The document discusses the revision of ISO 19011 and the development of ISO 17021-2 regarding auditor competence and guidance. It notes that ISO 19011 is being revised to include additional competence criteria and approaches like process-based auditing. ISO 17021-2 aims to create requirements for auditor competencies, which some argue is difficult but important to define. Overall, there is consensus that good auditors need both auditing knowledge and soft skills, and these standards will shape expectations of auditor competence going forward.

1. environmental management in the ISO difficult to define doesn’t mean we CQP, a quality consultant, says: “Both
14000 series before the decision was should rule it out saying: ‘We can’t de- skillsets are equally important. To be an
made to merge the documents and fine competency, so we can’t assess it effective auditor you need to under-
create one piece of auditor guidance: and we’re not going to have a standard.’ stand standards and business but also
ISO 19011. As an industry we have to look at how communicate well. Auditors need to
Published in 2002, ISO 19011 is auditors demonstrate their capability make observations that lead to effective
an important document for internal, whether that should be through qualifi- changes for their clients and the way
external and supply chain auditors and cations, training, experience, references they communicate can do a lot towards
is now going through a long-overdue or an assessor watching audits.” creating a constructive relationship.”
revision. Charles Corrie, business pro- While the debate as to how to assess As the auditing profession looks
gramme manager at BSI and secretary auditors’ skills will no doubt continue, to the future one thing is certain; the
of ISO TC/176, explains: “ISO 19011 there appears to be consensus that development of ISO 17021-2 and the
worked well when there were only two good auditors must possess a balanced revision of ISO 19011 will shape the
ISO management systems standards combination of auditing knowledge expectations and understanding of
but now there are seven or eight, hav- and soft skills. David Straker, MCQI competency for years to come qw
ing only two paragraphs of competence
criteria isn’t good enough. This has led
the drive to revive ISO 19011 with the
main work focused on bringing in ad- UsefUl links
ditional competence criteria.”
The guidelines are also being Auditing Practices Group
developed to include more modern Created by ISO/TC 176 the APG publishes free guidance papers
approaches such as process-based online for auditors of ISO 9001
auditing, which wasn’t included in the www.bit.ly/ISO-APG
first issue, and a section dedicated to
audit risk – the failure of the auditing CQI
body to perform the audit correctly. Offers auditing training courses and qualifications. The Body of
ISO 19011, however, will remain purely Quality Knowledge is also a valuable resource for auditors
guidance for auditors and not a require- www.thecqi.org
ments standard. This is where ISO
17021-2 comes in. Due for publication INform
in December 2010, ISO 17021-2 aims IRCA’s quarterly e-zine includes useful advice and updates on all
to create a framework for the compe- aspects of auditing and management systems standards
tencies needed to ensure an auditor is www.irca.org/INform
capable. Unlike ISO 19011, the stand- www.twitter.com/IRCA_INform
ard is being developed by ISO’s policy
development committee on conformity
International Accreditation Forum
Produces auditing guidance and requirements for organisations
assessment and will apply only to third-
www.iaf.nu
party auditors.
The standard, which follows on from
International Register of Certificated Auditors
ISO 17021 – the requirements standard
Global certification body IRCA offers auditors professional
for auditing bodies – has caused con-
recognition in a variety of management systems sectors, including
siderable debate within the profession
environment and information technology
in its definition of competence. Paul www.irca.org
Simpson, MCQI CQP, technical man- www.linkedin.co.uk/IRCA
ager at the CQI, says: “ISO 17021-2 is
trying to standardise certification from Institute of Internal Auditors
the point of view of putting in lines of The UK’s only professional body exclusively focused on internal
requirements. It includes requirements auditing. The IIA hosts training courses and events and global audit
for how to plan an audit, ensuring the practice guides can also be downloaded from its website
competence of auditors and putting in www.iia.org.uk
place a system that says they’re com-
petent, but it doesn’t actually help our The Auditor
understanding of what competence is.” Online edition of the bi-monthly newsletter includes practical
Others argue that such worries articles on performing audits and topical debates
shouldn’t stop the standard’s develop- www.theauditoronline.com
ment. Nina says: “Something being
www.thecqi.org qw | APRIL 2010 | 39
p36-39_PeopleQWApril.indd 39 18/3/10 14:33:06