Hosting virtual audits is not new; in fact, our Quality Team often hosts multiple virtual audits a week.
But the shift to working remotely during COVID-19 has dramatically increased the number of companies managing virtual audits. With a spotlight on virtual audits, the trend will likely continue as more people experience remote hosting benefits like cost-reduction and time-efficiency.
A virtual audit has the same principles and aims as an onsite audit, such as:
- Ensuring that you are meeting regulatory requirements (e.g., are all of your team members up-to-date on their competency training and performing procedures per the SOPs.
- Confirming that your quality management system is in a state of control (e.g., do you have Corrective and Preventive Actions documented, and can you provide evidence of follow-up?)
- Affirming that you are maintaining vendor and supplier qualifications (e.g., have you validated the software you are using to manage your SOPs, including recent updates?)
While the audit substance doesn't change, the remote audit processes can be nerve-wracking with the auditors and auditees joining various locations.
We'll look at some critical considerations for remote management and how you can prepare for a seamless, successful virtual audit.
LEARN HOW XERMIS’ AUDITORS BENEFIT FROM USING A CLOUD-BASED QUALITY MANAGEMENT SYSTEM
What Exactly Does a Remote Audit Entail?
As we noted earlier, a remote audit has the same goals as an onsite audit, except that it is done electronically. Usually,
the certification body or potential customers will hold interviews through a video conference call using Zoom or Skype platforms.
You should be prepared to share documents and records with these regulatory bodies or certifying agencies, whether that be through your electronic quality management system and file-sharing application.
Ensuring documents and records can be shared through an easy and secure method is key to a seamless virtual experience.
For example, ZenQMS includes an auditor-share account for every customer. This enables auditors to connect via a customized, secure portal from any browser and instantly find any document with global search functionality.
Key Tip: Hold a Virtual Audit Practice Run
Invite members of your team to test the process with you by holding a virtual audit dress rehearsal. Try to simulate the actual experience and questions as closely as possible. You might even try visualization, a technique that sports psychologists use to help athletes plan for game day. Your practice run will help you feel more comfortable and address tech challenges or questions in advance of the actual audit.
Is Your Company Remote Quality Management Ready?
While the auditing body or prospective customer is usually in charge of the audit and controls how the process goes, you can take a proactive approach.
Your preparation and readiness influence how smoothly the audit will go. You won't be able to anticipate every need, but you'll be able to adjust better with a plan in place.
Many auditing bodies give a checklist of things they need in place to be able to carry out an audit remotely. Some of the recurrent items on the list include:
- Available personnel to liaise with the auditor and follow them step by step through the entire procedure. Your team should also be prepared to answer critical questions around processes and protocols related to the audit.
- Access to your most recent version of your Quality Management System. Your QMS illustrates that you understand the relevant regulatory requirements and how your team's standards for quality management meet them. It's important to remember that your quality management system is dynamic and should reflect your constant optimization. If you don't have any change controls, you are likely not in a state of control or continuous improvement (or at least not documenting it).
- Infrastructure and tools. Technology is one of the key facilitators of remote auditing. Does your company have the required technology and infrastructure necessary for remote quality management in a secure, organized manner? How will you demonstrate traceability and 21 CFR Part 11 compliant signatures?
Key Tip: Create an Audit Backup Plan
As someone working in the quality space, you know it's mission-critical to plan for the unexpected and ensure business continuity. Take the same approach to your virtual audit plan. If you have a virtual meeting glitch, what resources can you have on-hand, whether troubleshooting tips or IT support?
6 Things to Consider for Hosting a Virtual Audit
To ensure that your company has a successful remote audit, there are some key things you need to consider:
1. Anticipate the Objectives of the Audit
Consider some of the critical questions that auditors might have. You've likely already prepared for these through your quality planning.
If auditors want to see a specific training record, what process do you need to follow to produce the documents? How can you showcase a team member performing a procedure? By answering these questions, you know what kinds of methods to employ for your remote audit.
You'll also need to ensure that you can provide the documentation for those questions effectively and efficiently. If you have multiple systems that you use to manage quality, make sure to go through the checklist for each system (e.g., DocuSign, Excel, Email, Word, etc.).
2. Confirm Virtual Eligibility of the Audit
Answering the above questions will also help you determine if a remote audit will be appropriate. Also, you'll want to find out if there are previous audits that the body has done that require a physical inspection to complete it.
3. Secure the Technological Capability
Remote auditing will work effectively only if the technology infrastructure can support it--both for the auditor and auditee.
If you are using video conferencing platforms, you might consider having an onsite facilitator to ensure these platforms run smoothly. You'll want to ensure that you have a high connectivity level and clear communication between both parties.
If you're using audit methods like sharing video screens, placing fixed cameras around the company, and sharing a live stream of the activities, keep your auditor informed.
4. Proactively Address Privacy and Security Risks
Data privacy and security concerns are always present, even in an audit setting. You'll want to assure the auditors that security risk factors will not be a challenge during remote auditing.
Ensure that you are using trustworthy cybersecurity measures like encrypted data, virtual private networks, protected meetings with passwords, and possibly 2FA. For example, if you use the ZenQMS application, you can provide access to the auditor so that they can securely access all of the documentation.
For audit methods that require screen-sharing, ensure that you restrict screen-sharing access to unauthorized personnel as soon as the auditor is connected. Platforms like Zoom now require password-protected meetings.
5. Ensure Access to Demonstrated Documentation
You want to be sure that you have access to the same range of demonstrated documentation that you would in an onsite audit
- Audit records and plan (internal)
- Evidence of management meetings, especially if complying with ISO 9001:2015
- Customer Complaints
- Corrective and Preventive Actions (CAPAs) with clear follow-up
- Up-to-date training records
Asides from these, you're likely to have to share additional documents during the process. Whichever way you choose to share your documents must be easy to access and use.
Similar to an in-person audit, time is of the essence. You should produce your documents quickly and in an easy-to-read format.
6. Plan and Prepare for Your Virtual Audit
The considerations we've discussed can only be effective through adequate preparation. You need to create a workable plan and schedule to help prepare for the remote audit. This will help you identify what, when, and how the remote quality management will meet the audit objectives.
Here's a checklist to help you consider what you need for a successful virtual audit:
- Assess audit feasibility
- Identify and inform key personnel to be audited or liaise with the auditor.
- Identify technical availability, capacity, and the preferred audit methods.
- Define tasks that team members will carry out during the audit
- Analyze possible risks and challenges and how to address them
- Hold a practice, virtual audit
- Ensure you have all the necessary documents at the ready
With some planning, reflection, and the proper systems in place, you'll be ready to ace your next virtual audit.