be used.
100%
94%
100%
100%
61%
100%
50%
50%
100%
100%
100%
64%
97%
100%
100%
100%
93%
50%
100%
83%
50%
100%
50%
88%
100%
100%
100%
100%
85%
67%
50%
100%
100%
100%
100%
100%

_x000D_ LIMITED SHARING


#
100%
100%
100%

100%
100%
100%
78%
100%
100%
100%
100%
100%
100%
100%
100%
50%
88%
100%
100%
50%
60%
50%
50%
96%
100%
75%
85%

_x000D_ LIMITED SHARING


#
Action Status Count of Action Status
Closed 4 Actio
Open 85
(empty)
Total Result 89

85

4
Closed Open

_x000D_ LIMITED SHARING


#
This shape represents a
Action Open vs Closed slicer. Slicers are supported
in Excel 2010 or later.

If the shape was modified i


an earlier version of Excel,
or if the workbook was sav
in Excel 2003 or earlier, th
slicer cannot be used.

89
85

Open (empty) Total Result

_x000D_ LIMITED SHARING


#
This shape represents a
slicer. Slicers are supported
in Excel 2010 or later.

If the shape was modified in


an earlier version of Excel,
or if the workbook was saved
in Excel 2003 or earlier, the
slicer cannot be used.

_x000D_ LIMITED SHARING


#

You might also like