Factory audit checklist for overseas manufacturers

TL;DR

• Decide whether sampled evidence at a named factory supports one next sourcing step for a defined part and process, not full supplier approval, using the NIST conformity-assessment framework.
• Name entity, site, revision, route, and criteria, then follow a comparable job through objective evidence.
• Treat wrong site, unmeasurable critical features, broken traceability, uncontrolled special processes, or unresolved gage impact as a Hold that no score can offset.
• After closure, authorize only a bounded next step such as a controlled sample while capacity, purchase order, payment, production, and shipment decisions remain separate.

Define the audit decision before the visit

A factory audit answers one bounded question: whether selected processes and controls at a named site satisfy the stated audit criteria. It does not prove everything about the supplier. The NIST conformity-assessment overview identifies an assessment by a purchaser or user as second-party conformity assessment. That is different from independent third-party certification.

Complete the manufacturer identity and capability screen before paying for a visit. The audit report should repeat the legal manufacturer, exact site, process scope, parts or family, revisions, date, audit team, criteria, access limits, and decision it supports.

Use risk to decide whether a full audit is justified

An on-site factory audit is most useful when the buyer faces custom tooling, critical characteristics, sensitive or outsourced processes, substantial first-order exposure, a costly failure, or conflicting desktop evidence. Add a process specialist when the decision depends on casting, forging, heat treatment, welding, coating, machining, or another process that a general auditor cannot evaluate competently.

Build the evidence plan before anyone travels

The agenda should name the evidence, people, areas, and samples the auditor needs. A supplier can prepare documents and protect legitimate customer confidentiality, but it should not choose every audit sample after the auditor arrives.

Verify the certificate without treating it as the audit

ISO published ISO 9001:2026 on September 16, 2026. A 2015 certificate may still appear during an organization's transition. Record the exact standard edition, legal entity, site, scope, issuer, accreditation path, status, and dates. Verify them through the certification body or the routes described in ISO's current certification guidance. Then audit the product-specific controls that the certificate does not answer.

Send a focused pre-audit request

1. Current organization and responsibility map for the audited site.
2. Certificate and external-audit records relevant to the stated scope.
3. Proposed process flow, equipment list, and material subprocessors.
4. Current control plan, work instructions, and critical-characteristic list where applicable.
5. Training, qualification, maintenance, calibration, and measurement-system records selected by risk.
6. A comparable recent work order available for a live audit trail.
7. Recent nonconformance, corrective-action, traceability, and change examples.
8. Known access limits and acceptable substitute evidence.

Follow a real job instead of the presentation route

Start with a live or recent job that is comparable to the proposed work. Follow its material and information flow. The ISO 9001 Auditing Practices Group's evidence-collection paper explains that audit evidence should be relevant and verifiable and will normally be sampled because an audit has finite time and resources. The paper is guidance, not a universal requirement.

Trace backward from finished output

1. Select a finished item, work order, lot, or shipment record independently within the agreed scope.
2. Identify the part number, revision, order, production date, quantity, and disposition.
3. Connect the item to inspection results, equipment or tooling, program, operator or shift, and any rework.
4. Connect each outside process to the named provider, requirement, certificate, receipt check, and change control.
5. Connect the route to raw-material or component heat, batch, lot, source, receipt, and applicable evidence.

Trace forward from one input

Select one material or component lot and follow where it went, which jobs consumed it, which inspections covered it, whether any portion was rejected or reworked, and which package or shipment records carry the output. A useful trace defines the affected population when a problem appears.

Use remote evidence only for questions it can answer

Remote document review, interviews, live video, and digital-record sampling can close selected questions before or after the visit. Write who controlled the camera, how the site and equipment were identified, whether footage was live, how records were selected, and what could not be observed. Move to on-site or specialist review when the risk depends on physical segregation, process conditions, independent sampling, or access outside the host's view.

Use one factory checklist, then tailor the evidence

Keep the same control families across candidates, but change the depth and evidence for the part and process. ABB's current public Global Supplier Quality Manual is one customer-specific example of risk-based qualification, site-specific audits, sub-tier oversight, and process-specific assessment. Its rules govern ABB suppliers, not every factory. The checklist below is a buyer-authored framework.

The public 3M Scott supplier quality clauses provide a customer-specific example connecting control plans, measurement, sub-tier oversight, and product traceability from receipt through production and shipment. Use the governing buyer, customer, contract, and industry requirements for the actual audit.

Copy the seven-part audit packet

Copy each section into its own sheet at cell A1 in Excel or Google Sheets. Adapt the criteria before the audit. Together, the seven sections preserve the decision boundary, requested records, sampled process trail, certificate checks, traceability test, findings, and final release decision.

Close findings with evidence, then release one step

A score summarizes preferences. It does not resolve a failed mandatory criterion. Give each finding an exact requirement, observed evidence, affected scope, status, owner, due date, required closure evidence, reviewer, and final disposition.

Require more than a rewritten procedure

Closure normally needs evidence that the immediate risk was contained, affected product was addressed, the cause was understood, the control changed, responsible people were prepared, implementation occurred, and effectiveness was checked. Match the depth to the finding. A supplier promise or future-dated procedure is not implementation evidence.

