What changed in ISO 19011:2026?

ISO 19011:2026, the fourth edition, was published on 27 May 2026 and replaces ISO 19011:2018. Its Foreword lists two main changes: expanded guidance on remote auditing methods, drawing on ISO/IEC TS 17012, and an expanded Annex A covering remote auditing methods and virtual locations. It also adds definition 3.4, remote auditing method.

ISO 19011:2026 is the fourth edition of the guidelines for auditing management systems. It was published on 27 May 2026, runs to 46 pages and replaces ISO 19011:2018, which is withdrawn.

The official Foreword lists two main changes. The first is expanded guidance on remote auditing methods, drawing on ISO/IEC TS 17012. The second is an expanded Annex A covering remote auditing methods and virtual locations. The text also adds definition 3.4, which describes a remote auditing method as a method used for conducting audit activities from any place other than the location of the auditee. Definition 3.6, audit scope, now includes physical and virtual locations, and clause 5.1 asks the audit programme to consider the application of technology such as digital tools, and information security and confidentiality requirements.

Some things stay as they were. The risk-based approach in clause 4.8 is one of seven auditing principles and was already a principle in 2018, and ISO 19011 remains a guidance standard. Our article on what ISO 19011:2026 changed for auditors sets the changes out role by role, running a remote or hybrid audit turns them into practice, and the transition period question has its own answer. If you lead internal audits, the Certified Management Systems Internal Auditor course covers the guideline in depth.

Related Information

  • Fourth edition, published 27 May 2026, 46 pages.
  • Replaces ISO 19011:2018, which is withdrawn.
  • Expanded remote auditing guidance drawing on ISO/IEC TS 17012.
  • Expanded Annex A on remote auditing methods and virtual locations.
  • New definition 3.4 of remote auditing method.

Expert Insight

QUOTE_PENDING_VALIDATION A short revision is easy to underestimate. The two changes look narrow on paper, yet they touch the scope statement, the audit plan and the programme rules at once. I would rather see a team change those three documents carefully than skim the whole standard again.

Browse all FAQs →

Full knowledge base

We use cookies to improve your experience

Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.