IATF 16949 Internal Auditor Training: QMS, Manufacturing Process and Product Audits

Opens with the question of how you know every brake part leaving your plant is right on every shift, and a self-rating. Covers three cases: Hyundai and Kia recalling more than 3.3 million vehicles in September 2023 over anti-lock brake modules that could leak and catch fire; General Motors recalling 597,630 trucks and SUVs in April 2025, linked to issues at two suppliers; and Daihatsu's 174 certification test irregularities reported in December 2023. Introduces XYZ Brakes, a caliper and brake pad plant in Shanghai, and contrasts an auditor who reads the control plan with one who samples torque records from all three shifts. Outlines the twenty-seven modules in three parts and the final exam. It ends with a recap and three practice questions.

What you will be able to do

• Turn an automotive recall into questions an internal auditor would ask
• Explain why sampling every shift finds what reading the plan misses
• Describe how the course, practice audit and final exam work

Why it matters

Finding a weak control inside the plant, on every shift, is far cheaper than the customer finding it at the line.

Practice: Practice: Welcome: why automotive internal audit matters · 3 questions

Starts at XYZ Brakes' caliper machining line in Shanghai, where a new internal auditor brings only the IATF 16949 book to audit clause 8.5.1, and misses the ISO 9001 base it points to. Covers the three layers: ISO 9001 as the base, IATF 16949 as the supplement, and each customer's specific requirements on top. Explains the automotive words auditors must use correctly: special characteristic, control plan, reaction plan, and the core tools by name. Covers sanctioned interpretations, which change the requirements, and frequently asked questions, which explain them, and clause 4.3.1 on including supporting functions such as remote design centres in the scope. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Explain how IATF 16949 supplements ISO 9001
• Use automotive terms such as special characteristic and reaction plan correctly
• Tell sanctioned interpretations from frequently asked questions

Why it matters

Auditing with both books and the customer's requirements stops findings that miss half the requirement.

Practice: Practice: How IATF 16949 works with ISO 9001 · 3 questions

Opens in XYZ Brakes' quality office, where for years one December audit read the procedures and never reached the shop floor. Covers a documented internal audit programme, prioritised on risk and performance trends, and adjusted after changes, nonconformities and complaints. Explains the three audit types IATF 16949 expects: the quality management system audit within a three-year cycle, the manufacturing process audit on every shift, and the product audit. Covers internal auditor competency under clause 7.2.3, verified and kept current, with product auditors who understand product requirements and use the measuring equipment themselves, and the principles that make an audit trustworthy, including never auditing your own work. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Plan an internal audit programme by risk and trends
• Explain the three IATF 16949 audit types and their frequency
• Check internal auditor competency against clause 7.2.3

Why it matters

A programme that covers every shift and keeps auditors sharp finds problems before customers do.

Practice: Practice: The audit programme and the auditor · 3 questions

Starts with XYZ Brakes' quality manual, whose scope covers manufacture of calipers and brake pads at Shanghai, although the plant designs its own pads. Covers auditing issues and interested parties, determined, reviewed and used in risks and objectives. Explains a scope that includes every supporting function, with product design as the only permitted exclusion and manufacturing process design never excluded. Covers clause 4.3.2: customer-specific requirements evaluated and included in the scope, including each new revision, shown by a customer manual left unread in an inbox for four months, and followed to the shop floor, with every product and process conforming, materials included. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit the QMS scope and its permitted exclusion
• Check that customer-specific requirements are evaluated and deployed
• Audit the processes of the system and their interactions

Why it matters

Checking scope and customer requirements first keeps the audit aimed at what the customer actually demands.

Practice: Practice: Context, scope, CSRs and the processes · 3 questions

Opens at XYZ Brakes' caliper assembly line, where purchasing switched bleed screws to a new supplier last quarter, and the change form raises a product safety question. Covers clause 4.4.1.2: documented processes for product-safety-related products and processes, with thirteen items where they apply, and safety defined by the customer as well as by law. Explains what the items look like in a brake plant: safety characteristics controlled where they are made, special approvals, reaction plans, escalation and training. Covers evaluating changes for safety before they happen, traceable lots, lessons learned for new products, and transferring safety requirements through the supply chain, which clause 8.4.3.1 asks of suppliers. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit the product safety process against its thirteen items
• Check controls on safety characteristics where they are made
• Verify that safety is evaluated before changes and sent down to suppliers

Why it matters

Auditing product safety on a brake plant protects drivers, passengers and people on the road.

