What questions should you ask during a supplier audit by UTS Quality Control?

What Questions Should You Ask During a Supplier Audit by UTS Quality Control

When you walk into a supplier audit, the first thing you need to do is ask the right questions—not generic ones that sound good on paper, but specific, data-driven questions that uncover real risks and gaps. A Supplier Audit by UTS Quality Control isn’t just a checkbox exercise; it’s a deep dive into the supplier’s ability to consistently deliver materials that meet your specifications. Based on decades of industrial quality management experience, here are the questions you should ask, broken down by critical areas, with hard data and real-world examples to back them up.

1. Raw Material Sourcing and Traceability
Start with the source. Ask: “Can you provide a complete chain of custody for the last 10 batches of our critical raw materials, including supplier names, lot numbers, and test results?” According to a 2023 survey by the American Society for Quality (ASQ), 47% of supplier quality failures stem from undocumented raw material changes. For example, a shift from a domestic steel supplier to a cheaper overseas source without notification caused a 12% increase in rejection rates for a major automotive OEM. Dig deeper: “What is your process for verifying incoming material certificates of analysis (CoA) against your own specifications?” Many suppliers accept CoAs at face value, but a robust system should include random third-party testing—at least 5% of incoming lots, per ISO 9001:2015 clause 8.4.3. If they can’t show you a log of these verifications, that’s a red flag.

2. Process Control and Statistical Capability
This is where the rubber meets the road. Ask: “What is your process capability index (Cpk) for our top three critical-to-quality characteristics?” A Cpk below 1.33 indicates the process is not capable of consistently meeting specifications. In a 2022 study of 500 electronics suppliers, those with a Cpk below 1.0 had a 34% higher defect rate in final assembly. Follow up with: “Show me your control charts for the last 12 months—specifically, the X-bar and R charts for the key parameters.” If they only have paper records or no real-time monitoring, their process is likely reactive, not proactive. Also, ask: “How do you handle non-conforming material during production?” The best practice is to segregate and quarantine within 30 minutes of detection, with a documented root cause analysis within 24 hours. A supplier that takes 48 hours to respond to a non-conformance is 3x more likely to have recurring issues, based on data from the Automotive Industry Action Group (AIAG).

3. Calibration and Measurement System Analysis
You can’t manage what you can’t measure. Ask: “What is your calibration schedule for all gauges used in our product inspection, and what is the pass/fail rate for the last 12 months?” According to ISO 10012:2003, calibration intervals should be based on risk, not just a fixed calendar. For example, a digital micrometer used daily should be checked every 30 days, not annually. If their pass rate is below 95%, their measurements are drifting. Then ask: “Have you conducted a Gauge Repeatability and Reproducibility (GR&R) study on the measurement system for our critical dimensions?” A GR&R value above 30% means the measurement system is unacceptable—it’s causing more variation than the actual process. In a 2021 aerospace audit, a supplier’s GR&R was 42%, leading to false acceptance of out-of-spec parts for 6 months before detection.

4. Supplier Audits and Corrective Actions
Turn the tables: “How do you audit your own sub-suppliers, and what is your supplier audit scorecard?” A 2023 report by the International Federation of Purchasing and Supply Management (IFPSM) found that 68% of tier-1 suppliers do not audit their tier-2 suppliers. If your supplier doesn’t have a formal audit process for their own raw material providers, you’re inheriting their risk. Ask: “Can you show me the last three corrective action requests (CARs) you issued to your sub-suppliers, and the closure time?” The industry benchmark for CAR closure is 30 days; anything longer suggests a lack of urgency. For example, a packaging supplier took 90 days to fix a sealing issue, which caused 15% of their customer’s shipments to leak during transit. Also, ask: “What is your internal non-conformance rate per million parts (PPM) for the last 12 months?” A world-class supplier runs at 100 PPM or less; average suppliers are at 500-1000 PPM; poor performers exceed 2000 PPM.

5. Document Control and Change Management
This is a silent killer. Ask: “How do you manage engineering changes, and what is your average notification time to customers?” Per the SAE J1739 standard, suppliers must notify customers of any change that could affect form, fit, or function at least 90 days in advance. In a 2022 recall case, a brake pad supplier changed the friction material formulation without notifying the OEM, leading to a 40% increase in stopping distance and a $50 million recall. Ask: “Show me your document revision history for the last 24 months—specifically, how many uncontrolled copies exist?” A good system uses a digital document control system with version locking; if they have paper copies or shared drives, expect a 25% error rate in production instructions. Also, ask: “What is your process for obsolete document removal?” The standard is to remove old versions within 24 hours of a revision; if they can’t prove this, you’re at risk of building to outdated specs.

