Auditing a factory's supplier approval process is crucial for ensuring supply chain resilience, quality consistency, ethical compliance, and risk mitigation. Here’s a structured approach to conducting a comprehensive audit:
-
Define Scope & Objectives
- Identify which suppliers/processes to audit (e.g., raw materials, critical components).
- Set goals: Validate compliance, identify gaps, assess risk, or improve efficiency.
-
Review Documentation
- Examine:
- Supplier approval policy/procedure.
- Supplier qualification forms/questionnaires.
- Approved supplier list (ASL) and supporting evidence.
- Risk assessment records (e.g., FMEA, supplier scorecards).
- Audit reports, corrective actions, and performance history.
- Examine:
-
Audit Plan Development
- Create a checklist based on standards (ISO 9001, IATF 16949, internal policies).
- Schedule interviews with procurement, quality, engineering, and operations teams.
- Request access to supplier files, performance data, and audit trails.
Phase 2: On-Site Audit Execution
Key Audit Areas & Questions
| Area | Audit Focus | Sample Questions |
|---|---|---|
| Process Design | Alignment with best practices, risk-based approach, and documentation clarity. | - Is the process documented and communicated? - Are risks (quality, financial, ESG) assessed? |
| Supplier Selection | Objectivity, criteria consistency, and conflict of management. | - How are suppliers shortlisted? - Are costs/quality balanced? - Are gifts/relationships disclosed? |
| Supplier Evaluation | Thoroughness of assessments (financial, technical, compliance). | - What data is reviewed (financials, certifications, audits)? - Are site visits conducted? - Are sustainability/ethical practices checked? |
| Approval Workflow | Authorization levels, segregation of duties, and compliance. | - Who approves? Are approvals documented? - Is there segregation between procurement and quality? |
| Onboarding | Training, contract clarity, and initial validation. | - Are suppliers trained on requirements? - Are SLAs/QPs signed? - Is first-article inspection done? |
| Ongoing Monitoring | Performance tracking, audits, and continuous improvement. | - How are suppliers rated? - Are periodic audits conducted? - Is performance data used for requalification? |
| Corrective Actions | Effectiveness of CAPA for underperforming suppliers. | - How are non-conformities tracked? - Is root cause analysis performed? - Are suspensions/delists documented? |
Audit Techniques
- Interviews: Talk to cross-functional staff (e.g., "How do you validate a new supplier’s technical capability?").
- Document Review: Trace approvals from request to ASL update.
- Observation: Walk through the process (e.g., review how a new supplier is added to the system).
- Data Analysis: Check for trends in supplier performance, audit findings, or rejections.
Phase 3: Post-Audit Reporting & Follow-Up
-
Identify Gaps & Risks
- Document non-conformities (e.g., "No site visit conducted for high-risk suppliers").
- Rate severity: Critical (immediate action), Major (correct within 30 days), Minor (improvement).
-
Develop Corrective Action Plan
- Assign owners and deadlines for addressing gaps.
- Example: "Revise supplier risk assessment matrix within 60 days."
-
Report & Present Findings
- Summarize: Scope, methodology, key findings, risks, and recommendations.
- Use visuals (e.g., process flowcharts with gaps highlighted).
-
Track Implementation
- Verify CAPA completion via follow-up audits or document reviews.
- Update supplier approval process based on lessons learned.
Critical Red Flags to Watch For
- Vague Approval Criteria: "Supplier must be reliable" (measurable standards needed).
- Lack of Risk Differentiation: Treating all suppliers equally (high-risk suppliers need deeper scrutiny).
- Missing Documentation: No evidence of audits, assessments, or approvals.
- Single-Source Reliance: No backup suppliers for critical items.
- Ignoring Performance Data: Approved suppliers with recurring defects not reviewed.
Tools & Standards
- Frameworks: ISO 9001 (Clause 8.4), IATF 16949 (Clause 8.4.1), AS9100.
- Tools: Supplier scorecards, risk matrices, audit management software (e.g., Intelex, QAD).
- Checklist: Download a Supplier Audit Checklist Template (ISO 9001 example).
Pro Tips
- Focus on Risk: Prioritize audits for critical suppliers (e.g., those affecting safety or compliance).
- Integrate ESG: Include checks for labor practices, environmental impact, and governance.
- Leverage Technology: Use digital platforms for real-time supplier performance tracking.
- Continuous Improvement: Schedule periodic audits (e.g., annually or after major incidents).
By systematically evaluating each stage of the supplier lifecycle, you’ll build a resilient supply chain that minimizes disruptions and ensures quality from source to end-product.
Request an On-site Audit / Inquiry