New standards for auditors…

A new edition of ISO 19011 is currently being reviewed by ISO to help enhance the standard and to allow easier integration of standards to including quality, environment, food safety, supply chains, IT security and other management systems but will this revision actually make a difference to how we run management systems?

What is ISO 19011?

ISO 19011:2002 is the first standard harmonizing the auditing of ISO 9001:2008 and ISO 14001:2004.   It can be used for internal audits, supplier audits and is one of the standards that certification bodies must adhere to.

As well as defining the competency and training requirements for auditors, so you know that your certification body uses competent auditors, the standard also discusses how an auditor should plan a programme (schedule) of audits and then how to conduct an audit including;

• Initiation of audit
• Document review
• Preparing for auditing
• On-site auditing
• Reporting the audit
• Follow-up & close out

The issue of auditor competency is a concern when integrating two or more management systems and the use of an auditor that have no experience in the field of quality or environment.

The standard also provides a framework for professional standards in auditing based on 5 principles;

• Ethical conduct
• Fair presentation
• Due professional care
• Independence
• Evidence based approach

So what does the revision mean to me?

Well quite a lot.   It will help to define what qualifications your certification body need in the future to ensure that the standard you hold does not lose credibility due to poor auditing.

ISO 19011 also provides the framework for many audit courses such as the IRCA internal audit courses for ISO 9001:2008, ISO 14001:2004 and OHSAS 18001:2007 which you have probably used to train your audit team.

More and more, system managers complain that auditing is a waste of time yet it appears in every management system standard.   So although ISO 19011 may not be your favorite read, it does define very clearly what you need to do if you feel your audit system is not giving you real value for money in your business and if followed, will provide you with valuable management information to prevent risks in your organization.