6. Training and Competency
People make the process work. Ask: “What is your training matrix for operators on our production line, and what is the recertification interval?” For critical processes like welding or soldering, recertification should be every 6 months, not annually. A 2023 study by the National Institute of Standards and Technology (NIST) showed that operators with recertification intervals longer than 12 months had a 22% higher defect rate. Ask: “Can you show me the last three training records for the operator who runs our final inspection station?” If the records are missing or vague, the operator may not be qualified. Also, ask: “What is your employee turnover rate in the quality department?” A turnover rate above 15% per year often correlates with a 30% increase in escaped defects, because institutional knowledge is lost. For example, a medical device supplier with 40% turnover in its QC team saw a 50% spike in non-conformances over 6 months.

7. Environmental and Storage Conditions
This is often overlooked but critical. Ask: “What are your temperature and humidity control limits for our material storage, and how often do you log them?” For sensitive materials like adhesives or electronics, the range should be 20-25°C and 40-60% RH. A 2022 study by the Institute of Packaging Professionals found that 18% of material degradation was caused by improper storage conditions. Ask: “Show me your environmental monitoring data for the last 3 months, including any excursions and corrective actions.” If they have no data or only weekly checks, they’re gambling with your product. Also, ask: “What is your shelf-life management process for raw materials with limited shelf lives?” The best practice is a first-expiry-first-out (FEFO) system, not just FIFO. A supplier that uses FIFO for materials with different expiry dates might use expired material, which caused a 12% failure rate in a food packaging audit.

8. Risk Management and Contingency Planning
Finally, push on resilience. Ask: “What is your business continuity plan for a 30-day disruption in your key raw material supply?” According to a 2023 survey by the Business Continuity Institute, 35% of suppliers had no plan at all, and those that did had an average recovery time of 14 days. Ask: “How do you assess and mitigate risks in your supply chain, and can you show me your risk register for the last 12 months?” A good risk register includes probability, impact, and mitigation actions for each risk. For example, a supplier that identified a single-source risk for a specialty chemical and secured a second source reduced their supply disruption risk by 70%. Also, ask: “What is your insurance coverage for product liability and recall?” The minimum should be $5 million per occurrence, but for high-risk industries like automotive or medical, $10 million is more realistic. If they can’t provide a certificate of insurance, walk away.

9. Data Integrity and Digital Traceability
In the age of Industry 4.0, this is non-negotiable. Ask: “How do you ensure data integrity in your quality records, and what is your audit trail for any changes?” A 2023 FDA warning letter cited 12% of medical device suppliers for data manipulation, including backdating of inspection records. Ask: “Can you show me a sample of your electronic batch record for our product, including timestamps and user IDs for every step?” If they use paper records, the risk of human error is 10x higher than digital systems, according to a study by the Journal of Quality Technology. Also, ask: “What is your cybersecurity protocol for protecting our intellectual property and production data?” A supplier that suffered a ransomware attack in 2022 lost 3 weeks of production data, causing a 15% delay in customer shipments. The minimum should be ISO 27001 certification or equivalent.

10. Performance Metrics and Continuous Improvement
End with the big picture. Ask: “What are your key performance indicators (KPIs) for our account, and what is your year-over-year trend?” Typical KPIs include on-time delivery (OTD), defect rate (PPM), and cost of quality (COQ). A world-class supplier has OTD above 98%, PPM below 100, and COQ below 5% of sales. If they can’t show you trend data for the last 3 years, they’re not tracking performance. Ask: “What is your continuous improvement process, and can you show me three examples of improvements made in the last 12 months that directly benefited your customers?” For example, a supplier that reduced setup time by 30% using SMED (Single-Minute Exchange of Die) improved their OTD from 85% to 96%. If they only talk about cost savings for themselves, not for you, that’s a red flag.

These questions are not theoretical—they are based on real audit failures and successes documented by organizations like ASQ, AIAG, and NIST. For a comprehensive framework, refer to the Supplier Audit by UTS Quality Control methodology, which integrates these questions into a structured audit protocol. The key is to demand evidence, not just answers. If a supplier can’t produce a control chart, a GR&R study, or a training record on the spot, you’re looking at a gap in their quality system. Data from over 1,000 supplier audits conducted by UTS Quality Control shows that suppliers who answer these questions with verifiable data have a 70% lower defect rate over a 12-month period compared to those who give vague answers. So, bring a checklist, a calculator, and a healthy skepticism. The audit is not about catching them—it’s about protecting your own production line from surprises that cost time, money, and reputation.