Auditing a factory's Engineering Change Request (ECR) process is crucial for ensuring product quality, regulatory compliance, operational efficiency, and risk mitigation. Here’s a structured approach to conducting a comprehensive audit:

1. Define Scope & Objectives

   • Scope: Specific products, departments, or time period.
   • Objectives: Verify compliance, identify gaps, assess risk, ensure traceability, and validate process effectiveness.
   • Standards: Reference ISO 9001, IATF 16949, AS9100, or industry-specific regulations (e.g., FDA, EU MDR).

2. Review Documentation

   • Process Documents: ECR procedure, work instructions, forms, and approval matrices.
   • Templates: ECR forms, impact analysis templates, validation reports.
   • Records: Past ECRs (e.g., last 6–12 months) to assess trends and outcomes.

3. Audit Team & Tools

   • Assign auditors with technical (engineering, quality) and process expertise.
   • Use checklists, sampling plans, and interview guides.

Phase 2: Audit Execution

A. Process Adherence & Controls

• Initiation:
  • Verify ECRs are submitted for all changes (design, materials, suppliers, tooling).
  • Check if changes align with business needs (e.g., cost reduction, defect reduction).
• Risk Assessment:
  • Review if Failure Mode and Effects Analysis (FMEA) or risk assessments were conducted.
  • Validate that critical changes (safety, regulatory, high-volume) received extra scrutiny.
• Cross-Functional Review:
  • Confirm approvals from Engineering, Production, Quality, Purchasing, and Safety.
  • Ensure documented evidence of input from all relevant teams.
• Impact Analysis:
  • Verify assessment of:
    • Product performance, safety, and compliance.
    • Supply chain (lead times, inventory obsolescence).
    • Production feasibility (tooling, capacity, training).
    • Quality control (test methods, inspection criteria).
    • Documentation updates (drawings, BOMs, work instructions).

B. Implementation & Verification

• Change Control:
  • Ensure changes are implemented only after formal approval.
  • Check segregation of duties (requesters ≠ approvers ≠ implementers).
• Validation & Verification:
  • Review test reports, trial runs, or pilot studies for critical changes.
  • Confirm first-article inspections (FAI) or PPAP submissions where required.
• Traceability:
  • Link ECRs to affected drawings, BOMs, work orders, and test records.
  • Use unique ECR IDs across all documents.

C. Documentation & Records

• Completeness:

  Ensure all ECRs include: justification, description, impact analysis, approvals, implementation plan, and verification results.

• Version Control:

  Verify document revisions (e.g., drawings, specs) are updated and distributed.

• Record Retention:

  Confirm records are stored securely and accessible for audits/regulatory reviews.

D. Communication & Training

• Stakeholder Notification:

  Check if affected teams (production, quality, suppliers) were informed of changes.

• Training:

  Verify training records for personnel impacted by the change (e.g., new procedures, equipment).

Phase 3: Audit Findings & Reporting

1. Non-Conformances:

   • Cite specific examples (e.g., "ECR #123 lacked risk assessment," "Production implemented Change X without approval").
   • Classify severity (critical/major/minor) based on risk.

2. Opportunities for Improvement:

   Suggest enhancements (e.g., automate ECR workflow, strengthen supplier change controls).

3. Report Summary:

   • Include: audit scope, objectives, methodology, findings, evidence, and recommendations.
   • Share with management and affected departments.

Key Audit Red Flags

Best Practices for a Robust ECR Process

• Automate: Use PLM/PDM systems for workflow management and version control.
• Centralized Database: Ensure all ECRs are logged and searchable.
• Periodic Reviews: Audit the ECR process annually or after major incidents.
• Supplier Integration: Require suppliers to submit their changes via your ECR process.
• Metrics Tracking: Monitor ECR cycle time, rework rates, and implementation success.

Sample Audit Checklist Snippet

By systematically evaluating the ECR process, you prevent costly errors, ensure regulatory compliance, and drive continuous improvement. Always tailor the audit to your factory’s specific risks and industry standards.