Auditing a Construction Company Quality Management System: What to Look For

Why Construction QMS Audits Are Different

Auditing a construction company is not like auditing a factory or a professional services firm. The product changes with every project. The workforce is transient. The workplace is outdoors, exposed to weather, and shared with subcontractors who may have no idea your client even has an ISO 9001 certification. The processes that matter most are often happening kilometres away from the office where the quality manager sits.

If you walk into a construction QMS audit expecting to spend most of your time reviewing documents, you will miss the real picture. The evidence that matters in construction is on site, in the lot records, in the inspection and test plans, and in the conversations with site supervisors and subcontractors who have never seen the quality manual.

This guide covers what experienced auditors look for when auditing a construction company quality management system. Whether you are an internal auditor preparing your next programme or a lead auditor conducting a certification audit, these are the processes and evidence points that separate a genuine system from a paperwork exercise.

Understanding the Construction Context First

Before you write a single checklist question, spend time understanding how the business actually delivers its work. Construction companies vary enormously. A residential builder has different processes than a civil infrastructure contractor. A fitout company operates differently from a structural steelwork subcontractor. The QMS must reflect the actual business, and your audit must test whether it does.

Key Questions to Ask in Planning

• What types of projects does the company take on, and what is the typical contract structure?
• How many active sites are running during the audit period?
• What work is done by the company's own workforce versus subcontractors?
• What regulatory frameworks apply, including building codes, state-based licensing requirements, and client-specific quality requirements?
• Has there been any rework, defect liability claims, or client complaints in the past 12 months?

The answers to these questions shape your sampling strategy. If the company runs 20 concurrent projects, you cannot audit them all. Pick a representative sample that includes at least one project at each major phase: planning, active construction, and defects liability period.

For more on how to approach an unfamiliar industry, see our guide on how to audit a process you have never seen before.

Clause 4: Context, Interested Parties and Scope

Construction companies often have a narrow scope statement that does not reflect the full complexity of their operations. Watch for exclusions that look convenient rather than justified. If the company designs and constructs, they cannot exclude Clause 8.3 design and development simply because they find it inconvenient.

Interested parties in construction are extensive. Clients, principal contractors, subcontractors, regulatory bodies, local councils, neighbours, and end users all have legitimate interests. Check that the organisation has actually identified these parties and considered their requirements, not just listed them in a register that nobody updates.

Clause 5: Leadership and the Quality Policy on Site

Top management commitment in construction is often tested by what happens when schedule pressure meets quality requirements. Ask the project manager or site supervisor what they do when a concrete pour is ready but the inspection has not been signed off. The answer tells you more about leadership commitment than any policy document.

Check that the quality policy is communicated to site workers, not just office staff. In practice, this means asking a labourer or a subcontractor's site foreman if they know the company's quality commitments. Blank stares are a finding.

What to Look For

• Quality policy displayed or accessible on site, not just framed in the boardroom
• Site supervisors who can articulate quality expectations in plain language
• Evidence that management actually reviews quality performance data, not just receives a report
• Roles and responsibilities that are understood by the people holding them

Clause 6: Risks, Objectives and Planning

Risk based thinking in construction should be visible in how projects are planned. Look for project-specific risk registers that go beyond generic WHS risks. Quality risks in construction include design changes, material substitutions, subcontractor performance, weather impacts on curing times, and inspection hold points being bypassed under schedule pressure.

Quality objectives in construction are often poorly defined. Statements like

achieve customer satisfaction

Clause 7: Competence, Awareness and Documented Information

Competence Records

Construction has specific competency requirements that sit alongside the QMS. Licensed builders, qualified engineers, certified welders, and trained plant operators all need evidence of their qualifications. Audit the competency matrix against the actual workforce on a sample project. Check that the records are current, not expired licences filed away because nobody reviewed them.

Ask site supervisors how they verify that a new subcontractor's workers have the right qualifications before they start work. The answer should describe a real process, not a theoretical one.

Documented Information

Construction generates enormous volumes of documents. The challenge is not creating them but controlling them. Check that site teams are working from current drawings, not an earlier revision that was superseded three weeks ago. Drawing control is one of the most common and consequential nonconformities in construction audits.

• Are current approved drawings available on site?
• Is there a transmittal register showing which revision is current?
• What happens when a design change is issued mid-construction?
• Are superseded drawings removed from use or clearly marked?

Clause 8: The Heart of a Construction QMS Audit

Clause 8 is where most of the audit time should be spent in a construction company. This is where the work happens and where quality is either built in or ignored.

Inspection and Test Plans

The inspection and test plan (ITP) is the central quality control document in construction. Every significant project should have one. An ITP defines what gets inspected, by whom, at what stage, and what the acceptance criteria are. It also identifies hold points, where work must stop until an inspection is signed off, and witness points, where the client or certifier has the right to attend.

When auditing ITPs, check these things specifically:

• Does the ITP cover all critical activities, not just the easy ones?
• Are hold points actually being enforced, or is there evidence of work proceeding without sign-off?
• Are completed ITPs retained as records, with signatures and dates?
• Do the acceptance criteria reference the relevant standard, specification, or drawing?

Incomplete ITPs, missing signatures, or hold points that were clearly bypassed are major findings. They indicate the system is not being followed in practice.

Lot Records and Conformance Documentation

Lot records are the construction industry's equivalent of production records. They capture what was done, when, by whom, and whether it met the specification. A mature construction QMS will have a complete set of lot records for every stage of work on every project.

Pull a sample of lot records from a current project and work backwards. Can you trace the poured concrete back to a batch delivery docket, a concrete mix design approval, and a cylinder test result? Can you trace the structural steel back to a mill certificate? This traceability trail is what separates a genuine quality system from one that exists only on paper.

