ISO 19011:2018
Competence and evaluation of auditors – ISO 19011:2018

ISO 19011:2018 7.3: Establishing auditor evaluation criteria

Guidance: evaluation criteria should include qualitative ones (for example behaviour, knowledge or skills shown during training or at work) and quantitative ones (for example how many years of education and work experience a person has, how many audits they have carried out, and how many hours of audit training they have had).

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 13 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 14004:2016 · 2 controls

  • 6.2.2 Establishing environmental objectives
  • 8.1.3 Establishing operational controls

ISO 27005:2022 · 2 controls

  • 6.4 Establishing and maintaining information security risk criteria
  • 6.4.2 Risk acceptance criteria

ISO 31000:2018 · 2 controls

  • 5.4.5 Establishing communication and consultation
  • 6.3.4 Defining risk criteria

ISO 37301:2021 · 2 controls

  • 8.2 Establishing controls and procedures
  • 8.3 Raising concerns

ISO/IEC 23894:2023 · 2 controls

  • 5.4.5 Establishing communication and consultation
  • 6.3.4 Defining risk criteria

ISO 22000:2018 · 1 control

  • 5.2.1 Establishing the food safety policy

ISO 37001:2016 · 1 control

  • 8.10 8.10 Investigating and dealing with bribery

ISO/IEC 27007:2020 · 1 control

  • 27007-7.2 Auditor Evaluation Criteria

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Competence and evaluation of auditors – ISO 19011:2018

Query this from an agent

The graph holds this control, the 13 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO 19011:2018 controls