24
Audit report Transition Audit from previous standard revision IATF 16949 Transition Audit from previous standard revision ISO 9001:2015 OKE South Africa (Pty) Ltd 10 Dawn Road, Montague Gardens 7440 Cape Town South Africa Manufacturing site Part of a corporate scheme? Yes No Audit date: From: 07 May 2018 to: 10 May 2018 REF No.: 40600433 IATF-Number: 0246348 Report OKE South Africa (Pty) Ltd #Ref. 40600433 confidential Version 10 May 2018 Page 1 of 24 DQS Holding GmbH August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

Audit report

Transition Audit from previous standard revisionIATF 16949

Transition Audit from previous standard revisionISO 9001:2015

OKE South Africa (Pty) Ltd

10 Dawn Road, Montague Gardens7440 Cape TownSouth Africa

Manufacturing site

Part of a corporate scheme? Yes No

Audit date:

From: 07 May 2018 to: 10 May 2018

REF No.: 40600433 IATF-Number: 0246348

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 1 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 2: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

1. Certificate recommendationThank you for your cooperation during the recent audit of your organization. This report describes the audit results

including strenghts, opportunities, and weaknesses. These results were presented to your management at the

closing meeting of the audit. You should now use these results to further strengthen your management system. We

look forward to continue our partnership towards sustainable business success.

ISO 9001:2015

Overall evaluation

The management system is mostly effective and fulfills the requirements of the applied standard(s), except for

the identified nonconformities - see action plan(s).

The audit team recommends to DQS in reference to the applied standard:

The issuance of the certificate as soon as implementation of corrective actions has been demonstrated.

IATF 16949

Overall evaluation

The management system is mostly effective and fulfills the requirements of the applied standard(s), except for

the identified nonconformities - see action plan(s).

The audit team recommends to DQS in reference to the applied standard:

The issuance of the certificate as soon as implementation of corrective actions has been demonstrated.

The permanent barrier erected around the Automotive production facility still ensure a complete functional

segregation for automotive production and processing.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 2 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 3: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

2. Audit results

2.1 Executive summaryThe audit team confirms that OKE South Africa (Pty) Ltd has implemented and maintains a management system in

accordance with the applied standard(s). Detailed audit results were presented, explained and, as necessary,

discussed with the organization's management during the closing meeting. The following chart provides a graphic

overview of the respective audit findings and evaluations, which are stated explicitly in chapter 3 of this audit report.

IATF 16949

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 3 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 4: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

ISO 9001:2015

Rating in 4 levels

NC = major nonconformity was identified, conformity to requirements was not evident or a risk of shipping a nonconforming product to customer was identified.

nc = minor nonconformity was identified, single or isolated deficiencies were identified without impact onto the system's effectiveness

conf = conforming, all requirements are fully met, (with or without potential for improvement)

str = conforming, all requirements are fully met and significant strength was identified, evident through excellent results

All audit findings are based on a sampling process, targeted towards reliable evidence for effective implementation

and compliance of the management system. Where applicable findings and required corrective action plans were or

will be agreed upon with the responsible managers or management representatives, steps have been or will be

defined to resolve such non-conformity. Where applicable findings and required corrective action plans were or will

be agreed upon with the responsible managers or management representatives, steps have been or will be defined

to resolve such non- conformity. Further business aspects may exist, positive or negative, which have not been

reviewed by the audit team. It is the organization´s responsibility to investigate and evaluate the potential impact and

scope of findings, thus continuously ensuring full compliance to the applied standard(s).

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 4 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 5: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

2.2 Strength(s) - Exceed(s) the requirements of the standard/specification

No. Standard Requirement Process Statement Evaluation

1 IATF 16949;ISO

9001:2015

6.1 MP - Corporate

development strategy

Deployment plan for BBBEE Planner (risk

“what if plan”), particularly relevant to SA.

Bench mark example in Auditors opinion.

