Skip to document

ISO 19011-2011 - ISO standards

ISO standards
Course

Occupational health ,safety and law (OHS2601)

61 Documents
Students shared 61 documents in this course
Academic year: 2017/2018
Uploaded by:
0followers
6Uploads
3upvotes

Comments

Please sign in or register to post comments.

Preview text

Guidelines for auditing management

systems

Lignes directrices pour l’audit des systèmes de management

© ISO 2011

Reference number ISO 19011:2011(E)

Second edition 2011-11-

ISO

19011

INTERNATIONAL

STANDARD

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

COPYRIGHT PROTECTED DOCUMENT

© ISO 2011 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISO’s member body in the country of the requester. ISO copyright office Case postale 56 • CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyright@iso Web iso Published in Switzerland

ii © ISO 2011 – All rights reserved

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.

The main task of technical committees is to prepare International Standards. Draft International Standards adopted by the technical committees are circulated to the member bodies for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote.

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights.

ISO 19011 was prepared by Technical Committee ISO/TC 176, Quality management and quality assurance, Subcommittee SC 3, Supporting technologies.

This second edition cancels and replaces the first edition (ISO 19011:2002), which has been technically revised.

The main differences compared with the first edition are as follows:

— the scope has been broadened from the auditing of quality and environmental management systems to the auditing of any management systems;

— the relationship between ISO 19011 and ISO/IEC 17021 has been clarified;

— remote audit methods and the concept of risk have been introduced;

— confidentiality has been added as a new principle of auditing;

— Clauses 5, 6 and 7 have been reorganized;

— additional information has been included in a new Annex B, resulting in the removal of help boxes;

— the competence determination and evaluation process has been strengthened;

— illustrative examples of discipline-specific knowledge and skills have been included in a new Annex A;

— additional guidelines are available at the following website: iso/19011auditing.

iv © ISO 2011 – All rights reserved

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

Introduction

Since the first edition of this International Standard was published in 2002, a number of new management system standards have been published. As a result, there is now a need to consider a broader scope of management system auditing, as well as providing guidance that is more generic.

In 2006, the ISO committee for conformity assessment (CASCO) developed ISO/IEC 17021, which sets out requirements for third party certification of management systems and which was based in part on the guidelines contained in the first edition of this International Standard.

The second edition of ISO/IEC 17021, published in 2011, was extended to transform the guidance offered in this International Standard into requirements for management system certification audits. It is in this context that this second edition of this International Standard provides guidance for all users, including small and medium-sized organizations, and concentrates on what are commonly termed “internal audits” (first party) and “audits conducted by customers on their suppliers” (second party). While those involved in management system certification audits follow the requirements of ISO/IEC 17021:2011, they might also find the guidance in this International Standard useful.

The relationship between this second edition of this International Standard and ISO/IEC 17021:2011 is shown in Table 1.

Table 1 — Scope of this International Standard and its relationship with ISO/IEC 17021:

Internal auditing External auditing Supplier auditing Third party auditing

Sometimes called first party audit Sometimes called second party audit

For legal, regulatory and similar purposes For certification (see also the requirements in ISO/IEC 17021:2011)

This International Standard does not state requirements, but provides guidance on the management of an audit programme, on the planning and conducting of an audit of the management system, as well as on the competence and evaluation of an auditor and an audit team.

Organizations can operate more than one formal management system. To simplify the readability of this International Standard, the singular form of “management system” is preferred, but the reader can adapt the implementation of the guidance to their own particular situation. This also applies to the use of “person” and “persons”, “auditor” and “auditors”.

This International Standard is intended to apply to a broad range of potential users, including auditors, organizations implementing management systems, and organizations needing to conduct audits of management systems for contractual or regulatory reasons. Users of this International Standard can, however, apply this guidance in developing their own audit-related requirements.

The guidance in this International Standard can also be used for the purpose of self-declaration, and can be useful to organizations involved in auditor training or personnel certification.