Practice: Practice: Product safety through an auditor's eyes · 3 questions

Starts on XYZ Brakes' night shift, when the end-of-line leak tester fails its check with a leaking master caliper and the operator does not know who can stop shipment. Covers leadership shown in decisions, and three corporate responsibility policies defined and implemented. Explains process owners named and competent, and top management reviewing the effectiveness and efficiency of the system. Covers clause 5.3.1: roles documented, including customer scorecards and customer portals among the assignments, and the authority to stop shipment and production, with someone in charge of product conformity on every shift. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit leadership and the corporate responsibility policies
• Check that process owners are named and competent
• Verify authority to stop shipment and production on every shift

Why it matters

Someone on every shift who can say stop is what keeps a bad caliper away from the customer at two in the morning.

Practice: Practice: Leadership, corporate responsibility and roles · 3 questions

Opens at XYZ Brakes' pad plant after a summer typhoon cut the power mid-shift, and asks whether parts made after the restart were checked. Covers risks and opportunities, and clause 6.1.2.1 risk analysis that at minimum includes lessons from recalls, product audits, field returns and repairs, complaints, scrap and rework, and that considers cyber-attack threats. Explains preventive action appropriate to severity, with lessons applied to similar processes. Covers contingency plans that are tested, reviewed every year with top management and that verify product after an emergency restart, plus quality objectives that serve the customer and planning of changes. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit risk analysis inputs such as recalls, returns and complaints
• Check that contingency plans are tested and reviewed
• Verify product checks after an emergency restart

Why it matters

A tested contingency plan means a power cut does not send unchecked parts to the customer.

Practice: Practice: Risk, prevention and contingency plans · 3 questions

Starts at XYZ Brakes' honing line, where an agency worker has run a honing machine for three days and nobody can show who trained them. Covers plant and equipment planned by a multidisciplinary team, with manufacturing feasibility, capacity planning, room for rejects and cyber protection, and premises kept clean and in repair. Explains organisational knowledge, competence with a documented process, and on-the-job training for new or changed tasks, including contract and agency staff. Covers every employee's awareness of their impact on quality and the risk to the customer, with motivation and communication that work. Temporary people, permanent requirements. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit facility and equipment planning, including capacity
• Check on-the-job training for new, changed, contract and agency staff
• Verify employee awareness of quality impact and customer risk

Why it matters

Checking who trained the newest operator catches the gap behind many first-week defects.

Practice: Practice: Resources, people and awareness · 3 questions

Opens in XYZ Brakes' calibration room, where a setting master problem last week raises the question of how many good parts were scrapped and bad ones shipped. Covers the ISO 9001 base for monitoring and measuring resources, then measurement system analysis for every type of measurement system in the control plan, using the reference manuals' methods or methods the customer approves, with special characteristics such as crimp height first. Explains calibration and verification records for every gauge that decides conformity, whoever owns it, and the full chain of action when equipment is found out of tolerance. Covers internal laboratories with a defined scope and external laboratories accredited for the service or evaluated. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Check MSA studies for each measurement system in the control plan
• Audit calibration records and out-of-tolerance actions
• Verify the scope and status of internal and external laboratories

Why it matters

Following the measurement, not the ownership, finds the gauge that is quietly accepting bad parts.

Practice: Practice: Measuring equipment, calibration, laboratories · 3 questions

Starts at XYZ Brakes' document control desk, where a customer revised its corrosion-coating standard and the plant cannot say how long it took to act. Covers documented information that is available, current, protected and in a language people can use. Explains the quality manual's four contents under clause 7.5.1.1, including processes, interactions and outsourced process control, and a table, list or matrix showing where each customer's requirements are addressed. Covers record retention for the time the product is active plus one calendar year, and reviewing customer engineering specifications within ten working days, with the date of implementation in production recorded. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit the quality manual against its required contents
• Check record retention against the IATF 16949 rule
• Verify the review of customer engineering specifications

Why it matters

Recording when a customer's new standard reached production shows exactly which parts were made to which revision.

Practice: Practice: Documented information · 3 questions

Opens in XYZ Brakes' sales office, where a vehicle maker nominated the plant for a new electric parking brake caliper and sales signed before engineering knew. Covers planning for product realisation that includes requirements, logistics, feasibility, project planning and acceptance criteria, with customer projects kept confidential. Explains customer communication in the agreed language and data format, requirements including material rules, and customer-designated special characteristics carried through. Covers review before committing, a documented waiver if the customer authorises skipping it, and manufacturing feasibility analysis by a multidisciplinary team for anything new, where a pilot run beats a promise. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit planning for product realisation and confidentiality
• Check the review of requirements before the plant commits
• Verify manufacturing feasibility by a multidisciplinary team

Why it matters

A proper review and feasibility check before signing stops the plant promising parts it cannot make.