Strength

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 5 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 6: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

2.3 Opportunities for improvement and non-conformities

nc = minor nonconformity, NC = Major nonconformity, OFI = Opportunity for improvement

No. Standard Requirement Process Statement Evaluation

1 IATF 16949 4.3.1 MP - Corporate development

strategy

The process to define interfaces with the

remote locations is not fully effective.

nc

2 IATF 16949 7.1.5.2.1 COP - Product Scheduling &

Production

The process to assure reliable measuring

equipment is not fully effective.

nc

3 ISO

9001:2015

6.1 MP - Corporate development

strategy

The process to perform risk analysis is not

fully effective.

1) Risk analysis has not been

documented for Industrial "Product design

and development" process.

2) BBBEE commitment experienced in

South Africa may be of value if included in

the business plan

nc

4 IATF 16949 9.2.2.2 MP - Management system Plan &

Improve Audits

The process to perform internal system

audits is not fully effective.

nc

5 IATF 16949 8.5.4.1 COP - Product Picking batching &

dispatching

The process to assure housekeeping in

the Warehouse (FG store) is not fully

effective.

nc

6 IATF 16949 8.5.1.1 COP - Product Scheduling &

Production

The process to develop the control plan is

not fully effective.

nc

7 IATF 16949 8.3.3.2 COP - Product Scheduling &

Production

The process to develop PFMEA is not

entirely effective. PFMEA 005 date

29-03-2018 rev 6.

nc

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 6 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 7: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3. Evaluation of the management system

3.1 Context of the organization

IATF 16949

NC nc conf str not audited

The organization has determined external and internal issues relevant to its purpose

and ability to achieve the intended outcome of its management system.

The organization has determined relevant needs and expectations of interested

parties and determined which needs and expectations are compliance obligations.

The organization has determined its management system scope considering

applicable issues, compliance obligations, boundaries, activities, and functions; (4.3)

supporting functions and CSRs are included in the scope. If applicable, exclusion of

product design and development is justified. (4.3.1, 4.3.2).

For every process all standard requirements have been applied effectively (inputs,

outputs, criteria, indicators, resources, interaction, authority, risk). (4.4) Process

owners are defined and product realization and support processes are reviewed to

evaluate and improve their effectiveness and efficiency. (5.1.1.2, 5.1.1.3).

The organization has documented and implemented processes for the management

of product-safety related product and manufacturing processes. (4.4.1.2).

ISO 9001:2015

NC nc conf str not audited

The organization has determined external and internal issues relevant to its purpose

and ability to achieve the intended outcome of its management system. (4.1)

The organization has determined relevant needs and expectations of interested

parties and determined which needs and expectations are compliance obligations.

(4.2)

The organization has determined its management system scope considering

applicable issues, compliance obligations, boundaries, activities, and functions. (4.3)

For every process all standard requirements have been applied effectively

(inputs,outputs, criteria, indicators, resources, interaction, authority, risk). (4.4)

The system as documented in Horstel Germany has been revised to align with IATF, OKE SA have take the the

Group system, applied & customized it to suit local context. OKE Germany has an influence over the strategic

direction of the OKE SA as well as influence over the development of the QMS. The system as developed is

structured in 4 tiers consisting of a Quality Manual, Procedures, Work instructions (process control documents) and

records.

The process was a revision activity rather than a complete new system. Great effort has been put into the

implementation process, the documented system is still immature as identified in some of the Nc's. The system will

continue to improve as each internal audit and management review is completed. The Quality Manual contains

among other the defined Core Processes, which depicts the processes and their interactions. See Nc related to the

interactions between HO and OKE SA.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 7 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 8: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.2 Leadership

IATF 16949

NC nc conf str not audited

Top management demonstrates leadership and commitment with respect to the

management system and take accountability for its effectiveness.

The policies and objectives are established and understood; they are compatible

with context and strategic direction of the organization. (5.1, 5.2). The policies

include at a minimum an anti-bribery policy, an employee code of conduct and an

ethics escalation policy. (5.1.1.1)

Top management ensures customer focus, including awareness for requirements,

risks, opportunities and customer satisfaction.

Organizational roles, responsibilities and authorities are assigned, communicated,

understood and supported by top management. (5.3) This includes personnel with

responsibility and authority to ensure that customer requirements are met and

personnel with authority to stop shipment and stop production to correct quality

problems (across all shifts). (5.3.1, 5.3.2).

