The future of management system auditing is not about checking more requirements. It is about understanding how systems, risks, processes, and performance interact.
The publication of ISO 19011:2026 marks an important development in management system auditing. As organizations increasingly integrate quality, environmental, and occupational health and safety management systems, auditors must be capable of evaluating more than individual standards.
The latest revision of ISO 19011 strengthens guidance on audit planning, remote auditing methods, auditor competence, emerging technologies, and the management of combined audits.
For professionals auditing ISO 9001, ISO 14001, and ISO 45001, these developments raise an important question:
Are your auditing skills keeping pace with the changing expectations of integrated management system auditing?
ISO 19011 provides internationally recognized guidance for auditing management systems. It addresses audit principles, audit program management, conducting audits, and evaluating auditor competence.
The 2026 edition replaces ISO 19011:2018 and introduces several important developments.
One of the most significant developments in ISO 19011:2026 is the expanded guidance on remote auditing methods.
The revision incorporates additional guidance aligned with ISO/IEC TS 17012:2024, recognizing that auditing is no longer limited to physical workplaces.
Organizations increasingly operate through remote teams, digital platforms, outsourced services, and virtual environments.
Auditors must therefore consider:
Whether remote auditing methods can achieve the audit objectives.
How to obtain reliable and verifiable evidence remotely.
Information security and confidentiality risks.
The suitability of technology used during an audit.
Potential limitations of remote observations and interviews.
What does this mean for IMS Lead Auditors?
Consider an organization operating across several countries with centralized quality management, outsourced environmental services, and remotely managed occupational health and safety processes.
An integrated audit may require a combination of on-site and remote auditing methods.
The lead auditor must determine whether the selected methods provide sufficient evidence across all applicable management system disciplines.
Simply conducting video interviews is not enough. The auditor must evaluate whether the audit objectives can be achieved.
The risk-based approach was already established in ISO 19011:2018. The 2026 edition continues to emphasize its application across audit program planning, implementation, and individual audits.
This is particularly important for integrated management systems.
An organization may have effective quality controls while experiencing significant environmental risks or occupational health and safety concerns.
Treating every process and every standard equally can result in an inefficient audit.
A competent IMS Lead Auditor should consider:
The significance of risks and opportunities across different disciplines.
Previous audit findings and recurring nonconformities.
Process performance and management system maturity.
Changes in organizational operations.
The effectiveness of controls shared between management systems.
Example:
A manufacturing organization operates an integrated management system covering ISO 9001, ISO 14001, and ISO 45001.
A recent production change has increased customer complaints, generated additional waste, and introduced new workplace hazards.
Instead of auditing quality, environmental, and safety management separately, an integrated auditor can examine the production change as a connected process.
This approach can reveal how weaknesses in change management affect multiple management system objectives.
The real value of an integrated audit is identifying relationships that separate audits may overlook.
ISO 19011:2026 introduces explicit consideration of emerging technologies within auditor competence guidance, including artificial intelligence-based evaluation tools.
This is an important development for the auditing profession.
Technology can support activities such as reviewing large datasets, analyzing trends, identifying unusual patterns, and organizing audit evidence.
But technology does not eliminate the need for professional judgment.
Auditors must understand the limitations of the tools they use and assess the reliability of the information produced.
For example, an artificial intelligence tool may identify inconsistencies in inspection records. The auditor must still establish whether those inconsistencies represent valid audit evidence and whether a requirement has not been fulfilled.
For IMS Lead Auditors, digital competence must be combined with technical knowledge, critical thinking, and professional judgment.
Leading an integrated management system audit requires more than understanding individual ISO standards.
ISO 19011:2026 continues to address the competence needed to manage audit teams, communicate with top management, evaluate evidence, and reach reliable audit conclusions.
The guidance also addresses competence when auditing multiple management system disciplines.
An IMS Lead Auditor should be capable of:
Coordinating auditors with different technical backgrounds.
Assigning audit activities according to team competence.
Understanding interactions between management systems.
Recognizing the limits of individual auditor competence.
Managing disagreements and uncertainties.
Leading the audit team toward evidence-based conclusions.
A lead auditor is not simply the most experienced person on the audit team. Effective leadership requires the ability to coordinate people, manage the audit process, and maintain the integrity of audit conclusions.
One of the most practical aspects of ISO 19011:2026 for integrated management system auditors is the guidance on findings related to multiple audit criteria.
A single organizational weakness can affect several management system requirements.
Consider a company that has failed to adequately evaluate the consequences of a major operational change.
The same weakness may affect:
Product and service quality under ISO 9001.
Environmental controls under ISO 14001.
Occupational health and safety risk management under ISO 45001.
Rather than automatically raising unrelated findings, the auditor should consider the relationships between the applicable audit criteria.