Practice: Practice: Operational planning and product requirements · 3 questions

Starts at XYZ Brakes' technical centre in another district of Shanghai, where a new brake pad is in design and the question is whether a special characteristic marked on the drawing will reach the operator. Covers design planning by a multidisciplinary team, including the plant and the supply chain, with error prevention as the aim, and the skills required. Explains complete product and process design inputs, including lessons from previous projects and field data, and error-proofing in the process design, and assessing embedded software. Covers special characteristics identified by a team and marked in every document, from the drawing through the risk analysis and control plan to the work instruction. Where the chain breaks, the finding starts. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit design planning and the multidisciplinary team
• Check product and process design inputs, including field data
• Follow a special characteristic from drawing to work instruction

Why it matters

Following one special characteristic through every document shows whether the operator knows what matters most.

Practice: Practice: Design and development: planning and inputs · 3 questions

Opens at XYZ Brakes' technical centre, where after a brake noise complaint a design engineer added a slot across a pad without evaluating or approving the change. Covers design controls with measurements at each stage, validation to customer requirements, and prototype programmes made as close to production as possible. Explains the product approval process the customer defines, with suppliers approved first, and clause 8.3.4.4: documented approval before shipment where required, which a launch date does not change. Covers complete design outputs for product and process, and every design change after approval evaluated, validated, approved internally and by the customer where required, with software levels recorded. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit design validation and prototype programmes
• Check product approval before shipment where the customer requires it
• Verify that design changes are evaluated, validated and approved

Why it matters

Controlling every change after approval stops a quick fix becoming a customer's quality problem.

Practice: Practice: Design controls, outputs and changes · 3 questions

Starts in XYZ Brakes' purchasing office, recalling that the Module 1 engine recall began with two suppliers. Covers a documented supplier selection process: risk to conformity and supply, quality and delivery performance, the supplier's quality system, and a multidisciplinary decision, with directed-buy suppliers setting aside only that selection step. Explains controls chosen by risk and performance, statutory and regulatory requirements in the countries of manufacture, shipment and destination, with the plant asking the customer for destination countries, and pass-through characteristics controlled where made. Covers a minimum and target level of QMS development for every supplier, and assessing software suppliers. Directed does not mean uncontrolled. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit supplier selection, including directed-buy sources
• Check controls set by supplier risk and performance
• Verify legal requirements for manufacture, shipment and destination

Why it matters

Controlling suppliers by risk is where many automotive problems are prevented before they reach the line.

Practice: Practice: External providers: selection and control · 3 questions

Opens at XYZ Brakes' supplier quality desk, where an outside plater's scorecard has been red for six months and nothing has changed. Covers supplier monitoring of delivered product conformity, customer disruptions and delivery performance, plus the customer's field data where provided. Explains second-party audits chosen by risk and carried out by competent auditors, and development actions for suppliers whose performance is not good enough. Covers handing requirements and special product and process characteristics down to suppliers and cascading them to the point of manufacture, and incoming checks set by supplier performance, with legal compliance evidence matched to each lot. A red score must change something. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit supplier performance monitoring and the action it triggers
• Check that second-party audits are risk-based and competent
• Verify that special characteristics are cascaded to suppliers

Why it matters

Making supplier scores lead to action stops the same supplier problems reaching your line month after month.

Practice: Practice: Supplier monitoring and development · 3 questions

Starts at XYZ Brakes' honing line 2, asking whether the control plan in the quality office is the one the night shift operator follows. Covers the ISO 9001 base for control of production, then control plans linked to the process flow diagram and the process FMEA, with the contents Annex A sets, reviewed and updated when anything changes, including supply sources, as a new casting alloy shows. Explains standardised work that people understand, in their language, with safety rules. Covers set-up verification, comparing first-off and last-off parts where they apply, and verifying product after every planned or unplanned shutdown. Four documents should give one answer. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Check that control plan, flow diagram and PFMEA agree
• Audit control plan use and updates at the machine
• Verify set-up verification and checks after shutdowns

Why it matters

A control plan followed at the machine, on every shift, is the core of production control.

