Section 3 - ISO 19011

Section 3 ISO 19011: General information on managing audit programs

An audit program may include one or more audits, depending upon the size, nature and complexity of the organization to be audited. These audits may have a variety of objectives and may also include joint or combined audits.

When a quality management system and an environmental management system are audited together, this is termed a combined audit.

When two or more auditing organizations cooperate to audit a single auditee, this is termed a joint audit.

An audit program also includes all activities necessary for planning and organizing the types and number of audits, and for providing resources to conduct them effectively and efficiently within the specified time frames.

An organization may establish more than one audit program. The organization’s top management should grant the authority for managing the audit program. Those assigned the authority for managing the audit program should:

a) establish, implement, monitor, review and improve the audit program, and

b) identify the necessary resources and ensure they are provided.

If an organization to be audited operates both quality management and environmental management systems, combined audits may be included in the audit program. In such a case, special attention should be paid to the competence of the audit team.

Auditing an environmental management system requires specific knowledge of environmental aspects and impacts. Although a quality system auditor may have the required auditor skills, they should receive specific training and evaluation for environmental issues. The same can be said for environmental auditors moving into the quality auditing realm.

Two or more auditing organizations may cooperate, as part of their audit programs, to conduct a joint audit. In such a case, special attention should be paid to the division of responsibilities, the provision of any additional resources, the competence of the audit team and the appropriate procedures. Agreement on these should be reached before the audit commences. A best practice is to have a lead auditor controlling the audit process.

Section 1. ISO 19011 Scope reference and definitions

Section 2. ISO 19011 Principles of auditing

Section 3. ISO 19011 Managing an audit program

Section 4. ISO 19011 Audit program implementation

Section 5. ISO 19011 Audit activities

Section 6. ISO 19011 Preparing for onsite activities

Section 7. ISO 19011 Conducting onsite activities

Section 8. ISO 19011 What the auditor is looking for

Section 9  ISO 19011 Audit reporting

Section 10. ISO 19011 Audit techniques

Section 11. ISO 19011 Audit path

Section 12. ISO 19011 Effective communications

Section 13. ISO 19011 Sampling

Section 14. ISO 19011 Audit completion and follow-up

Section 15. ISO 19011 Competence and evaluation of auditors

This represents a summary of the section in ISO 19011:2002. It's suggested that you obtain an copy of "ISO 19011 Explanations and Definitions".