Can a company be certified to ISO 19011?

No. ISO 19011 is a guidance standard for auditing management systems, so organizations cannot be certified to it. Organizations use it to organize audit programmes and individual audits, and auditors use it to guide how they conduct audits. Certification bodies work to the requirements of ISO/IEC 17021-1 instead.

No. ISO 19011 is a guidance standard for auditing management systems, so organizations cannot be certified to it. This is also why the current edition, ISO 19011:2026, published on 27 May 2026, has no transition period.

Organizations use ISO 19011 to organize their audit programmes and conduct individual audits, and auditors use it to guide how they plan, run and report audits. Certification is granted against management system standards such as ISO 9001, by certification bodies that work to the requirements of ISO/IEC 17021-1.

What individuals can hold is an auditor certification that recognises their competence, and existing auditor certificates remain valid after the 2026 revision. The Certified Management Systems Internal Auditor certification builds that competence on the basis of ISO 19011. Related questions: how ISO 19011 differs from ISO/IEC 17021-1 and why ISO 19011:2026 has no transition period. The wider changes are covered in our ISO 19011:2026 article.

Related Information

  • ISO 19011 is a guidance standard.
  • Organizations cannot be certified to ISO 19011.
  • Certification bodies work to ISO/IEC 17021-1.
  • Individuals can hold auditor certifications, which remain valid after the 2026 revision.

Expert Insight

QUOTE_PENDING_VALIDATION When a client asks to be certified to ISO 19011, the real need is usually a stronger internal audit function. That is worth investing in, and it shows up in every certification audit you face afterwards.

Browse all FAQs →

Full knowledge base

We use cookies to improve your experience

Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.