BS EN ISO 19011:2018 - Page 2

What is ISO 19011 - Management system audits about?

ISO 19011 provides guidance for any organization that wants to plan and conduct management systems audits or manage an audit programme.

Who is ISO 19011 - Management system audits for?

Organizations that use ISO management system standards (e.g. 9001, 14001, 45001, 27001, etc), from the very smallest to multi-national, multi-site global conglomerates.

Why should you use ISO 19011 - Management system audits?

ISO 19011 provides guidance on auditing management systems and includes:

• The principles of auditing
• Managing an audit programme
• Conducting management system audits
• Guidance on evaluating the competence of individuals involved in the audit process. This includes the individual(s) managing the audit programme, auditors, and audit teams.

NOTE: It’s possible to apply ISO 19011 to other types of audits as long as special consideration is given to the specific competence needed.

What’s changed since the last update?

The main changes in BS EN ISO 19011:2018 are:

• Addition of the risk-based approach to the principles of auditing
• Expansion of guidance on managing an audit programme, including audit programme risk
• Expansion of the guidance on conducting an audit, particularly the section on audit planning
• Expansion of the generic competence requirements for auditors
• Adjusted terminology to reflect the process and not the object (thing)
• Removal of the annex containing competence requirements for auditing specific management system disciplines (due to the large number of individual management system standards, it would not be practical to include competence requirements for all disciplines)
• Expansion of Annex A to provide guidance on auditing (new) concepts such as organizational context, leadership and commitment, virtual audits, compliance and supply chain