Independence, corridor pressure and a retrospectively signed record
A 600-bed hospital runs an internal audit programme for its integrated QMS/EMS. Three auditors are available: Auditor A, a nurse manager who transferred out of the central sterilisation department (CSD) five months ago and whose spouse is still a shift leader there; Auditor B, a biomedical engineer with no sterilisation experience; and Auditor C, newly qualified and never having audited a clinical process. The audit programme manager schedules Auditor A to lead the CSD audit next month because 'she knows the department and we are short of time'. The accreditation visit is in three weeks, and the chief operating officer tells Auditor A in a corridor conversation to 'keep this one light - we cannot afford majors before the visit'. While auditing, Auditor A finds that the sterilisation cycle log for 12 surgical instrument sets was signed the following morning rather than at release, and that two of the sets had been released to theatre before signature.
1. Evaluate Auditor A's assignment against the principles of auditing in ISO 19011. What should happen instead, and on what basis?
Read the worked answer
ISO 19011:2018 makes independence a principle: auditors should be independent of the activity audited wherever practicable and should act in a manner free from bias and conflict of interest. Auditor A fails on both limbs. She managed the CSD five months ago, so she would be evaluating decisions and outputs she is personally associated with - a self-review threat. Her spouse remains a shift leader there - familiarity and intimidation threats on top.
'She knows the department' is not a compensating factor; it is precisely the risk.
Options, in order of preference:
- Reassign the lead to Auditor B or C and add sterilisation competence through a technical expert from outside the department (for example a sterile services professional from another hospital). A technical expert advises; the auditor still collects evidence and draws conclusions.
- If no competent, independent auditor can be found, delay the audit. A late audit is a programme performance issue; a compromised audit is a principles issue.
- Auditor A may help with logistics and document preparation but must not interview, collect evidence or conclude on the CSD.
Either way, record the competence and independence assessment in the programme files. The programme manager's time pressure is a programme risk to be logged and escalated, not a reason to accept a biased audit.
2. How should the auditor respond to the COO's request, and what does the principle of fair presentation require of the report?
Read the worked answer
Integrity (honesty, truthfulness, reporting truthfully and accurately) and fair presentation (findings, conclusions and reports reflecting the audit activities truthfully, and reporting significant obstacles encountered) both apply.
Responding to the COO: do not pre-commit to a light report. State neutrally that the report will reflect the evidence and that severity follows the programme's classification rules, not the calendar. If the request is repeated in writing or before witnesses, note it factually in the work documents.
If pressure continues: raise it with the audit client and the programme manager. Undue influence is a threat to impartiality and, in an accreditation context, to the credibility of the whole submission.
If access is later restricted: record the restriction as an audit limitation in the report. That is exactly what fair presentation demands - the reader must be able to see what the audit did and did not cover.
What must not happen: reclassifying a finding without evidence, or omitting it to protect a deadline. A serious safety finding discovered now is what the accreditation visit exists to catch, and what management review needs to see.
Confidentiality still applies: the corridor conversation is not material for general discussion.
3. Treat the retrospective signatures. Is this a nonconformity, and what should the auditor do beyond writing it in the report?
Read the worked answer
It is a nonconformity. The procedure requires the cycle record to be signed at release; the log shows signatures made the following morning and theatre records show two sets released before signature. Criteria: the sterilisation procedure, ISO 9001:2015 8.5.1 and 8.6 (release of products and services), and 7.5.3 (control of documented information). Evidence: date and time stamps, signatures, theatre records, interviews, and the sample of 12 sets with two confirmed early releases.
But conformity is not the whole issue. Signing a safety-critical record after the fact is an indicator of record falsification - an integrity matter for the organisation, not a point for the auditor to argue. The auditor should:
- describe facts, not motives: 'the record was signed on 12 March; the set was released on 11 March';
- preserve copies of the evidence with the work documents;
- communicate immediately to the audit client and top management rather than waiting for the closing meeting, because of patient safety risk (ISO 19011:2018 clause 7.3);
- refer the matter to the hospital's incident and whistleblowing channels for investigation.
Grading follows the programme rules; given the patient safety exposure, a major nonconformity plus escalation outside the normal reporting cycle is defensible and expected.