ISO 19011

ISO 19011 is an international standard that sets forth guidelines for management systemsauditing. The current version is ISO 19011:2026. It is developed by the International Organization for Standardization (ISO).

Originally it was published in 1990 as ISO 10011-1 and in 2002 took the current ISO 19011 numbering.

The standard offers four resources to organisations to "save time, effort and money":

• A clear explanation of the principles of management systems auditing.
• Guidance on the management of audit programs.
• Guidance on the conduct of internal or external audits.
• Advice on the competence and evaluation of auditors.

Seven Principles of Auditing

• Integrity: The foundation of professionalism; perform work ethically, honestly, and responsibly.
• Fair presentation: Report audit findings and conclusions truthfully and accurately.
• Due professional care: Exercise diligence and reasoned judgement during auditing.
• Confidentiality: Exercise discretion and protect sensitive information.
• Independence: Remain unbiased and objective throughout the audit process.
• Evidence-based approach: Reach reliable, verifiable conclusions using systematic sampling.

• Risk-based approach: Consider risks and opportunities during planning, conducting, and reporting.

Core Components

• Audit Program Management: Establishing objectives, assessing risks to the program, and assigning resources.
• Conducting the Audit: Initiating, preparing the plan, performing on-site or remote activities, and reporting findings.
• Auditor Competence: Evaluating personal behaviour, knowledge, and skills required for specific audits.
• Note on Certification: Organisations cannot be "ISO 19011 certified" because it is a guidance standard, not a requirement specification.