Quality management
ISO 19011: Guidelines for auditing management systems
The reference guide for how audits should be planned, conducted and reported, including the second-party supplier audits buyers commission.
01Purpose
ISO 19011 provides guidance on auditing management systems: principles of auditing, managing an audit programme and conducting audits, as well as evaluating the competence of auditors.
02Scope
It applies to all organisations that plan and conduct internal or external audits, including second-party audits of suppliers. It is a guidance standard, not a certifiable requirement.
03Main requirements
- Principles: integrity, fair presentation, due professional care, confidentiality, independence, evidence-based approach and risk-based approach
- Establishing and managing an audit programme
- Audit objectives, scope and criteria
- Preparing audit activities and checklists
- Collecting and verifying evidence, generating findings
- Audit conclusions, reporting and follow-up
- Auditor competence and evaluation
04Typical applications and industries
ISO 19011 is the methodological basis of QUALITAS TR supplier audits and of most buyers' supplier audit programmes.
05Audit and inspection considerations
- Are audit criteria clear and agreed before the audit?
- Is evidence sampled and recorded objectively?
- Are findings graded consistently?
06Common nonconformities
- Audit checklists not aligned with the audit objective
- Findings without objective evidence
- No follow-up of corrective actions
- Auditor lacking process knowledge
07How QUALITAS TR can support
Our supplier audit methodology follows ISO 19011 principles, with technical process expertise added to the management system review.