Audit Management for Pipeline Integrity Services — Atlantis NDT ERP

Internal and third-party audit scheduling with finding-to-CAPA closure tracking

Overview

Odoo's Quality/Audit workflow configured for NDT firms manages the full audit lifecycle: internal audit program scheduling against ISO 9001/17020 clause coverage, third-party accreditation body surveillance audit preparation, and client-conducted vendor qualification audits. Audit checklists are built per standard/scope (an ISO 17020 technical competence audit differs structurally from a client HSE vendor audit), with findings captured in real time during the audit — including evidence photos and reference to the specific procedure or record reviewed — and automatically classified by severity (major nonconformity, minor nonconformity, observation, opportunity for improvement). Every finding routes into the same CAPA workflow used by Quality Management, with owner assignment, root-cause investigation, and verified closure required before the finding is marked resolved. An audit calendar tracks the full program across internal audits, accreditation surveillance cycles, and client vendor audits so nothing is scheduled reactively. Historical audit data feeds a findings-trend dashboard by clause, department, method, and auditor, directly supporting management review inputs required by ISO 9001 and ISO 17020.

Why inspection and testing businesses run it differently

For an ISO 17020-accredited inspection body, the audit program itself is under scrutiny during accreditation surveillance — auditors check not just whether findings exist, but whether the audit program is planned, executed to schedule, and findings are genuinely closed with objective evidence, not just marked closed administratively. This module gives an accreditation body reviewer exactly what they look for: a documented audit schedule, checklist-driven execution against specific clauses, and a finding-to-CAPA trail with verification evidence. It also handles the operational reality of client vendor audits (refineries and EPCs frequently audit their approved NDT vendors' QA systems before and during long-term contracts), keeping those audit records separate from but structurally consistent with internal/accreditation audits.

Capabilities

Audit program calendar spanning internal, accreditation surveillance, and client vendor audits
Standard-specific checklist templates (ISO 9001, ISO 17020, client HSE/QA formats)
Real-time finding capture during audit with photo evidence and record reference
Automatic severity classification (major/minor NC, observation, OFI)
Shared CAPA workflow with Quality Management for unified corrective-action tracking
Verified-closure requirement (evidence-based, not status-only) before finding resolves
Findings-trend dashboard by clause, department, method, and auditor
Management review report auto-compiled from audit and CAPA data

How the workflow runs

The annual audit program is scheduled at the start of the QA year, allocating internal audits across departments/clauses to ensure full ISO 9001/17020 clause coverage before the accreditation body's surveillance visit. Each audit is executed against a standard-specific checklist, with the auditor logging findings, evidence, and clause references in real time via mobile or desktop. Findings above observation-level automatically generate a CAPA record routed to the responsible owner, following the same investigation-root-cause-corrective-action structure as quality NCRs. Closure requires the auditor or QA manager to verify implemented corrective action with objective evidence before the finding status changes to closed. Ahead of external accreditation surveillance, the QA manager pulls a full findings-trend report and open-CAPA status to confirm audit readiness and identify any systemic issue needing pre-emptive correction.

Standards and compliance covered

ISO 9001:2015 clause 9.2 (internal audit)
ISO/IEC 17020:2012 (audit program and impartiality requirements)
ISO/IEC 17025:2017
Client vendor pre-qualification audit standards (refinery/EPC-specific QA audit formats)
API RP 578
ISO 19011 (auditing guidelines)

Integrations

Quality Management (shared CAPA/NCR workflow)
Document Control (procedure/record reference during audit)
HR (auditor competency/training record)
Client vendor audit portals
Accreditation body portals where electronic submission is supported

Measured impact

Structured audit-to-CAPA tracking with verified closure has helped firms move from mostly-closed-some-findings-recur-year-over-year to sustained zero-repeat-finding status across two consecutive accreditation cycles. Pre-audit readiness reporting has cut accreditation surveillance preparation time from roughly two weeks of manual file assembly to two to three days of dashboard review. Client vendor audits conducted through the same structured system have shortened client audit response and evidence-provision time significantly, supporting faster vendor-qualification renewal.

Frequently Asked Questions

Does the audit tool distinguish between our internal audits and audits our clients conduct on us as a vendor?

Yes. Audit type is tagged as internal, accreditation surveillance, or client vendor audit, each with its own checklist template, but findings feed the same trend and CAPA infrastructure.

Can a finding be marked closed without evidence of corrective action?

No. Closure requires the auditor or QA manager to attach or reference verification evidence; status-only closure isn't permitted by the workflow.

How does this help us prepare faster for our ISO 17020 accreditation surveillance audit?

The findings-trend dashboard and audit calendar give a real-time view of clause coverage and open CAPA status, replacing manual file compilation with a report that's essentially audit-ready on demand.