Certifiable standard
ISO 9001 — Quality Management
The international standard for quality management systems: consistent processes, controlled documents, measured performance and evidenced improvement.
Standards › ISO 19011
Guidance standard — not certifiableISO 19011 — Auditing Management Systems
ISO 19011 is a guidance standard. This is a guidance standard. Organisations cannot hold accredited certification against it.
Guidance for auditing management systems: programmes, auditor competence, and how to conduct audits that find truth rather than tick boxes. Not certifiable.
What it covers
Managing an audit programme, planning and conducting individual audits, audit principles (integrity, fair presentation, professional care, confidentiality, independence, evidence), and evaluating auditor competence.
Who it is for
Anyone running internal audits for ISO 9001/14001/45001/27001 systems, and managers who receive audit reports and want them to mean something.
Key requirement themes
- Risk-based audit programmes covering the whole system over time
- Objective evidence, sampled fairly, traceably recorded
- Auditor independence from the activity audited
- Findings graded and followed to closed corrective action
- Auditor competence developed and evaluated
Theme-level description in our own words — the standard itself defines the requirements, and no standard text is reproduced here.
Construction-sector relevance
Site audits worth doing check the RAMS against the task actually running, the permit against the temporary works condition, the ITP against the pour — not the folder against the index. This guidance is how internal audit earns its keep.
Benefits
- Internal audits that find real gaps before an external auditor or an incident does
- Consistent method across auditors
- Defensible independence
Common gaps we find
- Auditing the paperwork, not the work
- The same person auditing their own area
- Findings raised but never closed
- No auditor training or evaluation
Typical documents
- Audit programme
- Audit plans and checklists
- Audit reports
- Corrective action tracking
- Auditor competence records
Typical evidence
- Reports with objective evidence cited
- Closed actions with verification
- Programme coverage over the cycle
Related standards
Certifiable standard
ISO 14001 — Environmental Management
The international standard for environmental management systems: identify your environmental aspects, control the significant ones, meet your legal obligations and improve.
Certifiable standard
ISO 45001 — Occupational Health & Safety
The international standard for occupational health and safety management systems. It replaced OHSAS 18001, which was withdrawn when migration ended in 2021.
Questions we are actually asked
Is there an ISO 19011 certificate?
Not for organisations — it is guidance. Individual auditor training courses exist, but the standard itself is a method reference, and that is how we use it.
Can a small firm have independent internal audits?
Yes, with care: cross-audit between managers, use a competent external auditor for the areas nobody is independent of, and record the independence decision.
How often should we audit?
The programme should cover every part of the system over a defined cycle — commonly annually — weighted to risk and past findings, not evenly spread for neatness.
Professional disclaimer: this page is orientation, not advice on your specific circumstances, and not a reproduction of any standard. Implementation support, templates and platform tools do not confer certification or legal compliance; certification decisions rest solely with independent certification bodies, and legal duties apply regardless of certification.