Your ISO certification audit is the moment of truth — months of preparation come down to 1-3 days of auditor scrutiny. With proper preparation, the certification audit is straightforward and predictable. This guide tells you exactly what to expect, what auditors look for, and how to prepare your team for first-time audit success.
Types of ISO Certification Audits
| Audit Type | When | Purpose | Duration |
|---|---|---|---|
| Stage 1 Audit | Initial certification | Documentation review and readiness assessment | 1-2 days (often remote) |
| Stage 2 Audit | 2-4 weeks after Stage 1 | On-site verification of QMS implementation | 1-3 days (on-site) |
| Surveillance Audit 1 | ~12 months after certification | Verify continued compliance | 1-2 days |
| Surveillance Audit 2 | ~24 months after certification | Verify sustained QMS performance | 1-2 days |
| Recertification Audit | ~33-36 months | Full re-audit, new 3-year certificate | 1-3 days |
Stage 1 Audit — Document Review
Stage 1 is a less intensive audit focused on whether your QMS documentation is ready for the implementation audit. The auditor reviews:
- Quality Manual (if maintained) and overall QMS structure
- Quality Policy, Quality Objectives, and Scope
- Key documented procedures (document control, internal audit, corrective action)
- Internal audit reports — confirming you have audited yourself before the certification audit
- Management review minutes — confirming top management engagement with QMS
- Risk assessment and treatment
- Site walkthrough (if on-site) to understand operations and audit logistics for Stage 2
Stage 1 typically results in observations or minor non-conformities that you address before Stage 2.
Stage 2 Audit — On-Site Implementation Verification
Stage 2 is the comprehensive audit where the auditor verifies that your QMS is actually implemented and effective in daily operations:
- Process audits — Auditor follows actual processes and checks against documented procedures
- Records examination — Reviewing records to verify processes are being followed
- Employee interviews — Asking employees about their work, processes, and quality awareness
- Site walkthrough — Observing actual operations, conditions, equipment, and product/service delivery
- Customer feedback review — How you collect, analyze, and act on customer feedback
- Non-conformity and corrective action review — Real examples of how you handle problems
- Continual improvement evidence — Initiatives that show systematic improvement over time
Types of Audit Findings
| Finding Type | What It Means | Impact |
|---|---|---|
| Major Non-Conformity | Significant gap that could cause QMS failure | Must be corrected before certification |
| Minor Non-Conformity | Isolated lapse not affecting overall QMS effectiveness | Corrective action required, but certification can proceed |
| Observation | Potential issue or improvement opportunity | No mandatory action, but recommended to address |
| Opportunity for Improvement (OFI) | Auditor's suggestion for QMS enhancement | Voluntary action |
10 Most Common Audit Findings
- Internal audits not conducted before Stage 2 — Required by ISO; missing is a major issue
- Management review records missing or incomplete — Top management must demonstrably engage with QMS
- Corrective actions don't address root cause — Surface-level fixes without root cause analysis
- Quality objectives not measurable or not tracked — Objectives must be SMART with regular performance review
- Calibration of measuring equipment overdue — Common in manufacturing environments
- Training records missing or outdated — Competency of key personnel must be documented
- Customer feedback collection inconsistent — Must show systematic feedback gathering and action
- Document version control issues — Outdated documents in use, version conflicts
- Non-conforming output procedure not followed — Issues identified but not properly recorded and resolved
- Risk register not updated — Risks identified at start but not reviewed periodically
Pre-Audit Preparation Checklist
1-2 weeks before your certification audit, verify:
- ✓ All documents are current — version numbers, approval dates, no obsolete documents in circulation
- ✓ Internal audit has been conducted and any findings closed
- ✓ Management review meeting held with documented minutes
- ✓ Risk register reviewed and updated
- ✓ Calibration certificates current for all measuring equipment
- ✓ Training records updated with recent training activities
- ✓ Customer complaints log up to date with corrective actions
- ✓ Records easily retrievable — auditor will ask to see specific records by date
- ✓ Escort plan — who walks the auditor through each area
- ✓ Daily debriefs scheduled — review findings each evening of multi-day audits
Preparing Your Team for the Audit
- Brief all employees — Auditors will randomly interview people; everyone should know about the QMS
- Coach key personnel — Department heads, quality manager, internal auditors should be ready to discuss their responsibilities
- Practice answers — Common auditor questions: "How do you ensure quality?", "What is the Quality Policy?", "How are customer complaints handled?"
- Don't fabricate answers — If unsure, say "I'll check our procedure" rather than guessing
- Show evidence — Records, reports, photos demonstrate implementation better than verbal claims
- Be honest about issues — Auditors respect honesty about problems being addressed; coverups create major findings
During the Audit — Best Practices
- Welcome the auditor warmly and provide a clean, dedicated workspace
- Provide internet, printing, and document access as needed
- Have the QMS documentation easily accessible (digital or printed)
- Arrange interviews and site visits per the auditor's plan
- Take notes on all findings during the closing meeting each day
- Don't argue — auditors document their findings; arguments make matters worse
- Ask clarifying questions if any finding is unclear
- Confirm corrective action timelines for any non-conformities
Elite Assured Stays With You Throughout the Audit
Unlike many consultants who disappear after documentation, Elite Assured's consultant is present throughout your certification audit — supporting you, helping clarify procedures with the auditor, and ensuring smooth audit flow. This is why our first-time pass rate is over 98%.