Introduction

TruCert provides CQM Auditing services.

This page describes how a Vendor (the auditee of the CQM audit) should prepare for being CQM Audited by TruCert.

The main points are:

• For on-site audits:
  • cqmAP form
  • Organizational Diagrams
  • Corrective Action Plan from the previous CQM audit
  • Presentations
  • Audit Plan
• In addition, for remote audits:
  • cqmGIAP
  • CQM Remote Audit - Information Exchange Agreement between Vendor and Auditor

 The sections below explain each item.

On-Site Audits

cqmAP Form

The cqmAP form is the main operational document for a CQM Audit.

It contains:

• Administrative information about the Vendor, the audit, and the auditor
• Means of defining the scope of the audit
• Lists of applicable requirements for QMS and each CQM product
• Sections for the Vendor to declare their compliance and list their main evidences for the audit
• Sections for the auditor to record their notes and findings
• Forms for the corrective action plan, listing the auditors finding, the Vendor's corresponding corrective action, status report and list of evidences for completion by the Vendor, and the assessment of completion by the auditor
• A Report form that serves as the audit report and the status report for the corrective action plan

Prior to the audit the Vendor needs to complete the following worksheets in the cqmAP:

• Coverpage - Section 1
• Audit Scope and Compliance - Column C
• applicable QMS worksheet - blue sections (columns G to I)
• Each applicable product worksheet, blue sections (columns J to V)

Organizational Diagrams

Prior to the audit, the Vendor shall provide one or multiple organizational diagrams providing the following information:

• Corporate organization, showing the top level management functions, identifying the name of the function (eg: CFO) and the name of the current responsible for the function (eg: Peter Parker)
• Site organization, showing the management functions of the site, identifying the name of the function (eg: Production Manager) and the name of the current responsible for the function (eg: Mary Jane Watson)
• Quality Management organization within the site, identifying the name of the function (eg: Quality Manager) and the name of the current responsible for the function (eg: Gwen Stacy)

Corrective Action Plan from the previous CQM audit

If the corrective action plan from the previous audit was already in the CAP worksheet of the cqmAP, then simply copy and paste the corrective action plan (from row 13 onward), including all notes by the auditor, into the "CAP previous" worksheet.

Otherwise, please enter the respective data into the "CAP previous" worksheet manually.

Presentations

Presentations are no longer required. All required information to be provided is entered into the cqmAP Coversheet.

If you want to provide additional information about your company, for example a company introduction, or a list of developments since the previous audit, then you are free to do so, but this is not required.

Audit Plan

The audit plan will be defined by the auditor in the Audit Schedule worksheet in the cqmAP.

Remote Audits

Introduction

For remote audits, all the items for On-Site Audits apply.

In addition, the Vendor must provide prior to the audit:

• cqmGIAP
• CQM Remote Audit — Information Exchange Agreement between Vendor and Auditor

This section describes the additional items for Remote Audits.

The relevant files for the Remote Audit can be downloaded here: https://cqm8.net/bin/view/Downloads/CQM%20Remote%20Audit%20Files/

Please take note of the different renewal intervals after a Remote Audit: Mastercard CQM — Remote Assessment Process — v1.3.pdf

cqmGIAP

Please complete the worksheets related to the products you want included in your CQM Certificate.

The cqmGIAP must be completed as the result of an internal audit of the production lines.

Information Exchange Agreement between Vendor and Auditor

Please send an e-mail to your auditor (uwe@trucert.com or summer@trucert.com) confirming that you agree to the ”CQM Remote Audit — Information Exchange Agreement between Vendor and Auditor”, with the agreement attached to the email. You do not need to sign the agreement.

Entertainment and Gifts

There is no expectation by the auditor to receive gifts or being provided entertainment by the audited company or individuals.

Food and drinks provided in the ordinary course of business are acceptable.

If your company insists on providing some sort of gift, then please keep it reasonable. A small bag of tea or coffee as a gesture is acceptable, valuables are not. Also, keep in mind that the auditor might be in the middle of a longer trip and has very limited transportation capacity.

Anything outside these limitations will be rejected by the auditor.