
Faking 9001 or, “How to Fake a Management System”.
Yes, you read that right. I could say,”How to fool an ISO auditor”, or “How to pretend to have a management system” – but I think you get the idea.
I strive to disambiguate. I should also strive to speak more plainly. To you I present an introduction to my latest book. It is a work of comedic fiction (a flavor of fiction perpetuated solely in my own mind).
Ostensibly, it is a “How To” book. I’ve considered and rejected several titles with numbers. People like that kind of thing and I’ll put in more naming effort once I know what kinds of numbers are involved. Maybe, “9001 Ways to Fake It”.
I hope it isn’t more than seven.
In the real world, things happen; cogs turn and pistons pist. An auditor steps into the world for a day or three. She never sees the real world – she sees the manifestation of history in the forms of records, documents, an array of physical objects and people, and through discussion.
All of this is interpreted through a human brain riddled with genetic propensities toward cognitive bias. And a desire to get home.
Faking it well is helped by a solid understanding of the audit process. That, and only slightly more than a vague familiarity with the standard.
Records
Quality records are the means by which an auditor sees much of the system. We put an inordinate amount of credibility in them, most of us.
So, there’s a minimum set we expect to see. The standard refers to them clearly.
From them we deduce the existence of things in the past. Who knows if they’ve actually taken place.
- Management Reviews
- Internal Audits
- Corrective Actions
- Preventive Actions
- Nonconforming material slips
- Letters from customers; quotations
- Purchase orders
There are more, the book has them. Actual management systems have them. Fake ones have them too.
But, a record is not an actual event. It is toner on paper. Or it consists of electrons bouncing on a liquid crystal display – all as real as crystal meth dreams behind blinking eyes.
Documents
Process and product documents sufficient to satisfy the sample size. Keep it simple; a few customers, a few simple designs.
Process documentation
A quality manual, six basic procedures, maybe a few more “tier twos” to make it look good. A work instruction or three.
Product documentation
Some drawings, product specifications, customer specifications. Cosmetic criteria…
Metrics
The coup de grâce. Charts, baby – charts. Bar charts, Pareto Charts and, the real killers – control charts.
See the previous posts about metrics – Customer satisfaction is vital. Get that – well, make that.
It’s got pretty colors and goal lines, right? Must be true. Don’t forget the goal lines.
Packaging it all
Binders – lots of binders. And logs, your going to need logs. And a few file folders. Just a few.
The idea is to provide easy access to the information in an organized appearing way. They are to be delivered to the auditor in a conference room. Stacks of binders.
Keep that person in the conference room for as long as possible. Time is your friend – use it up. Make sure there is a fridge in there, and snacks.
Maybe a nice mini-bar.
Records binder – this is where you’re going to assemble your management reviews and internal audit records. All of that stuff. Might need two of those.
Documents binder – Quality manual and the tier twos. Create a master list. Don’t make everything revision A. Higher revision levels indicate a more healthy system. Depending on your document control procedure you might need records to support the other revisions, like a DCN form – try not to over-complicate your life for no reason.
A file drawer of Purchase orders to vendors. Less vendors is going to be easier than more vendors. Have an approved vendors list. Don’t make it too hard to get on that list! Download ISO certs from those vendors you happen to have in the file drawer. Or a survey that they filled out (use a couple different colored pens at least) – do both, why not. Approve those P.O.’s!
A file drawer of completed sales orders. What should be in there? I don’t know… a quotation, a purchase order (with approvals from production saying it is possible to fulfill it), a job traveler with completed and signed-off steps, an inspection report, shipping documents. What? A letter from the customer saying how happy they were?? How did that get in there?
Throwing the Bones
Nobody is perfect. Don’t be a nobody; be a gambler – be someone that survives an audit. In this case, survival means getting a certificate on the wall.
A nonconformance isn’t going to keep you from it. You’re going to get one (technically you’ll be giving them) and then you’re going to analyze it, find the root cause of how it happened, you’re going to address that cause with some action to keep it from happening again, and finally, you’re going to verify that what you did, worked.
Try not to let anyone find all of that before the nonconformance is issued…
You’ll put all that into a package, send it to your Registrar, they will love it – and send you a Certificate.
What bones?
Minor bones, of course. Toss out Phalanx and phalanges – not femurs. Offer a femur and you’ll feel like you’re on the receiving end of “9001: A Space Odyssey”.
The auditor needs to feel like something was accomplished.
To an auditor, a nonconformance is like a souvenir ear they can bring back to their underground lair, “See, I was there…” he holds the trophy up for the other trolls to see by the light of their sooty fire – “And I got this!”
They grunt appreciatively and slap his hunched back, sharing in the victory.
Some examples:
- A document in your document binder that has a revision that isn’t the same as what is in your master list (at the front of the document binder). Put two – no, three – maybe he’ll find one. But don’t put a rev 3 on a document and a rev 2 in the master list – that indicates a bigger problem and might earn you more digging and possibly a re-audit. You only want to put on one show.
- A non-conformance that doesn’t have root cause filled out. Make it a simple one – something with an obvious cause. Two of these should do it.
- Find an inspection record and re-copy it and in so doing obscure a diagonal half of it.
- Assuming the impact is minimal, a piece of test equipment with a date that is unreadable. Don’t overdue that, it might earn a visual re-audit.
- Also to avoid – unidentified items on your (hopefully very small) production floor. An accumulation of these will earn you a visual re-audit. Avoid anything that to verify that it is all fixed and fine would require someone to physically see the result in action.
- Get creative. I am often surprised at peoples’ creativity.
What else?
Well, I haven’t really addressed how to stage a production area with it’s product and operators and all of it’s 7.5 implications. It is possible to do it. I can’t give away the whole show here!
Or interviews with the rank and file regarding the Quality Policy. Piece of cake.
Design. That seems tricky but it really isn’t.
Fooling one of us isn’t terribly hard – I wouldn’t be surprised if it happens quite often. But the point is, in the process of packaging and obfuscating one often implements the thing to good effect despite the frivolous ambition. It is neither the best nor the worst that is lost in the ambiguities of translation; truth is somewhere in the middle.
And isn’t it true that success is 80% perspiration and 20% making things up? I am pretty sure that’s how it goes.
Give it a shot. What could go wrong? Hrm – well, it might be against some law. Fraud maybe. I stayed in a Holiday Inn once… I’d ask your legal team about the idea first (then do it anyway, of course).
But if you pull it off, and it’s all in place – maintenance isn’t such a stretch, is it?? I mean, you went through all that trouble.
Next up: “How to fake Continual Improvement”
😉