ISO 9001:2015

NC nc conf str not audited

Top management demonstrates leadership and commitment with respect to the

management system and take accountability for its effectiveness. (5.1)

The policy and objectives are established and understood; they are compatible with

context and strategic direction of the organization. (5.1, 5.2)

Top management ensures customer focus, including awareness for requirements,

risks, opportunities and customer satisfaction. (5.1)

Organizational roles, responsibilities and authorities are assigned, communicated,

understood and supported by top management. (5.3)

OKE South Africa (Pty) Ltd's current quality policy is dated 05 Feb 2018.

Leadership has a "hands on" approach toward the QMS. Several meetings are held to share crucial performance

information. These communication sessions are where process owners share performance information related to

their areas and request resource support form the Leadership team where needed. Leadership is seen as a strong

point at OKE SA.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 8 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 9: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.3 Planning

IATF 16949

NC nc conf str not audited

The organization has determined risks and opportunities considering interested

parties and scope of the management system. (6.1) Documented information as

evidence of the result of the risk analysis is retained and the risk analysis includes

lessons learned from product recalls, product audits, field returns and repairs,

complaints, scrap and rework. (6.1.2.1)

The organization has determined and planned suitable actions to assure intended

outcomes, including compliance obligations to address risks and opportunities. (6.1)

The actions include preventive action, a process to lessen the impact of negative

effects of risk and contingency plans. (6.1.2.2, 6.1.2.3).

Annual (at a minimum) objectives (measurable) have been established at all relevant

functions, levels and processes (and are being pursued). (6.2) and they are aligned

with customer requirements. (6.2.2.1)

Action planning to achieve quality objectives is deployed effectively, including the

need for change (who, when, what, how, resources, evaluation of results).

ISO 9001:2015

NC nc conf str not audited

The organization has determined risks and opportunities considering interested

parties and scope of the management system. (6.1)

The organization has determined and planned suitable actions to assure intended

outcomes, including compliance obligations to address risks and opportunities. (6.1)

Objectives (measurable) have been established at all relevant functions, levels and

processes (and are being pursued). (6.2)

Action planning to achieve quality objectives is deployed effectively, including the

need for change (who, when, what, how, resources, evaluation of results). (6.2, 6.3)

The risk assessment tool was successfully applied across all processes resulting in focus on process risks which

were mitigated / met through process controls and concerted efforts. Interested parties and their expectations is

familiar terminology for process owners, and those interviewed had a clear understanding of needs & expectations.

The Leadership team have incorporated those into the KPI's / KPA's of the system monitored through both

effectiveness and efficiency indicators.

ISO 9001:2015 - The risk analysis activity was not applied to the Industrial Product Design and Development

process. See Nc 3 of 7 (6.1).

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 9 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 10: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.4 Support

IATF 16949

NC nc conf str not audited

Necessary resources (people, infrastructure, organizational knowledge, environment

for the operation of processes) including monitoring and measuring resources are

determined and provided for the establishment, implementation, maintenance and

continual improvement of the management system.

A multidisciplinary approach including risk identification and risk mitigation for

developing and improving plant, facility and equipment plans is used and methods to

evaluate manufacturing feasibility and to assure process effectiveness are

implemented. (7.1.3.1)

Monitoring and measurement resources include conduction of measurement system

analysis (MSA), a documented process for managing calibration/ verification

activities and fulfillment with internal and external laboratory requirements.

(7.1.5.1.1, 7.1.5.2.1, 7.1.5.3).

Necessary competence and awareness of personnel operating under the

organization's control is ensured. (7.2, 7.3) This includes maintenance of a list of

qualified internal auditors and a documented process to verify their competence

(including fulfillment of CSRs). A documented process for identifying training needs

of employees (including awareness of their impact on product quality and customer

requirements) is implemented and necessary 'on-the-job-training' is provided (7.2.1,

7.2.2).

Effective internal and external communication is determined (who, how, what,

when). (7.4) and a documented process for employee motivation and empowerment

is implemented. (7.3.2)

Documented information (including a quality manual, required documented

processes for the QMS, the organization's processes and their sequence and

interactions and a document indicating where within the organization's quality

management system their customer specific requirements are addressed) is

determined, available, maintained and controlled, ensuring effectiveness of the

management system and its processes. (7.5, 7.5.1.1). This includes a documented

record retention policy and a documented process for managing of engineering

specifications.

