Management systems are audited following ISO 19011 standards. The standard provides information on the concepts of auditing, how to run an audit programme, and how to evaluate the people in charge of doing audits. To achieve a certain goal, an audit programme comprises all of the individual audits that must be completed.

The audit programme should be improved in the same manner as other departments in a business, and ISO 19011:2018 outlines how to do so. The audit program's objectives should always be aligned with the management system's policies and goals. Auditing improvements should take into account the interests of consumers and other stakeholders.

The idea of risk is becoming more and more important in auditing management systems and companies in general. ISO 19011:2018's audit programme management part now includes a risk assessment component.

WHO SHOULD OBTAIN ISO 19011:2018 CERTIFICATION?

ISO 19011 and the ANSI version apply to you if your organisation performs internal or external audits of management systems or if you lead an audit programme.

ISO 19011 can be used by anybody participating in audits or audit programmes. ISO 19011 is intended for those responsible for administering an audit programme and assessing personnel.

19011:2011 in comparison to 19011:2018

The following are the primary distinctions between the 2011 and 2018 updates, as stated in the foreword:

The addition of a risk-based approach to the auditing principles

Expansion of guidelines on audit programme management, including audit programme risk

Expansion of auditing advice, notably the section on audit planning

Expansion of the standards for general competence for certified quality auditors (CQAs)

Terminology modification to reflect the process rather than the item ("thing")

The appendix containing criteria for auditing certain management system disciplines is deleted (due to the large number of individual management system standards, it would not be practical to include competence requirements for all disciplines)

Annex A is being expanded to provide guidance on auditing (new) topics such as organisational context, leadership and commitment, virtual audits, compliance, and supply chain management.