Customer Audits, Control Plans Often Nonconforming? —— Five-Step Self-Check Method and High-Frequency Nonconformity List

The control plan is a critical checkpoint for PPAP submission, mass production delivery, and customer audits. However, many companies' control plans are "thick when compiled, but vague when reviewed": auditors flip through page by page, but the site cannot match the content. In ten customer audits, eight times the nonconformities are found in the control plan. In fact, the auditor's routine is fixed—checking consistency, checking the closed loop, and checking the version. This article uses a case study from a stamping parts factory to explain a five-step self-check method for control plans, eliminating nonconformities before the audit.

1. Auditors Check Three Things in the Control Plan

The control plan is the "master outline" of process control. Regardless of which page the auditor starts from, they will eventually focus on these three aspects:

1. Consistency: The control plan must align with the drawings, special characteristics list, and PFMEA: if SC/CC is marked on the drawings, there must be corresponding entries in the CP; if failure modes are identified in the PFMEA, there must be corresponding control measures in the CP. Any inconsistency in characteristic numbers, tolerances, or control methods is a nonconformity.
2. Closed Loop: After an anomaly occurs, the reaction plan must clearly specify "who does what, what is done, and how long it takes to complete." After handling the issue, there should be a verification and escalation path, not just a vague "notify the quality department." Auditors are most annoyed when the reaction plan is written in general terms.
3. On-Site: Auditors will always go to the production line to see if the actual operations match what is written in the CP: whether the work instructions are consistent with the CP, whether the inspection records match the sampling frequency, and whether control charts are being used. Consistency between what is written and what is done is the soul of the control plan audit.

2. Case Study: Four Nonconformities Issued in One Audit

A certain automotive parts company produces stamping parts. During the customer's annual audit, the control plan was issued four nonconformities: missing control methods for SC characteristics in the CP; the CP states "SPC monitoring," but the actual on-site inspection is full inspection; the reaction plan only states "notify the quality department" without specifying the handling process; the version hanging on-site is the old one before PPAP submission. The quality department used the five-step self-check method to address each nonconformity, and one month later, the customer's re-audit closed all issues, upgrading the audit conclusion from "conditional pass" to "direct pass."

3. Five-Step Self-Check Method for CP

1. Check the List: Compare the characteristic list in the CP with the drawings and special characteristics list item by item, ensuring no SC/CC items are missing, the numbers are correct, and the tolerance units are consistent. The most common mistake is that the R&D department adds special characteristics late in the development phase, but the CP is not updated accordingly. It is recommended to use the latest version of the drawings for a line-by-line comparison, rather than just reviewing the CP itself.
2. Check the Source: Compare the CP with the PFMEA line by line: ensure that each failure mode has corresponding control measures in the CP; for items with high RPN, check if the control intensity is sufficient. The CP is not a simplified copy of the PFMEA, but rather a translation of "what to prevent" into "how to control on-site." When the PFMEA is updated, the CP must also be updated.
3. Check On-Site: Randomly inspect three to five processes on the production line, comparing the work instructions and actual employee actions to see if they match what is written in the CP. Verify the sampling frequency, sample size, measuring tool numbers, and control methods, and then check the inspection records and monitoring records to ensure they are being followed.
4. Check the Closed Loop: Rehearse each reaction plan: simulate a deviation, and see if the frontline employees know who to contact, how to handle it, and when to escalate. A reaction plan that can be rehearsed is genuine; one that cannot is just paperwork.
5. Check the Version: Verify the revision number, signatures, and dates of the CP to ensure they are synchronized with the PPAP submission version and engineering changes (ECN). Updating the CP before releasing products after a change is the most easily overlooked and most likely to result in nonconformities. It is recommended to establish a CP change log, clearly recording who made the changes, when, and what was changed.

4. Eight High-Frequency Nonconformities, Check Against the List

Summarizing nonconformities from various audits, eight out of ten fall into the following categories:

1. Missing or inconsistent special characteristics with the drawings.
2. Control methods not aligned with the PFMEA.
3. Writing "SPC" without control charts on-site, or writing full inspection but actually performing sampling inspection.
4. Sampling frequency and sample size lack a basis, determined arbitrarily.
5. Reaction plans are vague, only stating "notify the quality department."
6. Inconsistencies between the CP, work instructions, and actual on-site actions.
7. Version confusion, with the old version hanging on-site.
8. Blank fields for equipment parameters, tooling, and first/last piece confirmation.

These eight points cover most of the nonconformities found during audits. Checking against this list monthly will give you a solid foundation.

5. Make Self-Check a Routine

Rushing to rectify issues before an audit is always a reactive approach. A more efficient method is to integrate CP self-checks into daily operations: review the high-frequency list monthly during layered process audits; update the CP before releasing products when engineering changes (ECN) occur; verify if the CP needs revision when new employees start or new equipment is introduced; and assess if stricter control is needed when customers have special requirements. The control plan is not just a document for auditors; it is an operational manual for how quality is controlled on-site—its ability to withstand audits is because it is guiding the site.

Auditors check the control plan for consistency between what is written and what is done; using the five-step self-check method to maintain consistency, closed loop, and version control ensures nonconformities are a non-issue.

Knowledge code: 8.3.2

Version: v20260825

Author: Quality Think Tank The Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools to quality management practitioners, helping companies continuously improve their quality capabilities.