The ISO Standard Says That Internal Audits Cannot be Completed by Someone Involved in the Activity. How Does a Small Business Meet This Requirement?
An organization that has fewer resources must look to other options, like outsourcing or cross-functional activities, to fulfill internal requirements for audit. There are many individuals and organizations that provide internal audit services to small companies at a fraction of the cost of employing personnel full time. The contracted individual or organization manages the planning process for internal audit based on your established procedures or you can develop the plans for ongoing internal audit. Another option is to train individuals within your organization that can perform internal audits and alternate audit activities between processes. For small companies this is often not possible as people are actively involved in all the processes and activities of the company; therefore, outsourcing is a better option to ensure objectivity.
Even medium sized companies might have to contract outside auditors to audit their Quality System, since technically their own QA can not audit themselves. However, companies who are audited by customers can take credit for these audits. Personally, as a minimum I will always audit the QMS whenever services are conducted along with other affected areas. If the QMS is robust and evidence of internal audits, NCRs closure and continuous improvement is shown and demonstrated then it is safe to accept that all services are up to the required standards.