I am struggling with a similar issue as Jennifer. I work for a small company that we are currently ISO9001/AS9100 and ISO13485 registered and certified to. Every year we have gotten by on our internal audits and every year they say they could be better.
Who is "they" and how is the "could be better" reported? Tell me how often do you perform internal audits?