Practice: Practice: Production control: control plan and set-ups · 3 questions

Opens at XYZ Brakes' maintenance workshop, asking how many calipers would need recalling if a customer found one bad part tomorrow. Covers a total productive maintenance system with key equipment, spare parts, objectives, preventive and predictive methods and periodic overhaul. Explains tooling management, including customer-owned tools, equipment and test equipment permanently marked to show ownership and application, and production scheduling. Covers identification that does not rely on location, traceability plans based on risk and tested against the customer's required response time, care of customer property, preservation from receipt to delivery, and service concerns fed back to the plant. Trace one caliper, and time it. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit a total productive maintenance system and its objectives
• Check tooling management and marking of customer-owned tools
• Test a traceability plan against the customer's response time

Why it matters

Timing a real traceability trace shows whether a recall would cover one shift's parts or a month's.

Practice: Practice: Maintenance, tooling and traceability · 3 questions

Starts on XYZ Brakes' caliper assembly line when a leak tester breaks on the night shift and asks what happens to the calipers it should have tested. Covers control of changes from the organisation, the customer or a supplier, assessed, validated before use, and notified to and approved by the customer where required. Explains alternate process control methods: listed in the control plan, approved, run with standardised work, reviewed daily, and with every part made under them traceable. Covers release of product following the control plan, with defined acceptance criteria, zero defects for attribute data sampling under clause 8.6.6, and a named person authorising release. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit control of changes from first proposal to first shipment
• Check approval and daily review of alternate process controls
• Verify product release and zero-defect attribute acceptance

Why it matters

Following one change to first shipment shows whether a broken tester lets untested calipers out.

Practice: Practice: Control of changes and release · 3 questions

Opens beside the honing line at XYZ Brakes, asking where a scrapped caliper goes after the red bin and whether it could ever come back. Covers identifying and containing nonconforming and suspect product, people trained to do it, and customer concessions that are authorised, labelled and time-limited. Explains rework and repair that start with risk analysis and are confirmed, instructed and recorded, with repair needing customer approval and a concession every time. Covers notifying the customer immediately when nonconforming product has been shipped, with detailed documentation following, and making scrap unusable before disposal. Count the rejects in, and out. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit identification and containment of suspect product
• Check rework and repair against risk analysis and approvals
• Verify customer notification and disposal of scrap

Why it matters

Counting rejects in and out ensures scrap never finds its way onto a road vehicle.

Practice: Practice: Control of nonconforming outputs · 3 questions

Starts in XYZ Brakes' quality office, where the main customer's supplier portal shows red ratings for delivered quality, and asks how long before top management acts. Covers manufacturing process studies for new processes, verifying the plan is followed, and reaction and corrective action plans for characteristics that are not capable, with people who understand variation, stability, capability and over-adjustment. Explains customer satisfaction measured by objective indicators, including portals and scorecards, and trends that lead to prioritised action. Covers management review at least annually, more often with risk, with the IATF inputs, and an action plan when customer performance targets are missed. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit process studies and reaction plans for incapable characteristics
• Check customer satisfaction monitoring through portals and scorecards
• Verify that management review sets actions for missed targets

Why it matters

Following one red customer target to its action shows whether data really drive decisions.

Practice: Practice: Monitoring, analysis and management review · 3 questions

Opens with XYZ Brakes' corrective action log, where records look complete but the same problem has returned three times. Covers problem solving that prevents recurrence: containment, root cause analysis, systemic action across similar processes, verified effectiveness and updated documents such as the PFMEA and control plan. Explains error-proofing chosen by a documented process, recorded in the PFMEA and control plan, tested for failure or simulated failure at set frequencies, with a reaction plan and records. Covers warranty management and analysis of returned and field-failure parts, customer complaints, and continual improvement once processes are stable and capable. Closes Part B: a closed report is not a solved problem. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit problem solving for containment, root cause and systemic action
• Check error-proofing devices are tested and recorded
• Verify analysis of warranty returns and field failures

Why it matters

Checking that a problem stayed solved stops the same defect returning a fourth time.

Practice: Practice: Improvement and problem solving · 3 questions

Opens Part C with the question of where you would spend the morning if you had one day to audit the Shanghai brake plant, starting from last year's audit of the plant. Settles the key terms from ISO 19011:2026: audit criteria, audit evidence under clause 3.10, findings and conclusions, with internal audits as first-party audits of all three IATF types. Explains a programme prioritised by risk, performance and criticality, with a reason for each frequency and every process within three years. Covers each audit's objectives, scope and criteria, a one-page audit plan that reaches every shift, and a checklist built from this year's risks. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Explain audit criteria, evidence, findings and conclusions
• Prioritise an IATF audit programme by risk and performance
• Write a one-page audit plan and a risk-based checklist

Why it matters

Planning where the risk is puts your one audit day where problems are most likely.