The guidance in this International Standard is intended to be flexible. As indicated at various points in the text, the use of this guidance can differ depending on the size and level of maturity of an organization’s management system and on the nature and complexity of the organization to be audited, as well as on the objectives and scope of the audits to be conducted.

This International Standard introduces the concept of risk to management systems auditing. The approach adopted relates both to the risk of the audit process not achieving its objectives and to the potential of the audit to interfere with the auditee’s activities and processes. It does not provide specific guidance on the organization’s risk management process, but recognizes that organizations can focus audit effort on matters of significance to the management system.

© ISO 2011 – All rights reserved v

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

INTERNATIONAL STANDARD ISO 19011:2011(E)

Guidelines for auditing management systems

1 Scope

This International Standard provides guidance on auditing management systems, including the principles of auditing, managing an audit programme and conducting management system audits, as well as guidance on the evaluation of competence of individuals involved in the audit process, including the person managing the audit programme, auditors and audit teams.

It is applicable to all organizations that need to conduct internal or external audits of management systems or manage an audit programme.

The application of this International Standard to other types of audits is possible, provided that special consideration is given to the specific competence needed.

2 Normative references

No normative references are cited. This clause is included in order to retain clause numbering identical with other ISO management system standards.

3 Terms and definitions

For the purposes of this document, the following terms and definitions apply.

  1. audit systematic, independent and documented process for obtaining audit evidence (3) and evaluating it objectively to determine the extent to which the audit criteria (3) are fulfilled

NOTE 1 Internal audits, sometimes called first party audits, are conducted by the organization itself, or on its behalf, for management review and other internal purposes (e. to confirm the effectiveness of the management system or to obtain information for the improvement of the management system). Internal audits can form the basis for an organization’s self- declaration of conformity. In many cases, particularly in small organizations, independence can be demonstrated by the freedom from responsibility for the activity being audited or freedom from bias and conflict of interest.

NOTE 2 External audits include second and third party audits. Second party audits are conducted by parties having an interest in the organization, such as customers, or by other persons on their behalf. Third party audits are conducted by independent auditing organizations, such as regulators or those providing certification.

NOTE 3 When two or more management systems of different disciplines (e. quality, environmental, occupational health and safety) are audited together, this is termed a combined audit.

NOTE 4 When two or more auditing organizations cooperate to audit a single auditee (3), this is termed a joint audit.

NOTE 5 Adapted from ISO 9000:2005, definition 3.9.

  1. audit criteria set of policies, procedures or requirements used as a reference against which audit evidence (3) is compared

NOTE 1 Adapted from ISO 9000:2005, definition 3.9.

NOTE 2 If the audit criteria are legal (including statutory or regulatory) requirements, the terms “compliant” or “non- compliant” are often used in an audit finding (3).

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

####### 3.

audit evidence records, statements of fact or other information which are relevant to the audit criteria (3) and verifiable

NOTE Audit evidence can be qualitative or quantitative.

[ISO 9000:2005, definition 3.9]

  1. audit findings results of the evaluation of the collected audit evidence (3) against audit criteria (3)

NOTE 1 Audit findings indicate conformity or nonconformity.

NOTE 2 Audit findings can lead to the identification of opportunities for improvement or recording good practices.

NOTE 3 If the audit criteria are selected from legal or other requirements, the audit finding is termed compliance or non-compliance.

NOTE 4 Adapted from ISO 9000:2005, definition 3.9.

  1. audit conclusion outcome of an audit (3), after consideration of the audit objectives and all audit findings (3)

NOTE Adapted from ISO 9000:2005, definition 3.9.

  1. audit client organization or person requesting an audit (3)

NOTE 1 In the case of internal audit, the audit client can also be the auditee (3) or the person managing the audit programme. Requests for external audit can come from sources such as regulators, contracting parties or potential clients.