ISO 9001:2015

NC nc conf str not audited

Necessary resources (people, infrastructure, organizational knowledge, environment

for the operation of processes) including monitoring and measuring resources are

determined and provided for the establishment, implementation, maintenance and

continual improvement of the management system. (7.1)

Necessary competence and awareness of personnel operating under the

organization's control is ensured. (7.2, 7.3)

Effective internal and external communication is determined (who, how, what,

when). (7.4)

Documented information is determined, available, maintained and controlled,

ensuring effectivenes of the management system and its processes. (7.5)

The infrastructure established throughout the operation was appropriate in design and was maintained effectively to

ensure CSR were met for product safety as well as the related services level expectations. Staff at all levels were

observed to be well trained and displayed a very clear understanding of requirements and were confident during the

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 10 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 11: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

interviews. Communication was effective throughout the sampled processes and activities. Good levels of discipline

and attention to detail was noted throughout the facility.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 11 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 12: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.5 Operation

a) Planning operation

IATF 16949

NC nc conf str not audited

All operational processes needed to meet product and service requirements,

including customer- specific requirements, logistics requirements, manufacturing

feasibility and project planning, are planned, implemented and controlled effectively.

(8.1) Confidentiality of customer-contracted products and projects is ensured (8.1.2)

Effective customer communication (language agreed with the customer, specified

computer language and format), ensures that all relevant requirements related to

product and services are determined, reviewed and confirmed (special

characteristics, manufacturing feasibility).

The organization has established, implemented and maintains an effective design

and development process for products and manufacturing process (planning, input,

special characteristics, monitoring, validation, prototype program, product approval

process, output, FMEA, reliability, etc.), ensuring subsequent provision of compliant

product and services. (8.3, 8.3.2.1). A multidisciplinary approach is used and the

necessary product design skills are ensured (8.3.2.1, 8.3.2.2)

The organization uses a process for assuring quality of products that use embedded

software and retains documented information of a software development capability

self- assessment) (8.3.2.3). Suppliers of software or products with embedded

software are required to implement and maintain a process for software assurance

and this process is assessed? (8.4.2.3.1)

Externally provided processes, products and services are effectively controlled,

including a documented process for supplier monitoring, a second party audit

process, supplier development and pass down of all applicable statutory and

regulatory requirements. (8.4, 8.4.2.4, 8.4.2.5, 8.4.3)

ISO 9001:2015

NC nc conf str not audited

All operational processes needed to meet product and service requirements,

including customer-specific requirements, are planned, implemented and controlled

effectively. (8.1)

Effective customer communication ensures that all relevant requirements related to

product and service are determined, reviewed and confirmed. (8.2)

The organization has established, implemented and maintains an effective design

and development process, ensuring subsequent provision of compliant product and

services. (8.3)

Externally provided processes, products and services are effectively controlled,

including selection and evaluation of external providers. (8.4)

Samples of the results show that a structured planning process is in place for preparation of product realization, test

and final approvals. The control also indicates effective interface & support from Germany in the project phase.See

Nc against 8.5.1.1 for controls that need attention.

ISO 9001:2015 Product design and development process included in the audit on 10 May 2018.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 12 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 13: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

b) Controlling operation

IATF 16949

NC nc conf str not audited

The organization has ensured controlled conditions for all production and service

provision operations, including post- delivery activities. (8.5) Controlled conditions

include development of control plans, standardized work documents, verification of

job set- ups, verification after shutdown, production scheduling, identification/

traceability, preservation and control of changes and temporary changes (8.5.1.

8.5.2, 8.5.3, 8.5.4, 8.5.6).

Monitoring and measuring activities are suitable to support controlled conditions,

including prevention of human error (8.5) and a system for production tooling

management and a documented total productive maintenance system is

implemented and maintained. (8.5.1.5, 8.5.1.6)

A process for feedback of information from service (service concerns, field failure

test analysis) and to fulfill with service agreements with customer is implemented.

