ISO 19011

from Wikipedia, the free encyclopedia
Logo of the German Institute for Standardization DIN EN ISO 19011
Area Quality management
title Guide to auditing management systems
Latest edition 2018-10
ISO 19011

The ISO 19011 is a guide to auditing of management systems, eg. B. of quality management systems ( ISO 9001 ), environmental management systems ( ISO 14001 ) and other management systems. The standard “is applicable to all organizations that carry out internal or external audits of management systems or are responsible for the management of an audit program.” External audits are supplier audits . It is up to each organization to decide whether and, if so, which parts of the guide are helpful, sensible and implementable for their own company.

In Germany the standard is published as DIN standard DIN EN ISO 19011 .

Audits that are carried out by certification bodies with the aim of certifying or maintaining certification of management systems are not regulated by ISO 19011 . (Requirements for these audits are specified in the ISO / IEC 17021 standard.)

contents

  • 1 areas of application
  • 2 Normative references
  • 3 terms
  • 4 audit principles
  • 5 Control of an audit program
  • 6 Perform an audit
  • 7 Competence and assessment of auditors

Essential content

Audit planning, audit execution and audit follow-up should be evaluated regularly with the aim of continuous improvement (CIP).

As a result, the available resources should primarily be used where processes and aspects of the management system are essential for the company's success. It is therefore a matter of setting priorities where there are significant risks in order to make more targeted and faster progress. Requirements for the competencies of the auditors should be determined, suitable auditors should be employed and trained. Independence, integrity, professional care and professional handling are well-known requirements for auditors; confidentiality is also mentioned as an essential criterion in the guidelines.

Literal quote: “Auditors should be careful in the use and protection of information acquired in the course of their duties. Audit information should not be used inappropriately for personal enrichment ... that is detrimental to the legitimate interests of the organization being audited. This concept includes the proper handling of sensitive, confidential information. "

The guideline also mentions “remote audit methods” for the first time. These are procedures that do not require the auditor to be physically present on site . This can range from checking documents before the actual start of the audit to telephone interviews with experts or sales representatives. It can, for. For example, it can be checked whether the sales representative can actually access the same management specification documents as specified in the management system.

Historical

The topic was originally published in 1990 in the three-part series of standards ISO 10011 under the title “Guidelines for the audit of quality assurance systems ...” and was transferred to the current ISO 19011 in 2002.

The standard was published in 2002 under the title “Guidelines for audits of quality management and / or environmental management systems”. In November 2011 a new version was issued with an extended scope, which now includes the auditing of all management systems.

history

year description
1990 ISO 10011-1 (1st edition)
2002 ISO 19011 (2nd edition)
2011 ISO 19011 (3rd edition)
2018 ISO 19011 (4th edition)

Web links