An audit rarely fails because of the checklist. It fails because the programme does not reflect risk, because the questions only test whether a document exists, and because nobody follows the findings once the report is out. These articles cover the audit chain from programme planning under ISO 19011 through to evidence that a corrective action actually worked — with clause references and with experience from both sides of the audit.
Management review asks for trends, not figures — and a trend only exists if findings were captured on the same basis for years. The five fields that have to exist at the moment of capture, and the return path from review back into audit planning.
Read article →Clause 9 barely changes - the work sits in clause mapping, question catalog versioning and evidencing quality culture. Sourced, with a concrete approach.
Read article →What 9.2.2 requires item by item: three factors rather than four, no annual obligation, and evidence of both programme implementation and results. Plus why no standard gives you an effort figure for an internal audit — ISO 19011 included.
Read article →Why a question catalog follows the process rather than the clause numbering, what ISO 19011 actually contributes — collecting and verifying in 6.4.7, findings in 6.4.8 — and which edition of the standard is now in force.
Read article →A clause-by-clause checklist for ISO 9001 §9.2 internal audits — audit programme, risk-based selection, auditor competence, evidence, and closing findings without the generic fluff.
Read article →The certification cycle under ISO/IEC 17021-1:2015, clause by clause: stage 1, stage 2, two surveillance audits, recertification. Why 'valid three years with annual surveillance' is wrong three times over, what changed when the IAF closed on 1 January 2026, and how to prepare.
Read article →