(8.5.5)

The organization ensures release of conforming product and service by planned

arrangements effectively, including layout inspection and functional testing,

appearance items, verification and acceptance of conformity of externally provided

products and services and fulfillment with statutory/ regulatory requirements and

acceptance criteria. (8.6, 8.6.1 - 8.6.6)

Nonconforming process output is identified and controlled to prevent unintended use

or delivery. (8.7) This includes control of suspect, reworked and repaired products,

customer notification, a documented process for disposition of nonconforming

products and customer authorization for any kind of concessions including

respective records (8.7.1).

ISO 9001:2015

NC nc conf str not audited

The organization has ensured controlled conditions for all production and service

provision operations, including post-delivery activities. (8.5)

Monitoring and measuring activities are suitable to support controlled conditions,

including prevention of human error. (8.5)

The organization ensures release of conforming product and service by planned

arrangements effectively. (8.6)

Nonconforming process output is identified and controlled to prevent unintended use

or delivery. (8.7)

The controlled conditions experience during this audit included, the availability of information that describes the

characteristics of the product, the availability of work instructions, as necessary, the use of suitable equipment, the

availability and use of monitoring and measuring equipment, the implementation of monitoring and measurement,

and the implementation of product release, delivery and post- delivery activities. Non-conformities were raised in

production, see Nc's against 8.3.3.2; 8.5.4.1 & 8.5.1.1 for controls that need attention.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 13 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 14: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.6 Performance evaluation

IATF 16949

NC nc conf str not audited

The organization has determined adequate measuring and monitoring provisions to

evaluate performance and effectiveness of its management system, including

customer satisfaction. (9.1) This includes process studies on all manufacturing

processes to verify process capability, including action plans for unstable or not

capable characteristics. (9.1.1.1)

The organization has determined and implemented processes needed to evaluate

fulfilment of its compliance obligations and maintains knowledge and understanding

of its compliance status. (9.1) Appropriate statistical tools are identified and applied.

(9.1.1.2, 9.1.1.3).

Customer satisfaction is monitored through continual evaluation of internal and

external performance indicators (as a minimum: delivered part quality, customer

disruptions, field returns, recalls, and warranty, delivery schedule performance and

customer notifications). (9.1.2.1)

An internal audit program, including system audits, manufacturing process audits

and product audits, is planned (annual program, considering all shifts, etc.) and

deployed effectively by competent personnel, ensuring compliance and suitability of

the management system. (9.2) If applicable, it includes a software development

capability assesment.

Top management performs at least annually a management review to ensure

continuing suitability, adequacy and effectiveness of its management system,

including alignment with the strategic direction of the organization. (9.3) All required

review inputs (9.3.2.1) are addressed and top management establishes an action

plan when customer performance targets are not met (9.3.3.1).

ISO 9001:2015

NC nc conf str not audited

The organization has determined adequate measuring and monitoring provisions to

evaluate performance and effectiveness of its management system, including

customer satisfaction. (9.1)

The organization has determined and implemented processes needed to evaluate

fulfilment of its compliance obligations and maintains knowledge and understanding

of its compliance status. (9.1)

An internal audit program is planned and deployed effectively by competent

personnel, ensuring compliance and suitability of the management system. (9.2)

Top management performs management review to ensure continuing suitability,

adequacy and effectiveness of its management system, including alignment with the

strategic direction of the organisation. (9.3)

Date of last management review 17 Apr 2018

Management review is not a single meeting rather a series of monthly meetings aimed at reviewing and improving

the QMS. Input requirements of the ISO/TS and the customer are reflected.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 14 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 15: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

3.7 Improvement

IATF 16949

NC nc conf str not audited

The organization determines and selects opportunities for improvement and

implements necessary actions to achieve the intended outcomes of its management

system.

Complaints and improvement proposals are registered and treated effectively. (10.2)

This includes analysis on customer complaints and field failures, communication to

the customer of the results and if required, a warranty management process

including a method for warranty part analysis. (10.2.5, 10.2.6)

Corrective action is implemented effectively and appropriately, eliminating causes for

nonconformity with risk identification and evaluation of corrective action

effectiveness. (10.2) This includes documented processes for problem solving

(10.2.3) and use of error-proofing methodologies (10.2.4).

