ISO 19011:2026

International

v2026

4 domains

63 controls

Verified

ISO 19011:2026 is a compliance framework from International with 4 domains and 63 controls. The largest domains are Conducting an audit – ISO 19011:2026 (26 controls), Managing an audit programme – ISO 19011:2026 (18 controls), Competence and evaluation of auditors – ISO 19011:2026 (11 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (4)

Competence and evaluation of auditors – ISO 19011:2026

11 controls

Controls in the Competence and evaluation of auditors – ISO 19011:2026 domain of ISO 19011:2026 — 10 controls
Code	Title	Description
iso-19011-2026::7.1	General	Confidence in the audit process and its ability to achieve its objectives depends on the competence of the individuals i...
iso-19011-2026::7.2.1	General	In determining the competence needed to perform or participate in an audit, the auditor's knowledge and skills related t...
iso-19011-2026::7.2.2	Personal behaviour	Auditors should possess the attributes that enable them to act in accordance with the principles of auditing and should...
iso-19011-2026::7.2.3	Knowledge and skills	Auditors should have the knowledge and skills to achieve the intended results of their audits, combining generic compete...
iso-19011-2026::7.2.4	Achieving auditor competence	Auditor competence can be acquired by a combination of successfully completing training programmes covering generic audi...
iso-19011-2026::7.2.5	Achieving audit team leader competence	An audit team leader should have acquired additional audit experience to develop the leadership competence of 7.2.3.4, g...
iso-19011-2026::7.3	Establishing the auditor evaluation criteria	The criteria used to evaluate auditors should be qualitative, such as demonstrated behaviour, knowledge or performance o...
iso-19011-2026::7.4	Selecting the appropriate auditor evaluation method	Evaluation should use two or more of the methods in Table 2, which represent a range of options that do not always apply...
iso-19011-2026::7.5	Conducting the auditor evaluation	The information collected about the auditor under evaluation should be compared against the criteria set in 7.2.3, and w...
iso-19011-2026::7.6	Maintaining and improving auditor competence	Auditors and audit team leaders should continually improve their competence, maintaining it through regular participatio...

Conducting an audit – ISO 19011:2026

26 controls

Controls in the Conducting an audit – ISO 19011:2026 domain of ISO 19011:2026 — 22 controls
Code	Title	Description
iso-19011-2026::6.1	General	Clause 6 gives guidance on preparing and conducting a specific audit as part of an audit programme, with Figure 1 giving...
iso-19011-2026::6.2.1	General	Responsibility for conducting the audit should remain with the assigned audit team leader until the audit is completed,...
iso-19011-2026::6.2.2	Establishing contact with the auditee	The audit team leader should ensure that contact is made with the auditee within an appropriate time frame to confirm co...
iso-19011-2026::6.2.3	Determining the feasibility of the audit	The feasibility of the audit should be determined to give reasonable confidence that the objectives can be achieved, con...
iso-19011-2026::6.3.1	Performing the review of documented information	The documented information for the relevant management system should be reviewed by the audit team members to gather inf...
iso-19011-2026::6.3.2	Audit planning	The audit team leader should adopt a risk-based approach to planning based on the audit programme and the auditee's docu...
iso-19011-2026::6.3.3	Assigning work to the audit team	The audit team leader, in consultation with the team, should assign each member responsibility for auditing specific pro...
iso-19011-2026::6.3.4	Preparing documented information for the audit	The audit team members should collect and review the information relevant to their assignments and prepare documented in...
iso-19011-2026::6.4.1	General	Auditing activities are normally conducted in the defined sequence of Figure 1, which can be varied to suit the circumst...
iso-19011-2026::6.4.10	Conducting the closing meeting	A closing meeting chaired by the audit team leader and attended by the auditee's top management and, as applicable, thos...
iso-19011-2026::6.4.2	Assigning the roles and responsibilities of guides and observers	Guides and observers can accompany the audit team with the approvals of the team leader, audit client or auditee as requ...
iso-19011-2026::6.4.3	Conducting the opening meeting	The opening meeting confirms the agreement of all participants to the audit plan, introduces the audit team and their ro...
iso-19011-2026::6.4.4	Communicating during the audit	During the audit formal communication arrangements can be needed within the team and with the auditee, the audit client...
iso-19011-2026::6.4.5	Providing access to audit information	The auditing methods chosen depend on the defined objectives, scope and criteria and on duration and location, where the...
iso-19011-2026::6.4.6	Reviewing documented information while conducting the audit	The auditee's relevant documented information should be reviewed to determine the conformity of the system, as far as do...
iso-19011-2026::6.4.7	Collecting and verifying information	During the audit, information relevant to the objectives, scope and criteria, including information on interfaces among...
iso-19011-2026::6.4.8	Generating the audit findings	Audit evidence should be evaluated against the audit criteria to determine findings, which can indicate conformity or no...
iso-19011-2026::6.4.9	Determining the audit conclusions	Before the closing meeting the audit team should confer to review the findings and other information collected against t...
iso-19011-2026::6.5.1	Preparing the audit report	The audit team leader should report the conclusions in accordance with the programme in a report that is a complete, acc...
iso-19011-2026::6.5.2	Distributing the audit report	The audit report should be issued within an agreed period, with reasons communicated to the auditee and the programme ma...
iso-19011-2026::6.6	Completing the audit	The audit is completed when all planned activities have been carried out or as otherwise agreed with the audit client, f...
iso-19011-2026::6.7	Conducting the audit follow-up	The outcome of the audit can, depending on the objectives, indicate the need for corrections, corrective actions or oppo...

