{"id":493,"date":"2016-09-02T20:48:59","date_gmt":"2016-09-02T10:48:59","guid":{"rendered":"http:\/\/paulyeatman.net.au\/?p=493"},"modified":"2020-08-06T11:32:58","modified_gmt":"2020-08-06T00:32:58","slug":"what-is-the-internal-audit","status":"publish","type":"post","link":"https:\/\/paulyeatman.net.au\/index.php\/2016\/09\/02\/what-is-the-internal-audit\/","title":{"rendered":"What is the Internal Audit?"},"content":{"rendered":"<p>The purpose of an internal audit is to ensure the compliance of the process or processes being audited.\u00a0 That the documented procedure is followed, justified, validated.\u00a0 That the operators carrying out the process are trained and have a strong understanding of the process.<\/p>\n<p><strong>Why do we need to audit?<\/strong><\/p>\n<p><!--more--><\/p>\n<ul>\n<li>The regulator requires in via The PIC\/S guide to GMP for medicinal products.\u00a0 Section 9 &amp; 10 of <a href=\"http:\/\/paulyeatman.net.au\/wp-content\/uploads\/2016\/09\/ISO-9001-2015-Quality-management-systems.pdf\">ISO 9001 (2015) &#8211; Quality management systems<\/a> details the internal audit and process improvement with <a href=\"http:\/\/paulyeatman.net.au\/wp-content\/uploads\/2016\/09\/ISO-19011-2011-Guidelines-for-auditing-management-systems.pdf\">ISO 19011 (2011) &#8211; Guidelines for auditing management systems<\/a> detailing specifics. <em>Admittedly, I&#8217;ve not looked at that in a while and what follows is off the top of my head<\/em>.<\/li>\n<li>To ensure your processes are compliant<\/li>\n<li>Where a process has been found to be non-compliant, a gap analysis or risk assessment needs to be performed to determine how big of an issue the non-compliant process is.\u00a0 That way a plan can be put in place a prioritised and if a regulator drops by to audit.<\/li>\n<li>To be confidant you pass a regulatory audit.<\/li>\n<li>Regular internal audits familiarise your staff with the audit process.\u00a0 NOTE!\u00a0 Internal audits can be conducted more \u201copenly\u201d than a regulator audit as the point is not to \u201chide\u201d gap.\u00a0 Your internal audit needs to find any gaps so they can be addressed, thus reducing the chance of citations.\u00a0 If you were found to be hiding a gap, you may not pass an external audit<em>.\u00a0 Here it might show a problem internally if large gaps were not identified until an internal audit.\u00a0 Are the operators not advising management?\u00a0 Is everyone trained? Are people paying lip service to the need to follow procedures etc?<\/em><\/li>\n<\/ul>\n<p><strong>What are the Regulatory Requirements?<\/strong><\/p>\n<ul>\n<li>In Australia, the TGA requires healthcare products be manufactured according to the PIC\/s Guide to GMP .\u00a0 Chapter 1 states that a Quality Assurance internal audit system needs to be in place.<\/li>\n<\/ul>\n<p><strong>Scheduling the Internal Audit<\/strong><\/p>\n<ul>\n<li>At the top level, you should ensure your site has an internal audit schedule that examines processes across your site.\u00a0 Eg.\n<ul>\n<li>Learning and Development<\/li>\n<li>Quality Assurance<\/li>\n<li>Reg<\/li>\n<li>Quality Control<\/li>\n<li>Logistics<\/li>\n<li>Engineering<\/li>\n<li>Validation<\/li>\n<li>Production<\/li>\n<li>Chemistry<\/li>\n<li>Microbiology<\/li>\n<li>Cleaning<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Stick to the schedule!<\/p>\n<p>You could review every single process each year, though if you have a small team or auditors and a large facility, I\u2019d recommend setting up a schedule to cover the documentation update cycle and when the overriding SOP is due to be updated, audit the process 6 months before so any deficiencies identified can be incorporated into the documentation update. \u00a0\u00a0The added bonus here is that you are not expending time updating a document that \u201cwas just updated\u201d.\u00a0 Be sensible here as if every process was being updated in June, auditing everything in January would be ineffective.\u00a0 Aim for at least one process audit a month.\u00a0 Give consideration to areas identified as issues in regulator audits, or areas where there is high staff turnover.<\/p>\n<p><strong>Planning the Internal Audit?<\/strong><\/p>\n<p>Why plan?\u00a0 To ensure your audits are consistent and effective.\u00a0 In reality, you\u2019ll be following documented internal procedures designed to ensure this.<\/p>\n<p>Without planning, you are wasting your time.\u00a0 With your next audit identified\u2026<\/p>\n<ul>\n<li>Examine the documentation: SOPs, OIs, training records, etc.\u00a0 This enables you to formulate questions and identify key steps in the process.