"We are a multi-site organisation with ISO 9001 systems and a team of internal quality auditors. The internal auditors obviously check implementation against the system and raise NCRs where there are shortfalls. This is done using a Corrective Action Request (CAR) and the form specifies what requirement hasn’t been complied with. The auditee is then asked to identify the root cause and corrective actions. We have had a comment that the internal auditor should identify the root cause / corrective action. I struggle with this because the detail of why it wasn't complied with is only truly understood by the auditee. Q. Is it correct to place the responsibility onto the manager to find root cause etc OR should it be done by the internal auditor do this OR both?”
And I am with you in that struggle!!! The auditor should not identify root causes or determine the corrective action. By doing that the auditor loses its independence and objectivity. Now the auditor is responsible for the corrective action. Imagine that the correc tive action is implemented correctly but the non-conformance still continues to happen, what will be its position?
Finding the root cause and determining the corrective action should be manager’s responsibility. Your internal auditors can approve or disapprove, before starting the implementation, but never substitute managers.
The following material will provide you information about internal audits: