Auditing Quality Management in Transport and Logistics: Key Processes and Evidence

Why Transport and Logistics Organisations Are Interesting to Audit

Transport and logistics businesses operate across a web of interdependent processes, external providers, regulatory obligations, and customer expectations. For an auditor, that complexity is both a challenge and an opportunity. You are rarely dealing with a single site or a linear production process. You are tracing quality through depots, subcontractors, drivers, vehicle fleets, booking systems, and customer complaint channels, often all within the same audit.

ISO 9001 is the most common quality standard applied in this sector, and it maps well to the operational reality of freight, courier, warehousing, and distribution businesses. But applying it well requires sector knowledge. A generic clause by clause walkthrough will miss the things that actually go wrong in transport and logistics. This article is written for auditors conducting internal or external audits of these organisations, and for quality managers preparing their teams for scrutiny.

If you are new to auditing this sector, you might also find it useful to read our article on ISO 9001 for Transport and Logistics Operators, which covers what certification involves from the organisation's perspective.

Understanding the Sector Before You Start

Know What the Business Actually Does

Before you write a single audit question, understand the business model. A courier company that handles last mile residential delivery has very different risks and processes compared to a bulk freight carrier moving mining equipment across Western Australia. A third party logistics provider managing a client's warehouse has different quality obligations than a refrigerated transport operator moving pharmaceuticals.

Your pre audit document review should give you a clear picture of the scope of certification, the types of services provided, the customer base, and the major subcontracting arrangements. Ask for the context of the organisation documentation, the risk register, and the quality policy before you arrive on site. Read them. Do not arrive with a generic checklist and expect to uncover anything meaningful.

The Regulatory Landscape Matters

Transport and logistics in Australia operates within a significant regulatory framework. The Heavy Vehicle National Law, chain of responsibility obligations, fatigue management rules, dangerous goods regulations, and mass and dimension requirements all create compliance obligations that a quality system must address. When auditing clause 4.1 and 4.2, you should be probing whether the organisation has properly identified these as external issues and interested party requirements. If the legal register does not include chain of responsibility legislation, that is a finding worth pursuing.

Key Processes to Audit in Transport and Logistics

Order Intake and Customer Requirements

The quality chain in transport and logistics starts when a customer places a booking or signs a contract. Clause 8.2 of ISO 9001 requires the organisation to determine the requirements for its services before committing to provide them. In transport, this means confirming freight type, dimensions, weight, temperature requirements, delivery timeframes, special handling instructions, and any regulatory requirements for the goods being moved.

When auditing this process, ask to see how bookings are captured and reviewed. Look for evidence that unusual or high risk consignments are flagged before acceptance. A common finding here is that the organisation accepts bookings without a formal review step, relying on driver or depot knowledge to catch problems. That is a gap. The review should happen before commitment, not after the truck is loaded.

Interview the bookings team or customer service staff. Ask them what they do when a customer requests something outside normal service parameters. If they cannot describe a clear process, or if the process exists only in someone's head, you have something to document.

Operational Planning and Work Instructions

Clause 8.1 requires the organisation to plan and control the processes needed to deliver its services. In transport and logistics, this covers route planning, load scheduling, vehicle allocation, driver briefings, and special handling procedures. For warehousing operations, it includes pick and pack processes, stock rotation, inbound receiving, and outbound despatch.

Look for documented procedures or work instructions that reflect how work is actually done. In many transport businesses, these are thin or absent. Drivers and depot staff operate from habit and verbal instruction. That is not inherently a nonconformity, but it becomes one when things go wrong and there is no documented process to reference, or when new staff are trained inconsistently.

Observe the actual operation where possible. Walk the depot. Watch a vehicle being loaded. Ask a driver what they check before departure. What you observe should be consistent with what the documented procedures describe. Gaps between documentation and practice are among the most common findings in this sector.

Subcontractor and External Provider Management

Transport and logistics businesses rely heavily on subcontractors. Owner operators, labour hire drivers, freight brokers, and linehaul partners are all external providers under clause 8.4. The standard requires the organisation to determine the type and extent of controls applied to these providers based on the potential impact on the organisation's ability to meet customer requirements.

This is one of the richest areas to audit in this sector. Ask to see the approved subcontractor register. How are subcontractors selected and approved? What criteria are applied? Is there evidence that subcontractor performance is monitored? Many organisations have a list of approved subcontractors but no evidence of ongoing performance evaluation. That is a gap against clause 8.4.1.