<\/li>\n<li>Use an audit checklist.\u00a0 This might form part of your internal auditing SOP or OI.\u00a0 If you use your own, it forms part of the audit data.<\/li>\n<li>Review the previous audit report for the process to determine what was an issue then in order to see if improvements have actually been made.<\/li>\n<li>Schedule the audit with the relevant Area Manager to ensure resources are available.\u00a0 Each department should be issued the audit schedule when approved, so news of an impending audit is not a surprise.<\/li>\n<li>Confirm the audit time and date a week out and the day before.<\/li>\n<li>NOTE!\u00a0 If auditing an entire area, you\u2019ll need opening and closing meetings etc.\u00a0 For a single process, things are much simpler.<\/li>\n<\/ul>\n<p><strong>Conducting the Internal Audit?<\/strong><\/p>\n<ul>\n<li>Advise the attendees that this is a fact finding operation designed to improve the process and smooth things come external audit time.\u00a0 You want to find deviations and have known deviations communicated to you.<\/li>\n<li>Stick to the plan.\u00a0 That way you will be efficient.\u00a0 If a deviation is noticed, note it down.<\/li>\n<li>Ask questions like\n<ul>\n<li>\u201cShow me\u2026\u201d<\/li>\n<li>\u201cHow do you\u2026\u201d<\/li>\n<li>\u201cHave you\u2026\u201d<\/li>\n<li>\u201cWhat happens when\/after\/next\u2026\u201d<\/li>\n<li>\u201cWhy\u2026\u201d<\/li>\n<\/ul>\n<\/li>\n<li>You want to get a feel for how well the operators understand the task(s) at hand.<\/li>\n<li>You want to make sure the task is being done correctly.\u00a0 No additional or missing steps.<\/li>\n<li>If you record a deviation, advise the auditee of this.\u00a0 Tell them this will improve the process and it is not a negative reflection on them (as it will and it is not!)<\/li>\n<\/ul>\n<p><strong>Followup Activities?<\/strong><\/p>\n<ul>\n<li>With reference to your notes, write the report.\u00a0 I favour bullet points.<\/li>\n<li>The report should include date(s), attendees, process audited, location, documentation reference (Policies, SOPs, OI\u2019s, possibly standards).<\/li>\n<li>Good <em>AND<\/em> bad points<\/li>\n<li>What you have observed that might improve the process, along with logical justifications for such thought.<\/li>\n<li>Where deviations are found, Corrective and Preventative Action (CAPA) needs to be formulated, scheduled and assigned in order to improve the process.<\/li>\n<li>Sign off on the audit.\u00a0 Sign off on the CAPA. QMS manager (or equivalent) to sign off on the report.<\/li>\n<\/ul>\n<p><strong>Did you find this informative or useful? Please consider a small donation so I can expand and improve on what I deliver.<\/strong><\/p>\n<form action=\"https:\/\/www.paypal.com\/cgi-bin\/webscr\" method=\"post\" target=\"_top\"><input name=\"cmd\" type=\"hidden\" value=\"_s-xclick\" \/><a href=\"https:\/\/www.paypal.com\/paypalme\/paulyeatman\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1261\" src=\"https:\/\/paulyeatman.net.au\/wp-content\/uploads\/2020\/06\/say_thanks_donation.png\" alt=\"Donate or say thanks for the info\" width=\"150\" height=\"72\" srcset=\"https:\/\/paulyeatman.net.au\/wp-content\/uploads\/2020\/06\/say_thanks_donation.png 150w, https:\/\/paulyeatman.net.au\/wp-content\/uploads\/2020\/06\/say_thanks_donation-2x1.png 2w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/a><\/p>\n<\/form>\n","protected":false},"excerpt":{"rendered":"<p>The purpose of an internal audit is to ensure the compliance of the process or processes being audited.\u00a0 That the documented procedure is followed, justified, validated.\u00a0 That the operators carrying out the process are trained and have a strong understanding of the process. Why do we need to audit?<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17,2,19],"tags":[46,10],"class_list":["post-493","post","type-post","status-publish","format-standard","hentry","category-how-i-benefit-you","category-the-regs","category-training","tag-auditing","tag-training"],"_links":{"self":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/comments?post=493"}],"version-history":[{"count":7,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/493\/revisions"}],"predecessor-version":[{"id":1270,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/493\/revisions\/1270"}],"wp:attachment":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/media?parent=493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/categories?post=493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/tags?post=493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}