When nonconformities have occurred the organization has reacted to control and

provide correction. Defined corrective action from previous audit has been

implemented effectively.

Considering the results from analysis, evaluation and management review, the

organization continually improves suitability, adequacy and effectiveness of its

management system. (10.3) Therefore, a documented process is implemented,

including methodology, objectives, measurement, effectiveness, required

documented information, a manufacturing process improvement plan and a risk

analysis. (10.3.1)

ISO 9001:2015

NC nc conf str not audited

The organization determines and selects opportunities for improvement and

implements necessary actions to achieve the intended outcomes of its management

system. (10.1)

Complaints and improvement proposals are registered and treated effectively. (10.2)

Corrective action is implemented effectively and appropriately, eliminating causes

for nonconformity with risk identification and evaluation of corrective action

effectiveness. (10.2)

When nonconformities have occurred the organization has reacted to control and

provide correction. Defined corrective action from previous audit has been

implemented effectively. (10.2)

Considering the results from analysis, evaluation and management review, the

organization continually improves suitability, adequacy and effectiveness of its

management system. (10.3)

There has been progress with the improvements of the management systems and processes. There is a defined

process for continual improvement, this is based upon actions identified with the analysis of performance and

generally aims at improving productivity, quality of products and processes, reduction of line start- ups and

downtime, Improvement of housekeeping, Optimization of business processes through an improvement of

communication and information flow.

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 15 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 16: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

4. Further audit results

4.1 Sampling bases for employees

Management personnel 5 thereof interviewed 5 = 100%

Employees without management authority 18 thereof interviewed 10 = 56%

Total employees 23 thereof interviewed 15 = 65%

Since time of audit planning, total number of employees has not changed.

4.2 Audited shifts

Does the organization work in multiple shifts? Yes No

Working shift Process Start End Audited Reason if not audited

1 COP - Product Scheduling &

Production

06:30 14:30 yes

2 COP - Product Scheduling &

Production

14:30 22:30 yes

3 COP - Product Scheduling &

Production

22:30 06:30 yes

4.3 List of relevant processes

Process: Performance indicator(s): Targets achieved?

Actions Remarks Audited

MP - Corporate

development strategy

Unknown yes Monthly & Weekly

meetings

yes

MP - Personnel

development

Unknown partially Monthly & Weekly

meetings

yes

MP - Management

system Plan &

Improve Audits

Unknown yes Monthly & Weekly

meetings

yes

MP - Internal

communication

Unknown yes Monthly & Weekly

meetings

yes

ISO 9001 - COP -

Product design &

Project Mgmt (Mgmt

of CSR)

Unknown Non Automotive yes

COP - Marketing (RL)

& Process design

(RL)

Unknown yes Monthly & Weekly

meetings

yes

COP - Customer

acquisition & service

Unknown yes Monthly & Weekly

meetings

yes

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 16 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 17: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

Process: Performance indicator(s): Targets achieved?

Actions Remarks Audited

COP - Product

Scheduling &

Production

Unknown yes Monthly & Weekly

meetings

yes

COP - Order

processing

Unknown yes Monthly & Weekly

meetings

yes

COP - Product

Picking batching &

dispatching

Unknown yes Monthly & Weekly

meetings

yes

SP - Control of Non

conforming outputs

Unknown yes Monthly & Weekly

meetings

yes

SP - Acquisition (RL) Unknown yes Monthly & Weekly

meetings

yes

MP - Cont Imp CIP Unknown yes Monthly & Weekly

meetings

yes

SP - Maintenance &

repair

Unknown yes Monthly & Weekly

meetings

yes

SP - QA-Processes Unknown yes Monthly & Weekly

meetings

yes

SP - Information

systems provision &

maintenance (RL)

Unknown yes Monthly & Weekly

meetings

yes

MP - Environment &

energy management

process

Unknown yes Monthly & Weekly

meetings

yes

ISO 9001 - COP -

Product Scheduling &

Production

Unknown yes Monthly & Weekly

meetings

Non Automotive

Production

yes

Targets achieved: How frequently are process targets archieved?

