Ntroduction: Table 1 - Different Types of Audits
Ntroduction: Table 1 - Different Types of Audits
Since the second edition of this document was published in 2011, a number of new
management system standards have been published, many of which have a common structure,
identical core requirements and common terms and core definitions. As a result, there is a need
to consider a broader approach to management system auditing, as well as providing guidance
that is more generic. Audit results can provide input to the analysis aspect of business planning,
and can contribute to the identification of improvement needs and activities.
An audit can be conducted against a range of audit criteria, separately or in combination,
including but not limited to:
This document provides guidance for all sizes and types of organizations and audits of varying
scopes and scales, including those conducted by large audit teams, typically of larger
organizations, and those by single auditors, whether in large or small organizations. This
guidance should be adapted as appropriate to the scope, complexity and scale of the audit
programme.
This document concentrates on internal audits (first party) and audits conducted by
organizations on their external providers and other external interested parties (second party).
This document can also be useful for provides requirements for auditing management systems
for third party certification; this document can provide useful additional guidance (see Table 1).
Table 1 — Different types of audits
1 Scope
This document provides guidance on auditing management systems, including the principles of
auditing, managing an audit programme and conducting management system audits, as well as
guidance on the evaluation of competence of individuals involved in the audit process. These
activities include the individual(s) managing the audit programme, auditors and audit teams.
It is applicable to all organizations that need to plan and conduct internal or external audits of
management systems or manage an audit programme.
The application of this document to other types of audits is possible, provided that special
consideration is given to the specific competence needed.
2 Normative references