Day 2 focuses on audit principles and preparation, including evidence-based and risk-based auditing, audit initiation, and stage 1 audit activities.
Day 2 is dedicated to the principles and preparation activities that determine audit quality and efficiency. It bridges the understanding of ISO 37301 requirements from Day 1 with the on-site audit work covered on later days.The agenda begins with fundamental audit concepts and principles, reinforcing expectations for independence, objectivity, and professional judgment. It also addresses the impact of trends and technology in auditing, highlighting how audit methods and evidence sources continue to evolve.A core focus is evidence-based auditing. Participants learn how to identify, obtain, and evaluate audit evidence so conclusions are supported by verifiable information. Risk-based auditing is also emphasized, guiding auditors on how to prioritize effort based on compliance risk and potential impact.The day then moves into initiation of the audit process and stage 1 audit activities. Stage 1 audits are used to confirm scope, understand the CMS structure, and assess readiness for stage 2 activities. Proper preparation at this stage improves audit planning and reduces inefficiencies during execution.By the end of Day 2, participants have a clear framework for planning CMS audits, selecting appropriate techniques, and structuring audit activities in line with ISO 19011 guidance.
Strong audits are won or lost in preparation. Stage 1 work should clarify scope, risks, and evidence expectations so stage 2 effort is focused and productive.Risk-based thinking helps auditors spend time where it matters most, rather than treating all controls equally.
“Preparation and principles set the tone for the entire audit.”
Expert Trainer
Expert Trainer
Stage 1 focuses on initiating the audit and checking readiness against requirements. Stage 2 is where on-site audit activities are performed, including executing procedures, communicating with auditees, and using test plans.
ISO 19011 influences audits by emphasizing risk-based planning, sampling, evidence evaluation, and consistent reporting across the audit lifecycle.
It enables you to plan and conduct internal and external ISO 9001 audits and to lead audit teams using ISO 19011 guidance and ISO/IEC 17021-1 certification process concepts. It also builds competence in reporting and follow-up.
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.