Also probe the flow down of requirements. When a subcontractor is engaged to deliver freight on behalf of the organisation, does the subcontractor receive the customer's special requirements? Is there a documented process for communicating delivery instructions, handling requirements, and proof of delivery expectations? Verbal handovers are common and frequently lead to failures. Look for evidence that critical requirements are communicated in writing or through a system that creates a record.

For a broader view of how to audit external provider controls, our post on Auditing Supplier Control Under ISO 9001 Clause 8.4 covers the approach in detail.

Delivery and Service Provision

Clause 8.5 covers the actual provision of services. In transport, this is the pick up, transit, and delivery process. Key questions include: Is there a defined process for collecting proof of delivery? How are time critical deliveries managed and tracked? What happens when a delivery cannot be completed? How are damaged or lost goods handled?

Request a sample of delivery records. Look for proof of delivery documentation, GPS or telematics records, and any customer sign off requirements. Compare the records to what the procedure requires. If the procedure says drivers must photograph damaged goods before unloading but the records show no photographs, that is a gap worth raising.

Traceability is another important thread here. Can the organisation trace a specific consignment from booking through to delivery? If a customer calls to dispute a delivery, can the organisation produce a complete record of that consignment's journey? In many businesses, this capability exists in the transport management system but has never been tested in an audit context. Ask to trace a specific consignment from start to finish and observe what the process actually produces.

Vehicle and Equipment Maintenance

In transport, the vehicle fleet is the primary infrastructure for service delivery. Clause 7.1.3 requires the organisation to determine, provide, and maintain the infrastructure needed for its operations. For a transport business, this means a documented maintenance programme, records of pre start checks, and evidence that defects are identified and rectified before vehicles are used.

Ask to see the preventive maintenance schedule and a sample of maintenance records. Check that the records are current and that there is a clear process for managing defects. A common gap is that pre start check sheets exist but are not reviewed by anyone in a supervisory role. Drivers complete the form, defects are noted, and nothing happens. That is a systemic failure that an auditor should surface.

Also consider calibration requirements under clause 7.1.5. Refrigerated transport operators must demonstrate that temperature monitoring equipment is calibrated and that records are maintained. Weighbridges, load cells, and other measurement equipment used in logistics operations may also have calibration requirements.

Nonconforming Outputs and Customer Complaints

Clause 8.7 requires the organisation to control outputs that do not conform to requirements. In transport and logistics, nonconforming outputs include damaged freight, late deliveries, incorrect deliveries, and lost goods. The organisation must have a process for identifying, segregating, and dealing with these situations.

Ask to see records of nonconforming events from the past six to twelve months. How are they recorded? What happens after a nonconformance is identified? Is there a consistent process for notifying the customer, investigating the cause, and implementing a correction? Many transport businesses handle complaints reactively and informally, with no systematic record keeping. That makes it impossible to identify trends or demonstrate improvement.

Clause 9.1.2 requires the organisation to monitor customer satisfaction. In transport, this typically includes complaint rates, on time delivery performance, and damage rates. Ask how these metrics are collected, analysed, and used. If the quality manager can recite the on time delivery rate but cannot show you where it comes from or how it feeds into management review, the monitoring process is not as robust as it appears.

Evidence to Gather in a Transport and Logistics Audit

Documents and Records

The following documented information is typically relevant in a transport and logistics quality audit. You should request these before or during the audit and review them critically rather than just confirming they exist.

• Quality policy and quality objectives with measurable targets
• Scope of certification document
• Context of the organisation and interested parties register
• Risk register covering operational and compliance risks
• Legal and compliance obligations register including chain of responsibility, fatigue management, and dangerous goods requirements
• Approved subcontractor register with selection criteria and performance records
• Customer contracts or service agreements with key requirements documented
• Vehicle maintenance schedules and maintenance records
• Pre start inspection records for a sample of vehicles
• Driver licence and competence records
• Proof of delivery records for a sample of consignments
• Temperature monitoring records for refrigerated operations
• Calibration records for measurement equipment
• Customer complaint log and records of investigation and resolution
• On time delivery and damage rate data
• Internal audit records and corrective action register
• Management review minutes

Interviews to Conduct

Interview a cross section of staff. Do not limit yourself to the quality manager and senior leaders. The most revealing conversations in transport audits happen with depot supervisors, drivers, and customer service staff. Ask open questions about how work is actually done, what happens when things go wrong, and how problems are reported and resolved.

When interviewing drivers, ask what training they received when they started. Ask what they do when they find a defect during a pre start check. Ask what they do when a delivery address is wrong or a customer refuses a delivery. Their answers will tell you more about the effectiveness of the quality system than any document review.

When interviewing depot supervisors, ask how subcontractors are briefed before a job. Ask what records they keep of subcontractor performance. Ask what triggers a formal complaint or nonconformance report. If the answer is only when the customer complains, the internal identification process is weak.

