Skip to content

ISO 19011

What is ISO 19011?

The international standard that provides guidance on managing audit programmes, conducting internal or external audits, and evaluating the competence of auditors. ISO 19011 applies to all management system audits.

Audit

Terms that appear alongside iso 19011

Each of these is named in at least one of the same controls as iso 19011. The number is how many controls name both.

Frameworks that govern iso 19011

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on iso 19011

Requirements naming iso 19011 across 5 standards, quoted from the control text.

ISO 19011:201855 controls

Requirement defined in ISO 19011:2018, clause 7.1 (General). See licensed source for normative text. Implementation focus is to demonstrate conformity with the obligations of this clause through the artefacts listed in evidence_requirements.

iso-19011-2018::7.1 · General →
IATA Operational Safety Audit (IOSA) Standards Manual2 controls

The IATA Operational Safety Audit (IOSA) programme is an internationally recognised airline safety evaluation system designed to assess the operational management and control systems of airlines.

IATA-IOSA-Scope-Programme-Registry-RBI-AuditCycle · IATA IOSA - Programme Scope + Registry + Audit Cycle + Risk-Based IOSA + Accredited Audit Organizations →
ISO/IEC 27007:20202 controls

Establish an ISMS audit programme aligned with organisational objectives, risks, and ISO 19011 framework.

27007-5.1 · Establishing the Audit Programme →
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)1 control

NSS-17 + NSS-42-G require ongoing assurance + regulator interface + reporting + continuous improvement. Assurance activities: internal cyber security audit + management review + control effectiveness testing + penetration testing + red team exercises + ISO 270...

IAEA-NSS17-Assurance-Regulator-Inspection-Reporting-Improvement · IAEA NSS-17 - Assurance Activities + Regulator Interface + Inspection + Reporting + Information Sharing + Continuous Improvement →
NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production1 control

Conduct internal audits per ISO 19011 covering all QMS processes annually. Hold management reviews at planned intervals (minimum annually) per ISO 9001 Section 9.3 with mandatory AQAP 2110 inputs (NATO contract performance + GQAR observations + nonconformity t...

AQAP2110-8 · Internal Audit, Management Review, Corrective Action, CofC, and Continual Improvement →

Questions people ask about iso 19011

What is ISO 19011?
The international standard that provides guidance on managing audit programmes, conducting internal or external audits, and evaluating the competence of auditors. ISO 19011 applies to all management system audits.
Why is ISO 19011 important for compliance?
ISO 19011 is a key concept in Audit. Understanding iso 19011 helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address ISO 19011?
ISO 19011 appears in the requirement text of ISO 19011:2018, IATA Operational Safety Audit (IOSA) Standards Manual, ISO/IEC 27007:2020, IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1), NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production. Across these standards we have identified 61 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about ISO 19011?
Explore our compliance framework pages to see how iso 19011 applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how ISO 19011 applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.