Audit reporting, closing meeting, follow-up and corrective action verification
Closing meeting
The closing meeting presents findings and conclusions to the auditee and client, explains the basis for grading, allows the auditee to ask questions or record disagreement, agrees timescales for corrective action and explains reporting, complaints and appeals routes. It is a presentation of results, not a negotiation - disputed findings stay in the report, with the auditee's view noted where appropriate.
The report
The audit report (ISO 19011 clause 6.5) covers objectives, scope, identification of client, auditee and team, dates and locations, criteria, findings and the evidence supporting them, conclusions on conformity and, where in scope, effectiveness, plus a statement that the audit used sampling and therefore carries uncertainty. Issue it within the agreed timeframe and control its distribution.
Follow-up
Follow-up verifies that the auditee has made the correction (fixing the immediate problem) and implemented corrective action (eliminating the cause) and that the action was effective. ISO 9001 clause 10.2 requires reacting to the nonconformity, evaluating the need to eliminate the cause, implementing action, reviewing effectiveness and updating risks. Verification may be desk-based or on-site; the auditor verifies, the auditee acts.
Traps
- Confusing correction with corrective action.
- Closing a nonconformity on a promise ("we will brief the team").
- The auditor proposing or writing the corrective action.
Rule of thumb: correction fixes the thing, corrective action fixes the cause, verification confirms both worked - and effectiveness needs a record dated after implementation.