ISO 19011 offers guidance on every step of auditing a management system or audit program, including:
- Defining program objectives
- Ensuring you understand the specific objectives you hope to achieve
- Making audit arrangements
- Assigning roles and responsibilities
- Defining number, scope, location, and duration of audits
- Determining criteria and specific checklists
- Establishing review procedures
- Completing the audits needed
- Planning and reviewing internal documents
- Collecting and verifying audit evidence
- Generating findings and preparing reports
- Communicating findings
- Reviewing the results and process
- Assessing results and trends
- Conforming with audit program procedures
- Evolving needs and expectations of interested parties
- Analyzing audit program records
- Examining effectiveness of the measures to address risks
- Ensuring confidentiality and information security
