Second-party auditor competency (IATF only)
Plain-language summary
The people you send to audit your suppliers must meet documented competence requirements too — supplier audits done by the unqualified create risk, not assurance.
What the clause is really asking
Define and document the competence for second-party (supplier) auditors: relevant customer and regulatory requirements, automotive process approach, the scope they will audit (system/process/product), and the core tools applicable.
What auditors look for
Auditors sample a recent supplier audit and ask who performed it and against which competence criteria; records must exist exactly as for internal auditors.
Typical evidence
Second-party auditor criteria; qualification records; supplier audit reports linked to qualified auditors.
How to comply — recommendations
Usually your best internal process auditors plus supplier-management training — document that combination as your criteria and keep the link between audit reports and qualified names.
Common nonconformities
Supplier audits by buyers with no audit qualification; no documented criteria distinct from internal auditors; audit reports unsigned/untraceable to a qualified person.
Related clauses
Builds on ISO 9001 7.2 / 8.4
In the book
Chapter 7 — Support — People, Kit and the Truth About Documents treats this clause family in full: what it is really asking, what auditors look for, the evidence that satisfies, how to make it work on a real floor, and where companies stumble. This IATF requirement is covered in the Automotive Edition, in the same six blocks as the ISO clause around it.
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.