Yes = 100% over or near 100%

Mostly = over 85%

Partially = over 50%

No = under 50%

4.4 Customer related performance

IATF-OEM Product quality Shipment Status Verified Evidences

Toyota Boshoku OK OK OK Report for April

Actions if target not achieved:

Lear OK OK OK Internal measures

Actions if target not achieved:

Adient OK OK OK Internal measures

Actions if target not achieved:

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 17 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 18: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

4.5 Applicable OEM Customer specific requirements

CSR Revision Customer New SupplierCode Audited

SQAM 2006 Toyota Boshoku no SE01-1 yes

SQTS Aug 2012 Lear no Various yes

JCS 2901 Rev.4 Adient no Various yes

4.6 Remote locations

Ref.No. Name Address Employees

Report review

Other CB

40600435 OKE Group GmbH 7 Nobel Strasse, Horstel, Germany 3 2018-04-24 TUV Rheinland

Audited to standard: ISO/TS 16949:2009 (Audit completion date: 12 May 2017), Last internal system audit to standard: IATF 16949

Scheduled audit date for transition to IATF 16949: 21 May 2018

Functions: Contract Review; Engineering; Information Technology; Laboratory; Marketing; Policy making; Process design; Production

equipment development; Purchasing; Strategic planning; Supplier management; Testing

Audited interfaces: The system as documented in Horstel Germany has been revised to align with IATF, OKE SA have take the the Group

system, applied & customized it to suit local context. The control also indicates effective interface & support from Germany in the project

phase.

4.7 Extended manufacturing sitesNone

4.8 Supported sitesNone

4.9 Evaluation of the previous certification cycle

For the evaluation of the following items, the auditing reports of the last three years were reviewed and evaluated:

System or recertification audit date 15 Jun 2016

1st Surveillance audit date 08 Jun 2017

2nd Surveillance audit date

The overall system performance for the past

certification cycle demonstrates the continued

effectiveness of the system.

Yes, management review records indicate achievement of

established objectives and continuous improvement

Yes, trends of corrective action records indicate effectiveness

and continuous improvement.

Internal audits and corrective action Yes No

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 18 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 19: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

records show continued conformance of

the management system to selected

standards.

Similar findings had been identified

repeatedly during the previous certification

period.

Yes No

During the previous certification period,

certificates had been issued under

constraints, suspended or special audits

had been conducted due to certain defects.

Yes No

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 19 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 20: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

5. Next steps

5.1 Process to resolve nonconformities / findings

Nonconformities, identified during an audit, shall be closed with evidence of effectiveness within defined time lines.

Open nonconformities jeopardize the conformity of the certified management system. When nonconformities cannot

be resolved, existing certifications may be suspended or withdrawn.

Decertification process

During the audit nonconformities may be identified. They are recorded and reported to the customer

as soon as possible, at the latest during the closing meeting. It is the customer's responsibility to

define and implement corrective action for resolving the nonconformity.

10 May 2018

As soon as possible and within 20 days after the audit, immediate measures and root cause

analyses shall be forwarded to the Lead Auditor for evaluation, along with the respective evidence.

30 May 2018

As soon as possible and within 60 days after the audit, systemic corrective actions and their

verification shall be forwarded to the Lead Auditor for evaluation, along with the respective evidence.

09 Jul 2018

As soon as possible and within 90 days after the audit, the Lead Auditor shall evaluate the

effectiveness of systemic corrective actions by reviewing evidence. For major nonconformities such

review shall be performed by a follow-up audit at the organization’s site. For minor nonconformities

such review may be performed either by a follow-up audit on site or by remote review of evidence,

such as records.

08 Aug 2018

Verification of nonconfirmities needed through follow-up audit: Yes No

Audit type: Document review (off-site audit)

Planned date: 09 Jul 2018 - 09 Jul 2018

Total number of audit days: 0.5

Identified potential opportunities for improvement shall be evaluated internally and incorporated into the continual

improvement process as deemed beneficial.

5.2 Next regular audit planning

Type of audit: Surveillance Audit

Planned date for next audit:

(non-binding estimate of audit days)

03 Jun 2019 - 04 Jun 2019

(week or month, if appropriate)

For IATF 16949: 2, ISO 9001:2015: 1 audit day(s) in total, performed by 1

auditor(s). For applicable standards calculated as 100% value of IAF

mandatory document for audit duration.