Practice: Practice: Audit concepts and planning · 3 questions

Starts on caliper line 2 at XYZ Brakes, where a shift leader says the leak tester is checked every morning, which is a statement, not yet evidence. Covers the opening meeting that confirms the plan and roles, and on the floor keeping site rules and not disturbing the process. Explains collecting evidence through interviews, observation, documents, records and data, by sampling, and accepting it only when it can be verified by a record, an observation or a second person. Covers following trails from customer data to the shop floor, reporting urgent risks at once, and notes that record what, where, when and who. A statement is a lead, not a finding. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Run an opening meeting and keep site rules on the floor
• Verify statements through records, observation or a second source
• Follow audit trails from customer data to the shop floor

Why it matters

Verifying what you are told is what turns a pleasant conversation into evidence a finding can stand on.

Practice: Practice: Conducting the audit · 3 questions

Opens on XYZ Brakes' pad pressing line, where the day shift shows control plan revision D with a new press-temperature check, and the question is whether the night shift works the same way. Covers clause 9.2.2.3: a manufacturing process audit that determines effectiveness and efficiency and audits the effective implementation of the PFMEA, control plan and associated documents, which needs the shop floor, not the quality office. Explains preparing with the four documents and checking they tell one story at current revisions, then testing controls, a changeover, reaction plans and process results on the floor, auditing every shift over the cycle, and sampling the handover. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Prepare a process audit from the four linked documents
• Test controls, changeovers and reaction plans on the floor
• Audit every shift and sample the shift handover

Why it matters

Going back at night shows whether the process runs the way the day shift and the paperwork say.

Practice: Practice: The manufacturing process audit · 3 questions

Starts in XYZ Brakes' engineering office, where the caliper line PFMEA was last revised at launch three years ago despite later complaints and changes. Explains that an internal auditor need not be an expert in FMEA, MSA and SPC, but must know what each tool should produce, where to find it and how to tell if it is used or only filed. Covers reading the core tools as living evidence, updated after complaints and changes and consistent with each other, measurement studies for each system in the control plan, control charts kept as planned and acted on, and product approval under clause 8.3.4.4. Covers the product audit: independent, risk-based, following the customer's approach, and different from layout inspection. It ends with 'Pause, and decide' clause moments, a recap and three practice questions.

What you will be able to do

• Audit core tool outputs as living evidence
• Check that FMEA, MSA, SPC and control plan agree
• Plan a product audit and tell it from layout inspection

Why it matters

Comparing the dates on the core tools shows quickly whether they guide the process or just sit in a file.

Practice: Practice: Core tools in evidence, and the product audit · 3 questions

Opens with last year's XYZ Brakes audit report, whose finding reads in full 'poor document control', which nobody could act on a month later. Covers writing a nonconformity that names the requirement, the evidence and the statement, with a grade if the plant uses one, and why, without an unmet requirement, a point is at most a non-binding opportunity for improvement. Explains a closing meeting and report that present only what was discussed and state that the audit was a sample. Covers actions taken without undue delay, and the auditor verifying that they work against the problem-solving requirements. In the audit practice you write and grade findings yourself. Closed means verified. It ends with 'Pause, and decide' clause moments, a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Write a nonconformity that names requirement, evidence and statement
• Tell a nonconformity from an opportunity for improvement
• Verify that corrective actions work before closing them

Why it matters

A clear finding tells a manager exactly what was wrong and where, so it gets fixed.

Practice: Practice: Findings, closing and follow-up · 3 questions

Opens with the brief: the quality manager at XYZ Brakes asks you to lead a manufacturing process audit of caliper line 2. Follows the audit step by step using everything from Parts B and C: planning by risk with objectives, scope and criteria, preparing from complaints, changes and data, auditing every shift, verifying what you are told, reporting immediate risks at once, writing three-part nonconformities with grades the plant defines, discussing them before leaving, and following up until actions work. Sums up the key takeaways, gives advice for your first audit of a process that is not your own, explains the final exam and certificate, and what this course prepares you for.

What you will be able to do

• Plan a manufacturing process audit by risk
• Conduct and report an audit across every shift
• Follow up findings until the actions work

Why it matters

Running one full audit from plan to report prepares you to lead your first real process audit.

Practice: Practice: A practice audit at the brake plant · 3 questions