Description

This curriculum spans the design and execution of internal audits across the full DMAIC lifecycle, comparable in scope to a multi-phase advisory engagement that integrates with enterprise risk management, process governance, and compliance systems.

Module 1: Defining Audit Scope within the DMAIC Lifecycle

Determine whether to audit only completed Six Sigma projects or include ongoing initiatives in the control phase.
Select specific DMAIC phases (e.g., Measure vs. Control) for audit focus based on organizational risk exposure.
Decide whether audits will cover Black Belt-led projects exclusively or include Green Belt and informal process improvements.
Establish criteria for project selection, such as financial impact, regulatory relevance, or cross-functional complexity.
Define boundaries for audit inclusion: whether to assess only documented DMAIC artifacts or include informal decision logs and meeting records.
Balance depth versus breadth by choosing between full-project audits and sampling key control points across multiple projects.
Integrate audit scope decisions with enterprise risk management priorities to align with compliance mandates.
Negotiate access rights to project data, especially when Six Sigma teams operate in siloed departments or use proprietary tools.

Module 2: Establishing Audit Criteria Based on DMAIC Fidelity

Define minimum acceptable standards for each DMAIC phase, such as required statistical tools in the Analyze phase.
Assess whether project teams applied appropriate hypothesis testing (e.g., t-tests, ANOVA) when validating root causes.
Evaluate consistency between Voice of Customer (VOC) inputs and the defined problem statement in the Define phase.
Verify that measurement system analysis (MSA) was conducted before collecting process data in the Measure phase.
Check for proper use of control charts and process capability indices (Cp, Cpk) in the Control phase documentation.
Identify deviations from standard DMAIC templates and determine if exceptions were justified by project context.
Assess whether project teams revisited the Define phase after discovering new data in later stages.
Document instances where teams skipped or abbreviated phases due to time pressure or leadership mandates.

Module 3: Designing Audit Checklists and Scoring Methodologies

Develop weighted scoring models that prioritize statistical rigor over documentation completeness.
Include binary pass/fail criteria for mandatory steps (e.g., MSA completion) and scaled ratings for qualitative elements (e.g., stakeholder alignment).
Customize checklists by project type—transactional, manufacturing, or service—based on typical data structures and process flows.
Integrate red flags such as missing baseline sigma levels or unvalidated financial savings.
Define thresholds for audit outcomes: minor nonconformity, major deficiency, or project invalidation.
Include fields for auditors to record rationale when overriding automated checklist scoring.
Ensure checklist items map directly to organizational Six Sigma standards or certification requirements (e.g., Black Belt certification criteria).
Version-control audit checklists and maintain change logs to support traceability during regulatory inspections.

Module 4: Selecting and Training Internal Audit Personnel

Decide whether auditors must hold Six Sigma certifications or if process excellence experience suffices.
Assign auditors to projects outside their functional area to prevent bias, balancing expertise with independence.
Train auditors to identify common data manipulation risks, such as cherry-picked timeframes or inflated cost savings.
Conduct calibration sessions where multiple auditors assess the same project to ensure scoring consistency.
Define escalation paths for auditors when project leaders dispute findings or withhold documentation.
Establish recertification requirements for auditors to maintain technical proficiency in statistical methods.
Rotate auditors across different business units to prevent relationship-based leniency over time.
Equip auditors with secure access to centralized project repositories and version-controlled documentation systems.

Module 5: Executing Onsite and Remote Audit Procedures

Conduct pre-audit briefings with project sponsors to understand project context without influencing auditor objectivity.
Validate that project data was pulled from live systems, not spreadsheets modified post-analysis.
Interview team members individually to identify discrepancies between documented decisions and actual rationale.
Re-run key statistical analyses (e.g., regression models) using original datasets to verify accuracy.
Trace financial benefits back to general ledger entries or operational KPIs to confirm realization.
Assess whether control plans were handed off to process owners and include monitoring frequency and response protocols.
Document evidence of change management activities, such as training records or communication plans.
Flag projects where improvements were achieved through temporary fixes rather than systemic changes.

Module 6: Evaluating Data Integrity and Statistical Validity

Check for p-hacking or data dredging by reviewing how many variables were tested before identifying significant factors.
Verify that sample sizes were determined a priori using power calculations, not post hoc justification.
Assess whether control groups or baseline comparisons were used appropriately in before/after analysis.
Identify misuse of statistical tools, such as applying parametric tests to non-normal data without transformation.
Review data collection plans for gaps, such as missing shift coverage or excluded failure modes.
Confirm timestamps on data files to detect retroactive edits after project completion.
Evaluate whether outliers were removed using defined criteria or arbitrarily to improve results.
Assess integration of real-time data feeds versus manual data entry in sustaining the improved process.

Module 7: Assessing Project Sustainability and Control Mechanisms

Review control charts to determine if process stability has been maintained for at least three months post-implementation.
Interview process owners to verify they are actively monitoring KPIs and responding to out-of-control signals.
Check whether standard operating procedures (SOPs) were updated and approved through document control systems.
Evaluate the robustness of mistake-proofing (poka-yoke) mechanisms, if implemented, under real operating conditions.
Assess whether responsibility for monitoring was formally assigned and included in job descriptions or dashboards.
Identify projects where improvements regressed after team disbandment due to lack of ownership.
Review management review records to confirm that project outcomes are discussed in operational governance meetings.
Determine if audit trails for process adjustments are maintained and accessible for review.

Module 8: Reporting Audit Findings and Driving Corrective Actions

Structure audit reports to separate factual observations from interpretive conclusions to reduce defensiveness.
Require project leaders to submit corrective action plans within 15 business days of audit closeout.
Escalate repeat deficiencies in specific departments to executive steering committees for intervention.
Track reopened projects where initial corrective actions failed to resolve root causes.
Include trend analysis in summary reports to identify systemic gaps, such as recurring MSA omissions.
Decide whether to publish anonymized audit results enterprise-wide to promote transparency and learning.
Integrate audit findings into Six Sigma certification renewal decisions for belts.
Archive audit reports with metadata (project ID, auditor, date) for retrieval during external audits or regulatory inquiries.

Module 9: Integrating Audit Insights into Organizational Governance

Present quarterly audit summaries to the Process Excellence Steering Committee with risk-ranked findings.
Revise Six Sigma training curricula based on recurring audit deficiencies, such as poor VOC translation.
Update organizational templates and checklists to reflect common gaps identified through audits.
Adjust project approval gates to require audit-readiness reviews before financial sign-off.
Incorporate audit results into performance metrics for site leaders and functional executives.
Develop a risk-based audit schedule that prioritizes high-impact or high-complexity projects.
Link audit outcomes to lessons learned databases to support future project teams.
Coordinate with internal audit and compliance functions to align Six Sigma audits with broader governance frameworks.

Internal Audits in Six Sigma Methodology and DMAIC Framework