NOTE 2 Adapted from ISO 9000:2005, definition 3.9.

  1. auditee organization being audited

[ISO 9000:2005, definition 3.9]

  1. auditor person who conducts an audit (3)

  2. audit team one or more auditors (3) conducting an audit (3), supported if needed by technical experts (3)

NOTE 1 One auditor of the audit team is appointed as the audit team leader.

NOTE 2 The audit team may include auditors-in-training.

[ISO 9000:2005, definition 3.9]

  1. technical expert person who provides specific knowledge or expertise to the audit team (3)

NOTE 1 Specific knowledge or expertise is that which relates to the organization, the process or activity to be audited, or language or culture.

NOTE 2 A technical expert does not act as an auditor (3) in the audit team. Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

####### 3.

management system system to establish policy and objectives and to achieve those objectives

NOTE A management system of an organization can include different management systems, such as a quality management system, a financial management system or an environmental management system.

[ISO 9000:2005, definition 3.2]

4 Principles of auditing

Auditing is characterized by reliance on a number of principles. These principles should help to make the audit an effective and reliable tool in support of management policies and controls, by providing information on which an organization can act in order to improve its performance. Adherence to these principles is a prerequisite for providing audit conclusions that are relevant and sufficient and for enabling auditors, working independently from one another, to reach similar conclusions in similar circumstances.

The guidance given in Clauses 5 to 7 is based on the six principles outlined below.

a) Integrity: the foundation of professionalism

Auditors and the person managing an audit programme should:

— perform their work with honesty, diligence, and responsibility;

— observe and comply with any applicable legal requirements;

— demonstrate their competence while performing their work;

— perform their work in an impartial manner, i. remain fair and unbiased in all their dealings;

— be sensitive to any influences that may be exerted on their judgement while carrying out an audit.

b) Fair presentation: the obligation to report truthfully and accurately

Audit findings, audit conclusions and audit reports should reflect truthfully and accurately the audit activities. Significant obstacles encountered during the audit and unresolved diverging opinions between the audit team and the auditee should be reported. The communication should be truthful, accurate, objective, timely, clear and complete.

c) Due professional care: the application of diligence and judgement in auditing

Auditors should exercise due care in accordance with the importance of the task they perform and the confidence placed in them by the audit client and other interested parties. An important factor in carrying out their work with due professional care is having the ability to make reasoned judgements in all audit situations.

d) Confidentiality: security of information

Auditors should exercise discretion in the use and protection of information acquired in the course of their duties. Audit information should not be used inappropriately for personal gain by the auditor or the audit client, or in a manner detrimental to the legitimate interests of the auditee. This concept includes the proper handling of sensitive or confidential information.

e) Independence: the basis for the impartiality of the audit and objectivity of the audit conclusions

Auditors should be independent of the activity being audited wherever practicable, and should in all cases act in a manner that is free from bias and conflict of interest. For internal audits, auditors should be independent from the operating managers of the function being audited. Auditors should maintain

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

objectivity throughout the audit process to ensure that the audit findings and conclusions are based only on the audit evidence.

For small organizations, it may not be possible for internal auditors to be fully independent of the activity being audited, but every effort should be made to remove bias and encourage objectivity.

f) Evidence-based approach: the rational method for reaching reliable and reproducible audit conclusions in a systematic audit process

Audit evidence should be verifiable. It will in general be based on samples of the information available, since an audit is conducted during a finite period of time and with finite resources. An appropriate use of sampling should be applied, since this is closely related to the confidence that can be placed in the audit conclusions.

5 Managing an audit programme
5 General

An organization needing to conduct audits should establish an audit programme that contributes to the determination of the effectiveness of the auditee’s management system. The audit programme can include audits considering one or more management system standards, conducted either separately or in combination.

