ISO/IEC 17021-1 sets requirements for certification bodies that audit and certify management systems. ISO 19011 is guidance for auditing management systems, and organizations cannot be certified to it. A certification body auditor works within ISO/IEC 17021-1 requirements and can draw on ISO 19011 for guidance on how to conduct audits.
ISO/IEC 17021-1 and ISO 19011 serve different purposes. ISO/IEC 17021-1 sets requirements for certification bodies, the organizations that audit and certify management systems. ISO 19011 is guidance for auditing management systems.
Because ISO 19011 is guidance, organizations cannot be certified to it, and its revisions come without a transition period. The current edition, ISO 19011:2026, was published on 27 May 2026 and expands the guidance on remote auditing methods. A certification body auditor works within the requirements of ISO/IEC 17021-1 and can draw on ISO 19011 for how to conduct audits, while internal audit teams use ISO 19011 to organize their audit programme and individual audits.
For a worked example with a business continuity standard, read how ISO 22301, ISO 19011 and ISO/IEC 17021-1 fit together. For the 2026 changes, see what ISO 19011:2026 means for auditors and whether a company can be certified to ISO 19011. If you audit occupational health and safety systems, the ISO 45001 Lead Auditor course covers the audit cycle in that context.
QUOTE_PENDING_VALIDATION In class I put it simply: ISO/IEC 17021-1 tells the certification body what it must do, and ISO 19011 helps any auditor do the audit well. Mixing them up is the confusion I hear most often from new lead auditors.
Turn occupational health and safety requirements into operational reality with an OH&S Management System aligned with ISO 45001. Covers hazard identification, risk processes, and governance integrated with business operations. For professionals responsible for implementation outcomes.
View courseThis course prepares participants to plan, conduct, close, and manage ISO 14001 conformity assessment audits in accordance with ISO/IEC 17021-1 requirements and ISO 19011 guidelines. Regulatory pressure on environmental performance has intensified across Europe, with supply chain due diligence legislation and corporate sustainability reporting requirements creating direct demand for credentialed EMS auditors. The course integrates evidence-based and risk-based auditing methods into a structured 5-day programme built around real audit scenarios. Abilene's trainers are active consultants who bring current audit programme management experience into every exercise, not classroom theory. Designed for auditors, EMS managers, compliance consultants, and technical experts responsible for ISO 14001 conformity.
View courseThis course prepares participants to plan, conduct, and close quality management system audits against ISO 9001, following ISO 19011 guidelines and ISO/IEC 17021-1 requirements. Certification bodies and large customers now expect audit findings backed by traceable evidence, risk-based sampling, and conclusions that hold up when the auditee disputes them. Participants run a full audit cycle on a case organization, from initiation and stage 1 through stage 2, nonconformity reporting, action plan evaluation, and audit program management. Abilene Academy trainers are practicing ISO auditors who bring findings and auditee objections from live certification audits. The course suits auditors, quality managers, consultants, and technical experts who lead or prepare for QMS audits.
View courseIt covers OH&S MS fundamentals and requirements, audit principles, preparation, conducting and closing an ISO 45001 audit, and managing an ISO 45001 audit programme. The exam is online, 3 hours, and available in English and French.
It is a four-day course that develops the expertise to perform OH&S management system audits against ISO 45001:2018, including planning, stage 1 and stage 2 execution, reporting, and follow-up using ISO 19011 guidance and the ISO/IEC 17021-1 certification process.
Auditors leading OH&S MS certification audits, plus managers, consultants, conformance owners, technical experts, and OH&S advisers preparing for ISO 45001 audits.
It combines lectures with real-case examples, a full case study with practical exercises (role play and presentations), review exercises, and a practice test similar to the certification exam. Participant numbers are limited.
Browse all FAQs →
Full knowledge base
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.