Skip to content

Audit Programme

What is Audit Programme?

A set of one or more audits planned for a specific time frame and directed towards a specific purpose. Audit programmes define the overall approach, scheduling, and resourcing for audit activities over a defined period.

Audit

Each of these is named in at least one of the same controls as audit programme. The number is how many controls name both.

What the standards actually require on audit programme

Requirements naming audit programme across 6 standards, quoted from the control text.

ISO 19011:202614 controls

Those managing the programme should make sure that: each audit is evaluated for whether it met its objectives; audit reports are reviewed and approved to confirm they satisfy the audit's scope and objectives;

iso-19011-2026::5.5.6 · Managing audit programme results →

ISO 19011:2018, 5.5.6 is followed with nothing added: the achievement of each audit's objectives is evaluated, reports are reviewed and approved for fulfilment of scope and objectives, the effectiveness of actions on findings is reviewed, reports are distribut...

iso-iec-27007-2020::5.5.6 · Managing audit programme results →
ISO 19011:201812 controls

Guidance: those managing the programme should ensure that the achievement of each audit's objectives is evaluated, that audit reports are reviewed and approved for fulfilment of scope and objectives, that the effectiveness of actions taken on findings is revie...

iso-19011-2018::5.5.6 · Managing audit programme results →

Beyond ISO/IEC 17021-1:2015, 9.1.3, the ISMS audit programme takes account of the controls the client has determined; the body's procedures do not presuppose a particular way of implementing an ISMS or a particular format for documentation or records and focus...

iso-iec-27006-1-2024::9.1.3 · Audit programme →

So that the audits required by sections 20N and 20Q of the Act focus on the providers presenting the greatest risk of non-compliance, a body must establish a documented, risk-based programme to monitor providers' compliance with the Part IIIA obligations incor...

australia-privacy-credit-reporting-code-2025::23(2)-(3) · Credit reporting bodies must run a documented risk-based programme to monitor providers' accuracy, security and correction obligations, with risk indicators, risk assessments, monitoring techniques and an audit programme →

A scheduled internal audit programme must include at least four audit dates spread over the year. How often each activity is audited depends on risk and past performance, and every activity of the food safety and quality systems is audited at least annually, i...

brcgs-global-standard-for-food-safety-issue-9::3.4.1 · 3.4.1 A scheduled internal audit programme of at least four dates a year covering every activity annually →

Questions people ask about audit programme

What is Audit Programme?
A set of one or more audits planned for a specific time frame and directed towards a specific purpose. Audit programmes define the overall approach, scheduling, and resourcing for audit activities over a defined period.
Why is Audit Programme important for compliance?
Audit Programme is a key concept in Audit. Understanding audit programme helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Audit Programme?
Audit Programme appears in the requirement text of ISO 19011:2026, ISO/IEC 27007:2020, ISO 19011:2018, ISO/IEC 27006-1:2024, Australia Privacy (Credit Reporting) Code 2025. Across these standards we have identified 46 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Audit Programme?
Explore our compliance framework pages to see how audit programme applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Audit Programme applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.