External audit is a third-party assessment of an organization's quality management system conducted by an accredited certification body or customer auditor — providing independent verification that the organization complies with quality standards (ISO 9001, IATF 16949, AS9100) and is capable of consistently delivering conforming products to customers.

What Is an External Audit?

• Definition: An independent assessment conducted by auditors from an accredited registrar (certification body) or by customer quality teams to verify compliance with applicable quality management standards and contractual requirements.
• Types: Certification audits (registrar), surveillance audits (annual), recertification audits (every 3 years), and customer audits (second-party).
• Stakes: Certification audit failure can result in loss of certification — preventing the organization from selling to customers who require it.

Why External Audits Matter

• Certification Maintenance: ISO 9001, IATF 16949, and AS9100 certifications require successful external audits — loss of certification means loss of market access.
• Customer Confidence: External audit results provide customers with independent assurance that the supplier's quality system is effective.
• Business Requirement: Many semiconductor customers mandate specific certifications and conduct their own supplier audits before awarding contracts.
• Benchmarking: External auditors bring cross-industry perspective and best practices — their observations often highlight improvement opportunities.

External Audit Types

• Stage 1 (Documentation Review): Registrar reviews QMS documentation — quality manual, procedures, process maps — to verify adequacy before on-site audit.
• Stage 2 (On-Site Audit): Registrar audits the implemented QMS on-site — interviews personnel, reviews records, observes processes, verifies compliance.
• Surveillance Audit: Annual on-site audit (typically 1-2 days) verifying continued compliance and improvement between full recertification audits.
• Recertification Audit: Full-scope on-site audit every 3 years to renew certification — covers all QMS clauses.
• Customer (Second-Party) Audit: Customer's quality team audits the supplier — may focus on specific products, processes, or concerns.

Audit Preparation Best Practices

• Internal Audit First: Complete internal audit cycle and close all findings before external audit date.
• Management Review: Conduct management review with current QMS performance data — auditors will verify this.
• Record Readiness: Ensure all quality records (calibration, training, CAPA, inspection) are current and accessible.
• Employee Preparation: Brief employees on audit protocol — answer honestly, show what is asked, don't volunteer extra information.
• Corrective Action Closure: Verify all open CAPAs from previous audits are effectively closed with supporting evidence.

External audits are the ultimate validation of semiconductor manufacturing quality systems — providing the independent, accredited assurance that customers, regulators, and the market require to trust that chips are produced under controlled, documented, and continuously improving processes.