There is a ritual I have seen in every underperforming plant I have ever walked into: the audit fire drill. Three weeks before the certification body arrives, the site erupts. Documents get backfilled, calibration stickers get renewed, training matrices get "refreshed," and everyone rehearses answers to questions they hope will not be asked.
It works, in the narrow sense that most sites pass. But it tells you something devastating about the plant: the quality system and the real operating system are two different things. One exists for auditors; the other runs production. And every hour spent maintaining the theatrical version is an hour stolen from the one that actually makes parts.
When I took over process operations excellence for an aerospace operation working under EASA scrutiny, we made one decision that changed the trajectory: we stopped preparing for audits entirely. Within one audit cycle, findings dropped by 50%. Here is what we did instead.
1. Treat every finding as a system defect, not a compliance defect
A finding is not "the auditor caught us." A finding is a signal that a process can drift out of its defined state without anyone noticing. That is a control-loop failure, and control-loop failures do not respect audit boundaries — the same weakness that produces a nonconformity in documentation will eventually produce one in the product.
So we re-classified every historical finding by the mechanism that allowed it: missing standard, standard not followed, standard followed but wrong, or no detection layer. Over 70% of our findings fell into the last two categories. We were not sloppy — we were flying blind in specific, mappable areas.
2. Make the evidence a by-product, never a deliverable
The single most useful question I ask process owners is: "If the auditor asked for this tomorrow at 07:00, would you generate it or retrieve it?" Anything that would need to be generated is fake evidence — and fake evidence means the process is not really running.
- Layered process confirmations replaced pre-audit walkthroughs — leaders at every level check a small, rotating slice of standards weekly, all year.
- Records were moved to the point of use. If the operator needs a separate step to create the record, the record will eventually be fiction.
- KPIs were rebuilt so that the audit trail and the performance trail are the same documents. Our routing verification KPIs — the same ones that cut internal lead time by 97% — doubled as compliance evidence without a single extra form.
Key takeaways
- Audit findings are control-loop failures — classify them by mechanism, not by clause.
- Evidence must be a by-product of daily work. If you have to prepare it, the process isn't real.
- Leaders confirm standards in small weekly slices — 52 calm weeks beat 3 heroic weeks.
- Aim for the audit to be a non-event. That is what world-class feels like: slightly boring.
3. Put leadership on the shop floor before the auditor gets there
Auditors are, in effect, expensive external sensors. If they routinely detect things your leadership team does not, your leaders are not looking — or not looking at the right altitude. We built a simple cadence: every week, every leader confirms one standard in the area they own, personally, at the workplace where it lives. Not delegated, not sampled by email.
The effect compounds quietly. After a few months, the organization stops experiencing standards as external constraints and starts experiencing them as how we work. That is the point at which audit performance becomes a lagging indicator of operational health — which is all it ever should have been.
What "near-zero" actually feels like
People imagine that a near-zero-findings operation feels tense, hyper-controlled, bureaucratic. The opposite is true. The plants I have led to near-zero audit findings across multiple facilities felt calmer than average — because nobody was performing. The auditor walks the same floor the leadership walks every week, pulls the same records the teams use every day, and leaves without drama.
The goal is not to pass audits. The goal is to build an operation for which audits are a non-event — and then compliance, quality performance and cost all improve from the same root.
That is the real return on investment: the 50% reduction in findings was welcome, but the same mechanisms lifted overall quality performance by 80% and took failure-driven waste out of the cost base. Audit-readiness was never the project. It was the proof.