State the release boundary in one sentence

Write both sides of the decision. Example: “After findings F-02 and F-05 close, procurement may request five identified Rev C sample units from plant P. Tooling payment, production purchase order, production release, shipment, and supplier approval remain blocked.” The buyer's authorized roles choose the real quantity, evidence, and approvals.

If capacity remains open, move the observed equipment, maintenance, rate, yield, load, and sub-tier evidence into the separate MOQ, tooling, lead-time, payment, and capacity gate. The audit does not reserve capacity or approve the order economics.

Worked example: a factory visit creates two Holds

A US pump manufacturer is evaluating a machined housing, fictional part PH-204 Rev C. Manufacturer M proposes plant P for machining and inspection. Named subprocessor A would anodize the part. The audit's next decision is whether the buyer may request controlled sample units. It is not a supplier award or production release.

Decision

The audit is Conditional, with two mandatory Holds. The obsolete drawing copy can close through a bounded document-control correction. The overdue bore gage requires calibration and an affected-product review. The anodizing route needs applicable qualification and change-control evidence. Only after the buyer accepts both Hold closures may the authorized team request the defined sample step.

Common pitfalls and what they block

Auditing the sales office or presentation site

The report describes a real facility, but not the plant proposed for production. The buyer cannot use it to release samples or tooling and must repeat the site assessment.

Using one generic checklist for every process

The audit records clean floors and documented procedures but never tests the casting, machining, welding, coating, heat-treatment, or measurement risk that can fail the part.

Accepting a certificate PDF without verification

The certificate covers another entity, site, scope, edition, or status. The buyer records “certified” while the proposed production route remains unsupported.

Following only the supplier's prepared tour

The auditor sees demonstration equipment and selected records but never chooses a real job. Undisclosed subcontracting or uncontrolled rework appears only after sample or production money is committed.

Skipping the backward and forward trace

A later defect cannot be bounded to a material lot, route, tool, inspection record, or shipment. Containment expands to every unit whose identity cannot be separated.

Checking the calibration sticker and stopping

The instrument may be unsuitable, overdue, damaged, or found out of tolerance with no affected-product review. Product accepted by that measurement remains suspect.

Calling machine count available capacity

The audit confirms equipment exists but ignores maintenance, yield, changeover, labor, material, competing load, and the outside-process queue. The commercial schedule still has no supported capacity basis.

Averaging a mandatory Hold into a passing score

Strong housekeeping and communication offset an uncontrolled special process or broken measurement system. The supplier advances even though the next technical gate should remain blocked.

Treating prerecorded video as independent observation

The auditor cannot establish when or where the footage was captured, who selected the route, or what sits outside the frame. The remote evidence cannot support the intended physical-process conclusion.

Closing a finding with a future procedure

The document changes, but affected product, training, implementation, and effectiveness remain untested. The same failure can recur during the sample or first production run.

Using audit completion as sample or production approval

The supplier buys material or starts production before the buyer approves the sample evidence, deviations, capacity, tooling, commercial terms, purchase order, and release authority.

Using a general auditor for specialist conclusions

The report claims labor, environmental, regulatory, cybersecurity, or special-process compliance without the applicable criteria or competence. The customer or accountable specialist cannot rely on it.

Glossary

Audit criteria

The policies, procedures, requirements, specifications, customer documents, or buyer controls against which evidence is evaluated.

Audit evidence

Records, observations, statements of fact, measurements, tests, or other verifiable information relevant to the audit criteria.

Audit scope

The named entity, site, process, product family, time period, criteria, functions, and boundaries covered by the audit.

Second-party audit

An assessment performed by a customer or on the customer's behalf against defined requirements.

Third-party certification

An independent conformity-assessment body's certification of a stated management system, product, process, or other defined scope.

Quality management system (QMS)

The organization's system for directing and controlling work that affects quality.

Audit trail

A connected path through selected processes and records that lets the auditor test how requirements, material, work, evidence, and decisions interact.

Objective evidence

Verifiable information that supports whether a criterion is met, rather than an unsupported assurance or opinion.

Sub-tier supplier

An external provider used by the primary supplier for material, components, processing, inspection, testing, or another input.

Special process

A process whose output may require process control, qualification, or destructive and later verification because final inspection alone may not reveal every result.

Control plan

A controlled description of the product and process characteristics, methods, frequency, records, and reactions used to manage production.

Measurement traceability

The documented connection between a measurement result and stated references through an appropriate calibration chain.

Nonconforming output

Product, material, service, or process result that does not satisfy an applicable requirement.

Corrective action

Action that addresses the cause of a detected problem to reduce or prevent recurrence, with implementation and effectiveness evidence.

Conditional approval

Authorization for one bounded next step while a named condition, owner, expiry, evidence requirement, and later gate remain active.

Hold

A mandatory stop caused by failed, contradicted, inaccessible, or unsupported evidence that cannot be offset by a favorable score.

Frequently asked questions

Practical answers for US industrial buyers planning, running, and closing an overseas manufacturer factory audit.