The top management should ensure that the audit programme objectives are established and assign one or more competent persons to manage the audit programme. The extent of an audit programme should be based on the size and nature of the organization being audited, as well as on the nature, functionality, complexity and the level of maturity of the management system to be audited. Priority should be given to allocating the audit programme resources to audit those matters of significance within the management system. These may include the key characteristics of product quality or hazards related to health and safety, or significant environmental aspects and their control.

NOTE This concept is commonly known as risk-based auditing. This International Standard does not give further guidance on risk-based auditing.

The audit programme should include information and resources necessary to organize and conduct its audits effectively and efficiently within the specified time frames and can also include the following:

— objectives for the audit programme and individual audits;

— extent/number/types/duration/locations/schedule of the audits;

— audit programme procedures;

— audit criteria;

— audit methods;

— selection of audit teams;

— necessary resources, including travel and accommodation;

— processes for handling confidentiality, information security, health and safety, and other similar matters.

The implementation of the audit programme should be monitored and measured to ensure its objectives have been achieved. The audit programme should be reviewed in order to identify possible improvements.

Figure 1 illustrates the process flow for the management of an audit programme.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

These objectives can be based on consideration of the following:

a) management priorities;

b) commercial and other business intentions;

c) characteristics of processes, products and projects, and any changes to them;

d) management system requirements;

e) legal and contractual requirements and other requirements to which the organization is committed;

f) need for supplier evaluation;

g) needs and expectations of interested parties, including customers;

h) auditee’s level of performance, as reflected in the occurrence of failures or incidents or customer complaints;

i) risks to the auditee;

j) results of previous audits;

k) level of maturity of the management system being audited.

Examples of audit programme objectives include the following:

— to contribute to the improvement of a management system and its performance;

— to fulfil external requirements, e. certification to a management system standard;

— to verify conformity with contractual requirements;

— to obtain and maintain confidence in the capability of a supplier;

— to determine the effectiveness of the management system;

— to evaluate the compatibility and alignment of the management system objectives with the management system policy and the overall organizational objectives.

5 Establishing the audit programme

5.3 Roles and responsibilities of the person managing the audit programme

The person managing the audit programme should:

— establish the extent of the audit programme;

— identify and evaluate the risks for the audit programme;

— establish audit responsibilities;

— establish procedures for audit programmes;

— determine necessary resources;

— ensure the implementation of the audit programme, including the establishment of audit objectives, scope and criteria of the individual audits, determining audit methods and selecting the audit team and evaluating auditors;

— ensure that appropriate audit programme records are managed and maintained;

— monitor, review and improve the audit programme.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

The person managing an audit programme should inform the top management of the contents of the audit programme and, where necessary, request its approval.

5.3 Competence of the person managing the audit programme

The person managing the audit programme should have the necessary competence to manage the programme and its associated risks effectively and efficiently, as well as knowledge and skills in the following areas:

— audit principles, procedures and methods;

— management system standards and reference documents;

— activities, products and processes of the auditee;

— applicable legal and other requirements relevant to the activities and products of the auditee;

— customers, suppliers and other interested parties of the auditee, where applicable.

The person managing the audit programme should engage in appropriate continual professional development activities to maintain the necessary knowledge and skills to manage the audit programme.

5.3 Establishing the extent of the audit programme

The person managing the audit programme should determine the extent of the audit programme, which can vary depending on the size and nature of the auditee, as well as on the nature, functionality, complexity and the level of maturity of, and matters of significance to, the management system to be audited.

NOTE In certain cases, depending on the auditee’s structure or its activities, the audit programme might only consist of a single audit (e. a small project activity).