Subcontractor Management

Most construction companies rely heavily on subcontractors. The QMS must address how subcontractors are selected, assessed, monitored, and managed. This is one of the most common areas of weakness in construction quality systems.

Check the approved subcontractor register. Is it current? Does it include the subcontractors actually being used on current projects? How was each subcontractor assessed before being added to the register? Is there evidence of ongoing performance monitoring, not just an initial tick-box approval?

On site, ask the site manager how they manage a subcontractor who is not meeting quality requirements. The answer should describe a real escalation process, not a vague reference to the contract.

For a detailed look at managing external providers under ISO 9001, our article on ISO 9001 Clause 8.4: Managing Outsourced Processes and Suppliers provides useful context.

Design and Development

If the company has any design responsibility, Clause 8.3 applies and must be audited. Design and development in construction includes shop drawings, design calculations, temporary works designs, and any value engineering changes. Check that design outputs are reviewed and approved before they are released for construction. Check that design changes go through a formal change process, not just a phone call or an email that nobody files.

Control of Nonconforming Outputs

How a construction company handles nonconforming work tells you a great deal about the maturity of its quality system. Look for a nonconformance register that captures actual site issues. If the register is empty or has only minor administrative items, that is suspicious. Construction work generates nonconformances. A site that has never raised one either has perfect workmanship or is not looking.

For each nonconformance in the sample, check:

• Was the nonconforming work quarantined or clearly identified?
• Was a disposition recorded, whether rework, repair, accept on concession, or reject?
• Was the disposition authorised by someone with the right authority?
• Was the corrective action effective, or did the same issue recur?

Customer Requirements and Contract Review

Construction contracts are complex documents. The QMS should include a process for reviewing contract requirements before work begins, identifying any quality-specific obligations, and communicating those obligations to the site team. Check that the project quality plan or equivalent document actually reflects the specific requirements of each contract, not just a generic template with the project name changed.

Clause 9: Monitoring, Measurement and Internal Audits

Site Inspections and Quality Metrics

Ask to see the quality performance data that management reviews. In a well-run construction QMS, this includes defect rates by project, rework costs, inspection pass rates, client satisfaction feedback, and subcontractor performance scores. If the only quality metric is whether the certification audit was passed, that is a finding.

Internal audits in construction should cover both office processes and site activities. An internal audit programme that only audits the office is not capturing where quality risks actually exist. Check that site audits are planned and conducted, and that the findings from those audits feed into the corrective action process.

Management Review

Management review in construction should include a review of project-level quality performance, not just system-level metrics. If the management review minutes contain no reference to specific projects, client complaints, or rework costs, the review is not connected to the real work of the business.

Clause 10: Improvement and Corrective Action

Follow the corrective action process through from a sample of nonconformances. Check that root cause analysis was actually conducted, not just a description of what went wrong. In construction, common root causes include inadequate pre-start planning, failure to brief subcontractors on quality requirements, and inspection hold points not being built into the programme schedule.

Check whether corrective actions were closed within the agreed timeframe and whether there is evidence that the action was effective. A corrective action that says

reminded workers to follow the procedure

Site Walk: What to Look for Beyond the Documents

No construction QMS audit is complete without a site visit. Documents can be produced to satisfy an audit. What happens on site is the reality. During a site walk, look for:

• Are workers aware of the inspection requirements for the work they are doing?
• Are materials stored correctly and protected from damage or contamination?
• Are hold points clearly marked on the programme or ITP visible on site?
• Is there evidence of work being done ahead of approved drawings?
• Are nonconformances being identified and tagged, or quietly fixed without being recorded?
• Do subcontractors know who to contact if they identify a quality issue?

Talk to site workers directly. Ask them what they do if they spot a defect. Ask them who is responsible for quality on site. The answers reveal whether the quality system is embedded in the culture or exists only in the quality manager's filing cabinet.

Our article on auditing a construction safety management system covers complementary site evidence gathering techniques that are equally useful when auditing the quality system.

Common Nonconformities in Construction QMS Audits

Based on real audit experience across construction projects in Australia and internationally, these are the nonconformities that come up most often:

• Superseded drawings in use on site
• Hold points bypassed without sign-off
• Subcontractors not on the approved register or not assessed before engagement
• Lot records incomplete or not retained
• Nonconformance register not reflecting actual site issues
• Quality objectives that are not measurable or not being monitored
• Internal audits that do not cover site activities
• Corrective actions closed without evidence of effectiveness
• Competency records not current for site workers
• Project quality plans that are generic templates rather than project-specific documents

Preparing Your Audit Checklist for Construction

A generic ISO 9001 checklist will not serve you well in a construction audit. Build your checklist around the processes that matter in construction: contract review, project planning, ITP development, inspection and testing, subcontractor management, drawing control, nonconformance management, and client handover. Map each checklist item to a specific clause but phrase your questions in construction language, not ISO language.

For guidance on building checklists that actually help rather than constrain your audit, see our article on how to use an audit checklist without becoming checklist dependent.

Building Your Skills for Industry-Specific Auditing

Auditing construction companies well requires both solid ISO 9001 knowledge and genuine understanding of how construction projects are delivered. The auditors who add the most value in this industry are those who can read a programme, understand what an ITP should contain, and have a conversation with a site supervisor without needing to translate everything into management system language.

If you are building your auditing skills and want training that prepares you for real-world audits rather than just exam questions, Audit Workshop offers ISO 9001 Internal Auditor and Lead Auditor courses built around practical audit scenarios. Our trainer, Dilawar Laghari, has conducted over 500 external certification audits across a wide range of industries, including construction, and brings that field experience directly into the training room. Whether you are starting out or looking to expand into lead auditor work, our courses give you the practical foundation to audit with confidence.