Physical Observation

Walk the depot or warehouse. Observe how freight is stored, handled, and identified. Look for evidence of damaged goods management. Are damaged items segregated and labelled? Is there a process for quarantining suspect freight? Check that dangerous goods are stored and handled in accordance with documented procedures.

If you can observe a vehicle departure, watch the pre start process. Does the driver actually complete the check sheet, or do they sign it without checking? Is there a supervisor present? Are defects recorded? Physical observation often reveals the gap between what the procedure says and what actually happens on the floor.

Common Nonconformities in Transport and Logistics QMS Audits

Based on audit experience across Australian transport and logistics businesses, the following nonconformities appear regularly. Knowing these helps you focus your sampling and questioning.

• Subcontractor approval records are incomplete or out of date, with no evidence of ongoing performance monitoring against defined criteria
• Customer requirements are not formally reviewed before service acceptance, particularly for unusual or high risk consignments
• Pre start check records exist but are not reviewed, and defects noted by drivers are not followed up in a documented way
• Proof of delivery records are inconsistent, with gaps in the sample that cannot be explained
• Complaint records are informal and do not include root cause analysis or evidence of corrective action effectiveness
• Quality objectives are stated but not measured, or the measurement data cannot be traced to a defined collection process
• Internal audits have not covered high risk processes such as subcontractor management or dangerous goods handling
• Management review inputs do not include analysis of customer satisfaction data or nonconformance trends
• Legal and compliance obligations register does not include chain of responsibility legislation or fatigue management requirements

Sector Specific Considerations for Auditors

Multi Site and Mobile Operations

Transport businesses often operate across multiple depots, sometimes in different states. The quality system must be consistently applied across all sites within the certification scope. When auditing a multi site operation, check that procedures are accessible at all locations, that internal audits cover all sites on a risk based schedule, and that management review considers performance data from all sites, not just head office.

Mobile workers, particularly drivers, present a specific challenge. They are rarely in the office. Training records, briefings, and procedure updates must reach them through a defined channel. Ask how the organisation communicates changes to drivers. If the answer is the depot supervisor tells them, ask how that is documented and how compliance is verified.

Chain of Responsibility

Chain of responsibility legislation in Australia makes every party in the supply chain responsible for ensuring that heavy vehicle laws are not breached. For a transport business, this means the quality system must address how the organisation manages pressure from customers to deliver faster than is safely possible, how fatigue management is monitored, and how mass and dimension compliance is verified.

An auditor should check whether chain of responsibility obligations are included in the legal register, whether there are documented procedures for managing these obligations, and whether there is evidence of compliance monitoring. If the organisation has had a chain of responsibility incident or infringement, check whether it was treated as a nonconformance and whether corrective action was implemented and verified.

Dangerous Goods

If the organisation transports dangerous goods, the quality system must address the additional requirements of the Australian Dangerous Goods Code and relevant state regulations. Check that dangerous goods training records are current for relevant staff, that documentation requirements are met, and that emergency response procedures are in place and tested.

Preparing Your Audit Plan for a Transport and Logistics Organisation

A well structured audit plan for a transport and logistics QMS should allocate time to the processes that carry the most risk. Do not spend half your day reviewing the quality policy and objectives when the real risk lies in subcontractor management and vehicle maintenance. Use a risk based approach to prioritise your sampling.

Allocate time for a depot walk and, if possible, observe actual operations rather than relying entirely on interviews and document review. The physical observation component of a transport audit often produces the most significant findings. Plan your interviews to include front line staff, not just managers. And build in time to trace at least one or two consignments end to end through the system.

For guidance on how to structure your audit approach, our article on Auditing a Manufacturing Quality Management System: From Goods Inwards to Dispatch covers similar process based audit thinking that translates well to logistics environments.

Building Auditor Competence for the Transport Sector

Auditing transport and logistics organisations well requires a combination of ISO 9001 auditing skills and genuine sector knowledge. If you are new to the sector, invest time in understanding the regulatory framework, the typical business model, and the common operational risks before you conduct your first audit. Talk to people who work in the industry. Read the relevant legislation. Review some transport management system software to understand how consignment data is captured and tracked.

If you are building your auditing credentials and want to develop the practical skills to audit complex, process intensive organisations like those in transport and logistics, the training courses at Audit Workshop are designed around real audit practice, not just theory. The ISO 9001 Internal Auditor and Lead Auditor courses cover the process based audit approach, evidence gathering techniques, and nonconformity writing skills that you need to conduct audits that actually drive improvement.