Other factors impacting the extent of an audit programme include the following:

— the objective, scope and duration of each audit and the number of audits to be conducted, including audit follow up, if applicable;

— the number, importance, complexity, similarity and locations of the activities to be audited;

— those factors influencing the effectiveness of the management system;

— applicable audit criteria, such as planned arrangements for the relevant management standards, legal and contractual requirements and other requirements to which the organization is committed;

— conclusions of previous internal or external audits;

— results of a previous audit programme review;

— language, cultural and social issues;

— the concerns of interested parties, such as customer complaints or non-compliance with legal requirements;

— significant changes to the auditee or its operations;

— availability of information and communication technologies to support audit activities, in particular the use of remote audit methods (see Clause B);

— the occurrence of internal and external events, such as product failures, information security leaks, health and safety incidents, criminal acts or environmental incidents.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

5 Implementing the audit programme

5.4 General

The person managing the audit programme should implement the audit programme by means of the following:

— communicating the pertinent parts of the audit programme to relevant parties and informing them periodically of its progress;

— defining objectives, scope and criteria for each individual audit;

— coordinating and scheduling audits and other activities relevant to the audit programme;

— ensuring the selection of audit teams with the necessary competence;

— providing necessary resources to the audit teams;

— ensuring the conduct of audits in accordance with the audit programme and within the agreed time frame;

— ensuring that audit activities are recorded and records are properly managed and maintained.

5.4 Defining the objectives, scope and criteria for an individual audit

Each individual audit should be based on documented audit objectives, scope and criteria. These should be defined by the person managing the audit programme and be consistent with the overall audit programme objectives.

The audit objectives define what is to be accomplished by the individual audit and may include the following:

— determination of the extent of conformity of the management system to be audited, or parts of it, with audit criteria;

— determination of the extent of conformity of activities, processes and products with the requirements and procedures of the management system;

— evaluation of the capability of the management system to ensure compliance with legal and contractual requirements and other requirements to which the organization is committed;

— evaluation of the effectiveness of the management system in meeting its specified objectives;

— identification of areas for potential improvement of the management system.

The audit scope should be consistent with the audit programme and audit objectives. It includes such factors as physical locations, organizational units, activities and processes to be audited, as well as the time period covered by the audit.

The audit criteria are used as a reference against which conformity is determined and may include applicable policies, procedures, standards, legal requirements, management system requirements, contractual requirements, sector codes of conduct or other planned arrangements.

In the event of any changes to the audit objectives, scope or criteria, the audit programme should be modified if necessary.

When two or more management systems of different disciplines are audited together (a combined audit), it is important that the audit objectives, scope and criteria are consistent with the objectives of the relevant audit programmes.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

5.4 Selecting the audit methods

The person managing the audit programme should select and determine the methods for effectively conducting an audit, depending on the defined audit objectives, scope and criteria.

NOTE Guidance on how to determine audit methods is given in Annex B.

Where two or more auditing organizations conduct a joint audit of the same auditee, the persons managing the different audit programmes should agree on the audit method and consider implications for resourcing and planning the audit. If an auditee operates two or more management systems of different disciplines, combined audits may be included in the audit programme.

5.4 Selecting the audit team members

The person managing the audit programme should appoint the members of the audit team, including the team leader and any technical experts needed for the specific audit.

An audit team should be selected, taking into account the competence needed to achieve the objectives of the individual audit within the defined scope. If there is only one auditor, the auditor should perform all applicable duties of an audit team leader.

NOTE Clause 7 contains guidance on determining the competence required for the audit team members and describes the processes for evaluating auditors.

In deciding the size and composition of the audit team for the specific audit, consideration should be given to the following:

a) the overall competence of the audit team needed to achieve audit objectives, taking into account audit scope and criteria;

b) complexity of the audit and if the audit is a combined or joint audit;

c) the audit methods that have been selected;

d) legal and contractual requirements and other requirements to which the organization is committed;

e) the need to ensure the independence of the audit team members from the activities to be audited and to avoid any conflict of interest [see principle e) in Clause 4];

f) the ability of the audit team members to interact effectively with the representatives of the auditee and to work together;

g) the language of the audit, and the auditee’s social and cultural characteristics. These issues may be addressed either by the auditor’s own skills or through the support of a technical expert.

