2nd Party Audit & 3rd Party Audit (Ⅲ) Audit standard and requirement With the 3rd party audit, a comprehensive audit is conducted according to international/national standards. If the company fully meets the standards, a certificate will be issued to prove that the company's operations comply with international/national standards. The 2nd party audit is generally carried out according to the needs of customers, not necessarily in accordance with the standards of IATF16949 or ISO9000. Regardless of what the standards are used, the customer will normally send a questionnaire to the supplier before the audit, while the auditors will generally check documents related to the customer's products when inspecting documentation, rather than other information.
Audit process Whether it is a second-party audit or a third-party audit, due to the limited resources and time available for audit, audit findings inevitably can only be built on the basis of sampling the information obtained, which leads to the audit process covering a certain time period, instead of tracking the whole process; focusing on the main activities and processes of the system, but not the entire system; and investigating representative people and matters, rather than all aspects of the system. Therefore, regardless of whether a second-party audit or a third-party audit, the audit conclusions are always based on the findings of sampling.
The audit process however is basically consistent. Both second-party and third-party audits need to go through five processes: audit planning, preparation, notification, implementation and reporting. The three key elements of audit implementation are also completely consistent: the first meeting, on-site audit and the last meeting.
Non conformity items The nonconformity items issued by the second-party audits may not necessarily be those required by the standards, they could include some special requirements by the customers, whereas the non-conformity items issued by the third-party audit must correspond to clauses relating to the requirements in the standards.
Follow-up & verification of non-conformity items The second party audit does not require the auditors to track and verify the effectiveness of the corrective actions for the non-conformity items. The auditors only need to give their non-conformance feedback to the auditees and the clients, but they are required to submit proposals of corrective actions for the nonconformity to the clients. The third-party audit however requires auditors to track and verify the effectiveness of corrective actions on the nonconformity as well as their closing, but not propose any corrective actions for the non-conformity items. |