Internal Audit Report

Audit Identification: IA202614
Area: Corrective Actions
Audit Date: 7th May 2026
Auditor: Sean Ashton (HSQE Consultant, Onyx Operations)
Date Completed: 7th May 2026
Findings: 0 Non-conformities, 0 Observations
Scope: ISO 9001:2015 / 14001:2015 / 45001:2018 — Clause 10.2
Document Number: FORM_INTAR001 Rev 1 ID 01/09/2025
Builds on prior audit: IA202514 (02/10/2025) — 0 NC, 1 OBS

Executive Summary

This audit re-examined the Corrective Action workflow one year on from IA202514. The 2025 observation is closed:

• CAR-2025-019 (quarterly trend analysis to leadership) — closed. The standing weekly Director / HSQE compliance call provides routine NC / CAR visibility to leadership in real time, replacing the quarterly trend report concept. The audit-readiness Gap Closure tracker provides programme-level visibility against the 15 P1 items. The 5 CARs raised by IA202601–04 (28/04–01/05) plus the 2 from IA202605 / 13 are visible in real time.

No new observations. The corrective-action workflow is operating as designed: this very 2026 IA cycle is generating CARs on a planned basis, with named owners and target dates, all tracked through APP_21 and the gap-closure tracker.

Year-on-year follow-up — IA202514 outcomes

2025 ref	2025 finding (summary)	Status in 2026 audit
OBS-IA14-01 / CAR-2025-019	Trend analysis not formally reported outside MR	Closed. Standing weekly Director / HSQE compliance call provides routine real-time leadership visibility; gap-closure tracker provides programme-level view. Quarterly written report deemed unnecessary at AMWS scale.

Introduction

This audit examined the Corrective Action workflow (clause 10.2) — root-cause identification, effectiveness verification, prevention of recurrence — one year on from IA202514.

Aims & Objectives

1. Confirm closure of IA202514 OBS-IA14-01
2. Verify the corrective-action pathway from raise → root cause → action → close-out → effectiveness check operates for the 2026-cycle CARs raised so far
3. Sample CAR records for evidence of root-cause analysis and not just symptom treatment
4. Confirm CAR records are accessible (APP_21) and integrated with the wider improvement framework

Audit Method

• Document Review: SOP 7.1 Complaints / NCR / Corrective Action Rev 3 HTML, APP_21 NC Register Rev 3, gap-closure tracker, the 7 CARs raised in the 2026-IA cycle to date (CAR-2026-001 through 007).
• Interviews Conducted: Directors (Aaron + Leanne Mason — CAR owners), Site Supervisor (Jason May — CAR owner for some operational items), HSQE Consultant.
• Observations: Walkthrough of CAR-2026-001 (light-touch monthly context capture) and CAR-2026-005 (Q2 BCP desktop) from raise → action plan → expected close-out.
• Sampling: 7 × 2026-IA CARs against SOP 7.1 workflow; 6 of the 15 P1 gap-closure items closed in 2025–26 (#1, #3, #4, #7, #8, #9, #11, #12, #14, #15) reviewed for closure evidence quality.

Non-conformities

No non-conformities identified.

Observations

No observations identified.

Conclusions

The Corrective Action workflow is functioning as designed:

Areas Meeting Requirements (sustained from IA202514):

• APP_21 continues to operate as the canonical CAR register
• SOP 7.1 continues to define the workflow (now in rebuilt HTML format)
• Root-cause analysis continues to be evidenced in CAR records

New strengths since IA202514:

• 2026-IA CAR pipeline. Within 8 days of starting the 2026 IA cycle (28/04 to 06/05), 7 CARs raised, 7 owners named, 7 target dates set, all visible in the gap-closure tracker. The auditor can trace CAR-2026-005 in particular — Q2 BCP desktop — from observation through to scheduled close (28/05/2026).
• Programme-level CAR visibility through the gap-closure tracker — bridges between individual CARs and strategic risk.
• Closed gap-closure items demonstrate 10.2 close-out quality — 10 of 15 P1 items closed in the 2025–26 cycle each have a documented closure entry naming the artefact that closes them (e.g. #1 Suppliers → APP_19 Issue 4 + sar-2026/; #4 TBT → TBT_PROG_01; #7 IT Security → POL_HSQE_30; #15 Recycling → recycling-initiatives.md). Effectiveness of the corrective action is therefore directly verifiable by inspection of the deliverable.

Recommendations

1. Continue using the standing weekly compliance call as the active CAR-review forum.
2. At the September 2026 MR, present the 2026-IA CAR set with status — close out the cycle visibly.
3. As the 2026 IA cycle continues (12 audits remaining IA202607–IA202616), expect more CARs to be raised — this is the system working, not a sign of regression.

Feedback & Acknowledgments

Full cooperation. The 2026 IA cycle has been deliberately structured to test the corrective-action workflow under load, and the system has handled the 7 CARs raised in 8 days without any backlog or bottleneck.

Audit Report Prepared By

Name	Position	Signature	Date
Sean Ashton	HSQE Consultant	S. Ashton	07/05/2026
Aaron Mason	Director	A. Mason	07/05/2026

Corrective Action Close Out

No CARs raised by this audit.