We just passed our first SQF audit and are now working on completing CARs. I have two specific questions:
1. One of our NCs was due to 11.1.2.8, "The drop ceilings in the offices are not monitored for pest activity". I'm using the 5-Why approach, and one of my "Whys" and Preventative Actions was going to be:
Why:
"The internal auditor who performed the audit of FSMS55 section 11.1.2.8 had an incorrect understanding of what a "drop ceiling" was which resulted in no finding during the Internal Audit"
PA:
"Add the definition of a "Drop Ceiling" to section 11.1.2.8 of the Internal Audit Document"
Does this seem like an appropriate RCA and PA? My worry is having an RCA resulting in some type of "human error". Not sure if I'm overthinking.
NOTE: After our audit, the company we hired to conduct our audit sent us a document on conducting RCAs. In this document, they do not state any limitations on the outcome of a RCA
2. I have not been able to come up with 5-Whys for a few of the Non-Conformances. Is this an issue? As I noted above, the document they sent me outlining how to complete the RCA/PA, they noted the "Five Why's Analysis", though didn't say anything about requiring 5 total "whys".
So in conclusion... Help!