EN ISO 19011:2018 (ISO 19011:2018) provides practical guidance for auditing management systems. It covers the principles of auditing, establishing and managing an audit programme, conducting individual audits (internal or external), and evaluating the competence of people involved in the audit process (audit programme managers, auditors and audit teams). The document is applicable to all organizations that need to plan and perform management‑system audits and can be adapted to other types of audits with attention to specific competence needs.
Key topics and technical requirements
- Principles of auditing - foundation for credible, objective and risk‑based auditing.
- Managing an audit programme - defining objectives, scope, resources, roles and responsibilities; monitoring, review and continual improvement of the programme.
- Audit planning and conduct - feasibility, planning, opening/closing meetings, information collection, evidence verification, generating findings and reaching conclusions.
- Audit methods and reporting - selecting audit methods, preparing and distributing audit reports, and managing follow‑up actions.
- Competence and evaluation - defining auditor knowledge, skills and personal behaviour; criteria and methods for assessing and maintaining competence of auditors and audit team leaders.
- Risk‑based approach - integration of risk and opportunity considerations into audit programme design and audit planning.
These topics correspond to the standard’s main clauses (principles, programme management, conducting audits, competence and evaluation).
Practical applications - who uses ISO 19011:2018
- Internal auditors and audit teams - to standardize audit planning, evidence collection and reporting.
- Audit programme managers - to design, resource and improve organization‑wide audit programmes.
- External auditors and certification bodies - for consistent audit approach across management‑system standards.
- Top management and compliance/assurance functions - to evaluate audit results, manage audit risks and demonstrate governance.
- Consultants and trainers - to develop training, competency frameworks and audit tools.
Applicable across sectors and management systems (quality, environmental, health & safety, information security), ISO 19011:2018 supports reliable internal and external audits and helps organizations meet assurance and certification expectations.
Related standards (typical)
- ISO management‑system standards such as ISO 9001 (quality) and ISO 14001 (environment) - ISO 19011 supports auditing these systems.
- National/adopted versions: EN ISO 19011:2018 (European adoption) - identical text approved by CEN.
Using ISO 19011:2018 helps organizations implement consistent, competence‑based, risk‑aware auditing practices that improve management‑system performance and trust in audit outcomes.