To assure the overall competence of the audit team, the following steps should be performed:

— identification of the knowledge and skills needed to achieve the objectives of the audit;

— selection of the audit team members so that all of the necessary knowledge and skills are present in the audit team.

If all the necessary competence is not covered by the auditors in the audit team, technical experts with additional competence should be included in the team. Technical experts should operate under the direction of an auditor, but should not act as auditors.

Auditors-in-training may be included in the audit team, but should participate under the direction and guidance of an auditor.

Adjustments to the size and composition of the audit team may be necessary during the audit, i. if a conflict of interest or competence issue arises. If such a situation arises, it should be discussed with the appropriate parties (e. audit team leader, the person managing the audit programme, audit client or auditee) before any adjustments are made. Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

5.4 Managing and maintaining audit programme records

The person managing the audit programme should ensure that audit records are created, managed and maintained to demonstrate the implementation of the audit programme. Processes should be established to ensure that any confidentiality needs associated with the audit records are addressed.

Records should include the following:

a) records related to the audit programme, such as:

— documented audit programme objectives and extent;

— those addressing audit programme risks;

— reviews of the audit programme effectiveness;

b) records related to each individual audit, such as:

— audit plans and audit reports;

— nonconformity reports;

— corrective and preventive action reports;

— audit follow-up reports, if applicable;

c) records related to audit personnel covering topics such as:

— competence and performance evaluation of the audit team members;

— selection of audit teams and team members;

— maintenance and improvement of competence.

The form and level of detail of the records should demonstrate that the objectives of the audit programme have been achieved.

5 Monitoring the audit programme

The person managing the audit programme should monitor its implementation considering the need to:

a) evaluate conformity with audit programmes, schedules and audit objectives;

b) evaluate the performance of the audit team members;

c) evaluate the ability of the audit teams to implement the audit plan;

d) evaluate feedback from top management, auditees, auditors and other interested parties.

Some factors may determine the need to modify the audit programme, such as the following:

— audit findings;

— demonstrated level of management system effectiveness;

— changes to the client’s or the auditee’s management system;

— changes to standards, legal and contractual requirements and other requirements to which the organization is committed;

— change of supplier.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

5 Reviewing and improving the audit programme

The person managing the audit programme should review the audit programme to assess whether its objectives have been achieved. Lessons learned from the audit programme review should be used as inputs for the continual improvement process for the programme.

The audit programme review should consider the following:

a) results and trends from audit programme monitoring;

b) conformity with audit programme procedures;

c) evolving needs and expectations of interested parties;

d) audit programme records;

e) alternative or new auditing methods;

f) effectiveness of the measures to address the risks associated with the audit programme;

g) confidentiality and information security issues relating to the audit programme.

The person managing the audit programme should review the overall implementation of the audit programme, identify areas of improvement, amend the programme if necessary, and should also:

— review the continual professional development of auditors, in accordance with 7, 7 and 7;

— report the results of the audit programme review to the top management.

6 Performing an audit
6 General

This clause contains guidance on preparing and conducting audit activities as part of an audit programme. Figure 2 provides an overview of typical audit activities. The extent to which the provisions of this clause are applicable depends on the objectives and scope of the specific audit.

Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar ISO Store order #: 10-1259810/Downloaded: 2012-03- Single user licence only, copying and networking prohibited

Was this document helpful?

ISO 19011-2011 - ISO standards

Course: Occupational health ,safety and law (OHS2601)

61 Documents
Students shared 61 documents in this course
Was this document helpful?
Guidelines for auditing management
systems
Lignes directrices pour l’audit des systèmes de management
© ISO 2011
Reference number
ISO 19011:2011(E)
Second edition
2011-11-15
ISO
19011
INTERNATIONAL
STANDARD
Licensed to BSCIC Certifications Pvt. Ltd. / Ms. Makkar
ISO Store order #: 10-1259810/Downloaded: 2012-03-13
Single user licence only, copying and networking prohibited