The estimated amount of time for

verification of action plans for the

next audit/year is:

2 hour(s)

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 20 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 21: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

Main emphasis will be on the

following subjects:

Further enhancement of IATF requirements. Audit of maintenance to verify the

completion of the implementation role out.

None

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 21 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 22: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

6. Audit and Certification Data

6.1 Audit and Certification data

Current scope of certification/registration IATF 16949 + ISO 9001:2015:

Manufacturing of plastic profiles

ISO 9001:2015:

Design and manufacture of plastic and

silicone extruded products and plastic

injection moulded products.

Current scope in English language IATF 16949 + ISO 9001:2015:

Manufacturing of plastic profiles

ISO 9001:2015:

Design and manufacture of plastic and

silicone extruded products and plastic

injection moulded products.

Primary IAF / EA code EAC 14

Non-applicability of product design yes

Are there any outsourced processes? no

Did the organization use a consultant? no

6.2 Certificate, logos and their use

The following changes are necessary:

There was a change in support functions.

Certificate, certification logos and marks of DQS and Accrediation bodies are being used appropriately

6.3 Changes, identified during the audit

The following changes (e.g. company name, address, scope, number of employees, etc.) were identified during

the audit:

Type of change Existing information in DQS database New information obtained during audit

State Western Cape No data available

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 22 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 23: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

Please remember to inform DQS immediately of any significant changes to your management system. We will

analyse the changes and inform you about the possible impact to your certification.

6.4 Fulfillment of audit objectives and audit schedule

Audit objectives and audit schedule were fulfilled without changes

6.5 Audit data

Name of the organisation(client): OKE South Africa (Pty) Ltd

Division

Main address: 10 Dawn Road, Montague Gardens, 7440 Cape Town, South Africa

Ref. No.: 40600433

Audit type: 1. Transition Audit from previous standard revision

Surveillance frequency (mth): 12

Date of audit: 07 May 2018 to 10 May 2018

Total number of audit days: 3.5

Date of last stage 1 audit:

Date of previous stage2 / initial audit: 13 Jun 2016 to 15 Jun 2016

Exclusions, if applicable: Customer is responsible for product design

Total number of employees of ref.no. above: 23

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 23 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany

Page 24: OKE South Africa (Pty) Ltd · nc 4 IATF 16949 9.2.2.2 MP - Management system Plan & Improve Audits The process to perform internal system audits is not fully effective. nc 5 IATF

6.6 Contact data

Management Representative: Nico Van Reenen

Telephone: +27 21 551 2464

E-Mail: [email protected]

Lead-Auditor: Mark Christopher Ilsley

Audit days: 3.50

Telephone: +27 21 5569801

E-Mail: [email protected]

DQS Customer service person: Ilse Johansson

Telephone: +27 11 787 0060

E-Mail: [email protected]

Report last version date: 31 Jul 2018

Lead Auditor: Mark Christopher Ilsley

This report was provided to the management of the audited organization on 10 May 2018

by personal handover electronically by other means (please specify)

DisclaimerDQS maintains ownership of this report. The content of this report and all information received in relation to the audit and certification of the

audited organization will be treated confidential and not disclosed to third parties. For exceptions e.g. disclosure to accreditation body refer to

DQS Certification and Assessment Regulations.

This report is considered as final by the audit team, if you do not get any adverse information from DQS within 14 days after the last audit day.

The recommendation of the audit team is subject to review and approval by DQS technical certification experts (veto power person) , who take

binding certification decision within 120 days. An appeal process is defined in DQS Certification and Assessment Regulations. Should DQS

obtain any information indicating nonconformity of the certified management system, DQS will notify the certified organization timely and initiate

investigation and evaluation of such information.

Distribution:DQS

OKE South Africa (Pty) Ltd

Report OKE South Africa (Pty) Ltd

#Ref. 40600433

confidential

Version 10 May 2018

Page 24 of 24

DQS Holding GmbH

August-Schanz-Str. 21, 60433 Frankfurt a.M., Germany