1. ISO 19011

ISO 19011 is an international standard that provides guidelines for the auditing of management systems. It is used to understand the attitude, competence, audit performance methods, program management, and competence of auditors. It assists in the preparation, execution, and evaluation of management system audits. This standard is especially, applicable to audits in organizations of various sizes, from large to small, and covers both internal and external audits. It offers comprehensive guidelines, ranging from the assessment of auditor competence to the management of audit programs.

< ISO 19011 >

2. The main differences compared to the second edition

• •  Addition of the risk-based approach to the principles of auditing
• •  Expansion of the guidance on managing an audit program, including audit program risk
• •  Expansion of the guidance on conducting an audit, particularly the section on audit planning
• •  Expansion of the generic competence requirements for auditors
• •  Adjustment of terminology to reflect the process and not the object (“thing”)
• •  Removal of the annex containing competence requirements for auditing specific management system disciplines (due to the large number of individual management system standards, it would not be practical to include competence requirements for all disciplines)
• •  Expansion of Annex A to provide guidance on auditing (new) concepts such as organization context, leadership and commitment, virtual audits, compliance, and supply chain.

< The main differences compared to the second edition >