Getting Through a Customer or Certification Audit

Published by
Throne of Profit Editorial

Reviewed by
William Hassell
Founder & Chief Editor, Throne of Profit

A customer emails that their quality team is coming in three weeks to audit your shop, or your ISO registrar sets the date for the annual surveillance visit. In a lot of small manufacturers, that email triggers a scramble — someone digs out procedures nobody has looked at in a year, the floor gets a frantic cleanup, records get backfilled, and everyone hopes the auditor doesn't ask the wrong question. Production slows or stops while people prepare, and the whole thing feels like a tax on the business.

It doesn't have to work that way. An audit only becomes a fire drill when your quality system lives in a binder for the auditor instead of in how the shop actually runs every day. When the two are the same thing, the audit is just someone confirming what you already do — and a clean audit becomes something you can hand a prospect to win the next contract.

   THE AUDIT, TWO WAYS

   real system = daily practice ─┐
                                 ├─▶ audit confirms → clean result → sales asset
   binder ≠ shop floor ──────────┘         ▲
        │                                   │
        └─ 3-week scramble ─▶ production stops ─▶ findings + doubt

Owner symptoms

  • An audit date lands and the shop drops real work to prepare, cleaning up records and floor for the visit.

  • You're never quite sure what the auditor will find, because what's written down and what people actually do have drifted apart.

  • You treat audits as a cost to survive, not something you'd ever show a customer to win work.

Why this happens

The root cause is a gap between the documented quality system and daily practice. Procedures get written once — often to pass the first certification — and then the shop evolves while the paper doesn't. Records get signed when convenient rather than when the work happens. Nobody owns keeping the two in sync, so the drift is invisible until an outsider comes to look. At that point the only option is a scramble. The audit isn't the problem; the year of quiet drift before it is.

Common mistakes

  • Preparing for the audit instead of running the system, so every visit means a cleanup that never sticks.

  • Backfilling records the week before — auditors are trained to spot fresh ink on old dates, and it reads as dishonesty.

  • Letting procedures describe an ideal nobody follows, instead of documenting what the shop actually does.

  • Assigning no owner to the quality system between audits, so drift goes unnoticed until the next visit.

  • Treating findings as failures to hide rather than a free list of what to fix.

Business consequences

The scramble itself is expensive — production stops or slows while your best people prepare, and that cost recurs with every audit. Worse is the risk of a real finding: a major nonconformance can put a certification on probation or cost a key customer, and customer audits increasingly decide who stays on the approved-supplier list. The owner who keeps the system and the floor aligned pays almost nothing at audit time, walks through the visit calmly, and comes out with a clean report they can send to the next prospect. In regulated or aerospace-adjacent work, that clean audit history is often what opens the door to bigger contracts at all.

How experienced operators think about it

They stop treating the audit as an event and treat the quality system as the way the shop runs. The mental test is simple: if an auditor walked in unannounced today, would what they see match what's written down? If yes, the scheduled audit is a formality. They keep procedures honest — documenting the real process, not an aspiration — and make record-keeping happen at the moment of work, not at the deadline. And they treat every finding as free intelligence about where the process is weak. The goal isn't to pass; it's to be a shop where passing is automatic and the certificate is a sales tool.

Practical actions

  1. Close the gap between paper and practice. Walk the floor with your procedures and fix whichever is wrong — usually the paper. A procedure should describe what actually happens.

  2. Make records a byproduct of the work, captured as the job runs, so there's never anything to backfill and nothing to fear from a date check.

  3. Run your own internal audits on a schedule, using the same checklist your customer or registrar uses, so you find gaps before an outsider does.

  4. Give one person ownership of keeping the system current between visits — closing findings, updating procedures when the process changes.

  5. Prep the logistics, not the substance. Confirm the scope, stage the documents the auditor will want, and brief the floor to answer honestly — the substance should already be in order.

  6. Reuse the clean result. A passed audit and current certification are proof for prospects; keep them handy in your sales conversations.

Questions every owner should ask

  • If an auditor showed up unannounced today, would the floor match what's written down?

  • Are our records captured as the work happens, or assembled the week before a visit?

  • Do we find our own gaps through internal audits, or wait for a customer to find them for us?

Frequently asked questions

How far ahead should we start preparing for a scheduled audit?
If you're preparing at all in the sense of a scramble, that's the signal something is off. The real preparation is continuous — keeping procedures and records honest year-round. For a specific date, a week of light logistics is plenty: confirm the audit scope, stage the documents the auditor will request, make sure the responsible people will be present, and remind the floor to answer questions straight. If you need three weeks of cleanup, the fix isn't more prep time; it's closing the gap between your system and your shop.

A customer wants to audit us and we've only ever done ISO surveillance. Is it different?
The substance is the same — both are checking whether you do what you say and can prove it. The differences are scope and stakes. A customer audit often focuses on the specific processes and parts you make for them, and may add their own requirements on top of your certification. The stakes can be more direct: the outcome affects whether you stay an approved supplier. Ask for their audit checklist or criteria ahead of time, run yourself against it internally first, and treat it as a chance to show a current customer you're a supplier worth keeping.

Related articles

Every business has more decisions than time

Whether you need help solving one problem, evaluating a major opportunity, or making a company-changing decision, Throne of Profit gives you consulting capacity on demand.

Purchase only the consulting capacity you need and use it across Weekly Focus, Strategic Focus, Financial Focus, and ThinkTank engagements.

Explore Throne of Profit

Next
Next

Setting a Machine-Hour Rate You Can Defend