To ensure that the ISO auditor adds value, it is worth considering the following points:
Before the ISO audit
- If we have questions and call, can we easily speak to our ISO auditor? Usually, when auditors are part of the certification body’s own staff, they are easier to contact. If the ISO certification body uses external collaborators, contacting them can be more difficult.
- What relevant experience do they have in the sector? How many similar companies have they certified, and which ones? Although large certification bodies usually have experience in all sectors, some auditors are particularly recognized in specific industries.
- How do they interpret the standard? Do we have access to their interpretation? Although any certification body must audit all the requirements of standards such as ISO 9001, ISO 14001, ISO 45001, Corporate Social Responsibility or Food Safety, it is useful to know whether the certification body interprets the standard in a bureaucratic way or in a way that adds value to the company.
- In which clauses of the standard are most nonconformities detected? Sometimes certification bodies publish reports explaining where they detect the most nonconformities, both in initial certification audits and in surveillance audits. This can help us understand which areas they consider most important.
- What experience does each of the auditors assigned to us have? Although all auditors are qualified to audit the sector, it can be useful to know their experience in order to assess their ability to provide value.
- How can we get in touch with ISO auditors? Reviewing the biographies of lead auditors and other auditors can be helpful, including their education, experience, audited companies and references. Social media platforms such as LinkedIn are a useful tool.
How an ISO auditor should conduct themselves during an audit
- How does the auditor make themselves available to staff to resolve doubts during the audit? Although the auditor must be able to complete the full audit, they should also be accessible to staff during the audit to answer any questions from the audited personnel.
- How does the auditor manage the detection of a deviation or nonconformity? A good auditor properly evidences the deviation and discusses it with the client. At the same time, they must assess whether it is an isolated issue or not. As far as possible, a nonconformity should add value and should not turn the management system into a meaningless bureaucratic system.