ISO 19011 provides guidance on auditing management systems, managing an audit program and conducting management system audits, as well as guidance on the evaluation of competence of individuals involved in the audit process and understanding of how to audit an API specification. ISO 19011 is applicable to all organizations that need to conduct internal or external audits of management systems or manage an audit program. ISO 19011 is the standard that sets forth guidelines for auditing management systems. The standard contains guidance on managing an audit program, the principles of auditing, and the evaluation of individuals responsible for managing the audit programs. An audit program consists of the arrangements made to complete all of the individual audits needed to achieve a specific purpose. ISO 19011 provides valuable information on how to improve an audit program systematically, just as other departments in an organization are expected to improve. One aspect of such improvement is continuously ensuring the audit program objectives are in line with the management system policies and objectives. Organizations, in pushing for auditing improvements, should consider the needs of customers and other interested parties. The course will feature:

• Defining program objectives
• Ensuring you understand the specific objectives you hope to achieve
• Making audit arrangements
• Assigning roles and responsibilities
• Defining number, scope, location, and duration of audits
• Determining criteria and specific checklists
• Establishing review procedures
• Completing the audits needed
• Planning and reviewing internal documents
• Collecting and verifying audit evidence
• Generating findings and preparing reports
• Communicating findings
• Reviewing the results and process
• Assessing results and trends
• Conforming with audit program procedures
• Evolving needs and expectations of interested parties
• Analyzing audit program records
• Examining effectiveness of the measures to address risks
• Ensuring confidentiality and information security.