Managing an audit programme – ISO 19011:2026

18 controls

Controls in the Managing an audit programme – ISO 19011:2026 domain of ISO 19011:2026 — 16 controls
Code	Title	Description
iso-19011-2026::5.1	General	An audit programme should be established, covering one or more management system standards or other requirements, separa...
iso-19011-2026::5.2	Establishing audit programme objectives	The audit client should ensure that audit programme objectives are established to direct the planning and conducting of...
iso-19011-2026::5.3	Determining and evaluating audit programme risks and opportunities	Risks and opportunities related to the auditee's context can be associated with an audit programme and affect the achiev...
iso-19011-2026::5.4.1	Roles and responsibilities of individual(s) managing the audit programme	The individuals managing the audit programme should ensure its integrity and that no undue influence is exerted over it;...
iso-19011-2026::5.4.2	Competence of individual(s) managing the audit programme	The individuals managing the audit programme should have the competence to manage it effectively and efficiently, includ...
iso-19011-2026::5.4.3	Establishing the scope of the audit programme	The individuals managing the audit programme should determine its scope, which can vary with the information the client...
iso-19011-2026::5.4.4	Determining audit programme resources	When determining resources for the audit programme, the individuals managing it should consider the financial and time r...
iso-19011-2026::5.5.1	General	Once the programme has been established and its resources determined, the individuals managing it should implement the o...
iso-19011-2026::5.5.2	Defining the objectives, scope and criteria for an individual audit	Each individual audit should be based on defined objectives, scope and criteria consistent with the overall programme ob...
iso-19011-2026::5.5.3	Selecting and determining auditing methods	The individuals managing the audit programme should select and determine the methods for conducting an audit effectively...
iso-19011-2026::5.5.4	Selecting audit team members	The individuals managing the audit programme should appoint the audit team members, including the team leader and any te...
iso-19011-2026::5.5.5	Assigning responsibility for an individual audit to the audit team leader	The individuals managing the audit programme should assign responsibility for conducting the individual audit to an audi...
iso-19011-2026::5.5.6	Managing audit programme results	The individuals managing the audit programme should ensure that the achievement of the objectives of each audit is evalu...
iso-19011-2026::5.5.7	Managing audit related records	The individuals managing the audit programme should ensure that audit records are generated, managed and retained to dem...
iso-19011-2026::5.6	Monitoring the audit programme	The individuals managing the audit programme should ensure evaluation of whether audit schedules are being met and progr...
iso-19011-2026::5.7	Reviewing and improving the audit programme	The individuals managing the audit programme and the audit client should review the programme to assess whether its obje...

Principles of auditing – ISO 19011:2026

8 controls

Controls in the Principles of auditing – ISO 19011:2026 domain of ISO 19011:2026 — 8 controls
Code	Title	Description
iso-19011-2026::4.1	General	Auditing relies on a number of principles that should make the audit an effective and reliable tool in support of manage...
iso-19011-2026::4.2	Integrity	Integrity is the foundation of professionalism: auditors and the individuals managing an audit programme should perform...
iso-19011-2026::4.3	Fair presentation	Fair presentation is the obligation to report truthfully and accurately: audit findings, conclusions and reports should...
iso-19011-2026::4.4	Due professional care	Due professional care is the application of diligence and judgement in auditing: auditors should exercise due care irres...
iso-19011-2026::4.5	Confidentiality	Confidentiality is security and privacy of information: auditors should exercise discretion in the use and protection of...
iso-19011-2026::4.6	Independence	Independence is the basis for the impartiality of the audit and the objectivity of the audit conclusions: auditors shoul...
iso-19011-2026::4.7	Evidence-based approach	The evidence-based approach is the rational method for reaching reliable and reproducible audit conclusions in a systema...
iso-19011-2026::4.8	Risk-based approach	The risk-based approach is an audit approach that considers risks and opportunities, and it should substantively influen...

What is ISO 19011:2026 and who does it apply to?

ISO 19011:2026 is a compliance framework from International with 4 domains and 63 controls. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 19011:2026 actually require?

ISO 19011:2026 has 63 controls organised across 4 domains. The largest domains are Conducting an audit – ISO 19011:2026 (26 controls), Managing an audit programme – ISO 19011:2026 (18 controls), Competence and evaluation of auditors – ISO 19011:2026 (11 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 19011:2026 do I already cover?

ISO 19011:2026 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement ISO 19011:2026?

Start your ISO 19011:2026 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 19011:2026 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 63 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 692 frameworks.

Get Started Free →

Free forever — no credit card required