Expert-level quality management system auditing with comprehensive knowledge of ISO 13485, audit methodologies, nonconformity management, and audit program optimization for medical device organizations.
Core QMS Auditing Competencies
1. ISO 13485 Audit Program Management
Design and manage comprehensive internal audit programs ensuring systematic QMS evaluation and continuous improvement.
Audit Program Framework:
QMS AUDIT PROGRAM MANAGEMENT
├── Annual Audit Planning
│ ├── Risk-based audit scheduling
│ ├── Process audit scope definition
│ ├── Auditor competency management
│ └── Resource allocation planning
├── Audit Execution Management
│ ├── Audit preparation and logistics
│ ├── Audit team coordination
│ ├── Audit conduct and documentation
│ └── Audit report generation
├── Audit Follow-up and Closure
│ ├── Nonconformity management
│ ├── Corrective action verification
│ ├── Effectiveness assessment
│ └── Audit cycle completion
└── Audit Program Improvement
├── Audit performance analysis
├── Auditor feedback and development
├── Methodology enhancement
└── Best practice implementation
2. Risk-Based Audit Planning (ISO 13485 Clause 8.2.2)
Develop strategic audit plans based on process criticality, risk assessment, and QMS performance data.
Risk-Based Audit Planning Process:
QMS Risk Assessment for Auditing
Process risk evaluation and criticality analysis
Previous audit results and trend analysis
Regulatory requirement changes and impact
Decision Point
Determine audit frequency and scope based on risk level
Audit Schedule Development
High-Risk Processes
Quarterly or semi-annual auditing
Medium-Risk Processes
Annual auditing with focused reviews
Low-Risk Processes
Extended cycle auditing with surveillance
Special Audits
Event-driven or complaint-triggered audits
Audit Scope and Criteria Definition
ISO 13485 clause-specific auditing
Process-based audit scope definition
Regulatory requirement integration
Customer-specific requirement inclusion
3. Audit Execution and Methodology
Conduct systematic and effective audits using proven methodologies ensuring comprehensive QMS assessment.
Audit Execution Process:
Audit Preparation
Pre-audit Document Review
Follow scripts/audit-prep-checklist.py
Audit Plan Development
Scope, objectives, criteria, methods
Auditor Assignment
Competency matching and independence verification
Auditee Communication
Schedule, expectations, and logistics
Audit Conduct
Opening Meeting
Audit introduction and expectation setting
Evidence Collection
Interviews, document review, observation
Finding Development
Nonconformity identification and classification
Closing Meeting
Audit summary and preliminary findings presentation
Audit Documentation and Reporting
Audit Report Preparation
Findings, evidence, and recommendations
Nonconformity Documentation
Detailed description and requirements
Audit Summary
Executive summary and improvement opportunities
Report Distribution
Stakeholder communication and follow-up planning
4. Auditor Competency Management
Develop and maintain auditor competency ensuring effective audit execution and professional development.
Auditor Competency Framework:
AUDITOR COMPETENCY REQUIREMENTS
├── Technical Competency
│ ├── ISO 13485 standard knowledge
│ ├── Medical device industry understanding
│ ├── QMS process comprehension
│ └── Regulatory requirement familiarity
├── Audit Methodology Skills
│ ├── Audit planning and preparation
│ ├── Interview and communication techniques
│ ├── Evidence collection and analysis
│ └── Report writing and presentation
├── Personal Attributes
│ ├── Independence and objectivity
│ ├── Professional ethics and integrity
│ ├── Analytical and critical thinking
│ └── Continuous learning mindset
└── Industry-Specific Knowledge
├── Medical device regulations
├── Risk management principles
├── Design control requirements
└── Post-market surveillance obligations
Advanced Audit Applications
Process-Based Auditing
Implement process-based audit methodologies ensuring comprehensive process evaluation and improvement identification.
Process-Based Audit Approach:
Process Understanding and Mapping
Process flow analysis and documentation
Input-output relationship evaluation
Process performance metrics review
Process interaction assessment
Process Audit Execution
Management Processes
Management review, resource management, communication
Core Processes
Design controls, purchasing, production, delivery
Support Processes
Document control, training, infrastructure, work environment