3.3 Audits, Records & Certification-Program Control

Closing the Loop: Auditing the Program

Writing good procedures and certifying capable people is only half of the Level III role. The other half is proving, on demand, that the program does what it claims. That proof comes from audits and records. An audit is a systematic, documented check that the NDT program conforms to its written practice and to any invoked standards. Auditors do not accept verbal assurance; they look for objective evidence that can be traced to specific people, equipment, and jobs.

Internal Versus External Audits

A mature program runs regular internal audits so that external audits find few surprises. The Level III typically owns the internal audit of the NDT program, resolves findings, and tracks corrective actions to closure.

Personnel Records

The strongest audit evidence for personnel is a traceable file for each certified individual. Best-practice personnel records include:

• Training – courses, hours, and topics, tied to the method and level.
• Experience – dated, specific, and verified by someone responsible for oversight, not a vague summary.
• Vision – current near-vision acuity and color-contrast results, retested on the required interval.
• Examinations – general, specific, and practical exam results with the versions used.
• Certification status – the signed certification, its level and scope, effective and expiration dates, and recertification history.

When an auditor asks how a Level II was qualified, a signed certification record showing training, experience, vision, and examination results is the clearest compliance trail. A resume, a job list, or a supervisor's verbal statement is not sufficient objective evidence.

Equipment and Calibration Control

Records are equally important on the equipment side. Instruments and reference standards must be under calibration control: each device should have records showing the standard or reference block used, the calibration date, the next-due date, and the result. Examination reports should capture equipment identification and calibration status so that a result can later be reconstructed and defended. If an instrument is found out of calibration, the Level III must evaluate the impact on inspections performed since the last valid calibration, which may require re-inspection. Calibration control is a frequent audit focus because an uncalibrated instrument silently undermines every result it produced.

Controlling the Certification Program and Documents

Program control also means controlling the documents themselves. Procedures and technique sheets must be under revision control so that only the current, approved revision is in use at the workstation. Working to an obsolete revision is a genuine compliance failure: even if the technician's hands-on technique looks careful, the inspection may no longer satisfy the current approved requirements or the correct acceptance criteria. Exam banks and answer keys used to qualify personnel must be secured so that live items are not compromised, which protects the validity of every qualification decision made with them.

The written practice is itself a controlled document. It should be reviewed periodically against current operations and the standards it references, because business changes and standard revisions cause quiet drift. When ASNT changed the recommended Basic self-study references from the 2020 to the 2024 editions of SNT-TC-1A and CP-189 effective January 1, 2026, every employer whose written practice cited the older editions needed to update it. A Level III who lets references, methods, or acceptance criteria go stale invites audit findings and weakens the defensibility of the whole program.

Recertification and Records Retention

Finally, program control extends across time. Recertification has little value if certificates are simply renewed without confirming that the required conditions, such as continuity of work and any required reexamination, were actually met; unchecked renewal is a classic sign of an ineffective process. Records must also be retained for the period the written practice or contract requires so that a certification or disposition can be reconstructed long after the work is done. The recurring theme across every oversight question is the same: if it is not documented and traceable, an auditor treats it as if it did not happen.

Corrective Action and Root Cause

Finding a nonconformance is only the start; closing it is what makes an audit meaningful. When an audit uncovers a problem, such as an overdue vision exam, an uncalibrated instrument, or a certification issued without full experience, the Level III should not simply patch the single record. Good program control asks why the gap occurred and fixes the underlying process so it does not recur. If a technician's near-vision exam is overdue, for example, the immediate action is to suspend certified work that requires current vision until the requirement is reestablished per the written practice, and the systemic action is to build a reliable due-date tracking system. This distinction between correction (fixing the instance) and corrective action (fixing the cause) is exactly the judgment a Level III is expected to bring to program oversight.

Tying Records to Every Certification and Disposition

Every link in the chain must connect. A certification record points to the training, experience, vision, and exam evidence behind it; an inspection report points to the procedure revision, the calibrated equipment, and the acceptance criteria used. When those links are complete and current, any qualified reviewer can reconstruct what was done, by whom, under which controls, and to what result, long after the work is finished. That reconstructability is the practical definition of a controlled certification program, and it is the standard the Basic exam applies to oversight questions.