Depending on the agreed audit arrangements, findings may be documented separately or combined with references to multiple criteria.
This requires an understanding of the requirements of each applicable standard.
Integrated auditing does not mean combining three checklists into one. It means evaluating how management system processes interact and how evidence relates to multiple requirements.
Many organizations have adopted integrated management systems to reduce duplication, improve efficiency, and establish more consistent management practices.
Yet their audit programs sometimes remain fragmented.
Quality auditors examine quality processes. Environmental auditors focus on environmental controls. Occupational health and safety auditors examine workplace hazards.
Each audit may identify valid findings, but the organization can still miss wider system weaknesses.
For example, ineffective competence management may influence product quality, environmental performance, and worker safety simultaneously.
An integrated auditor can evaluate the competence management process once while examining the relevant requirements and evidence across all three disciplines.
This does not remove the need for discipline-specific expertise. Instead, it requires auditors to understand both individual requirements and their relationships.
ISO 19011:2026 recognizes the application of audit guidance to combined audits and integrated management systems.
A combined audit involves auditing two or more management systems together at the same organization.
An integrated management system audit examines a management system in which different disciplines have been integrated into a unified management approach.
Although these concepts are closely related, they are not identical.
An organization may conduct a combined audit without having fully integrated its management systems.
For an IMS Lead Auditor, the challenge is to understand the actual level of integration rather than assuming that holding multiple ISO certifications means the systems are effectively integrated.
The changing auditing landscape highlights the importance of developing a broader combination of technical and leadership capabilities.
| Core competency | Why it matters |
|---|---|
| ISO 9001, ISO 14001, and ISO 45001 knowledge | Understand discipline-specific requirements and shared management processes |
| ISO 19011:2026 auditing guidance | Apply current auditing principles and methods |
| Risk-based audit planning | Focus resources on significant risks and organizational priorities |
| Integrated process auditing | Evaluate connections between quality, environmental, and safety performance |
| Remote auditing methods | Obtain and evaluate evidence across physical and virtual environments |
| Audit team leadership | Coordinate competence, responsibilities, communication, and conclusions |
| Evidence evaluation and reporting | Produce defensible findings supported by objective evidence |
These capabilities are valuable for quality managers, environmental professionals, occupational health and safety practitioners, internal auditors, consultants, and professionals seeking to progress into lead auditing roles.
Understanding ISO 19011:2026 is an important starting point, but reading the standard alone does not establish auditor competence.
Effective auditing requires the ability to interpret requirements, plan audit activities, conduct interviews, evaluate objective evidence, identify nonconformities, and communicate findings.
For integrated management system auditing, these skills must be applied across multiple disciplines.
Structured IMS Lead Auditor training provides a pathway for developing this knowledge and applying it to practical auditing situations.
At LMS TRG, we understand that effective auditing requires more than theoretical knowledge of ISO standards.
Our Integrated Management Systems (IMS) Lead Auditor Course is designed for professionals who want to develop their understanding of auditing quality, environmental, and occupational health and safety management systems.
The course brings together:
ISO 9001 — Quality Management Systems
ISO 14001 — Environmental Management Systems
ISO 45001 — Occupational Health and Safety Management Systems
ISO 19011 — Guidelines for Auditing Management Systems
Through flexible, self-paced online learning, participants can develop the knowledge required to plan, conduct, report, and lead integrated management system audits.
Whether you are an existing internal auditor, an ISO consultant, or a management system professional looking to expand your auditing capabilities, integrated lead auditor training can support your professional development.
Do not limit your auditing knowledge to one management system when organizations increasingly need professionals who understand how multiple systems work together.
The ISO 19011:2026 revision reinforces the importance of competent, adaptable, and risk-focused auditors.
As management systems become more interconnected, the ability to evaluate quality, environmental, and occupational health and safety requirements together becomes increasingly valuable.
Develop the skills to audit beyond individual standards.
Explore the LMS TRG Integrated Management Systems Lead Auditor Course
Learn online. Study at your own pace. Build your integrated auditing knowledge.
ISO 19011:2026 is the fourth edition of the international guidance standard for auditing management systems. It provides guidance on audit principles, audit program management, conducting audits, and auditor competence.
Important developments include expanded guidance on remote auditing methods, virtual locations, emerging technology, audit planning, and auditor competence. The revision also refines terminology and guidance relevant to combined audits.
ISO 19011 is a guidance standard and does not itself impose a universal mandatory retraining requirement. Organizations and auditors should evaluate whether their existing competence remains appropriate for the audits they perform.
An Integrated Management Systems Lead Auditor Course provides training in auditing management systems across multiple disciplines, commonly ISO 9001, ISO 14001, and ISO 45001, using relevant audit principles and methodologies.
Yes. LMS TRG offers self-paced online IMS Lead Auditor training, allowing participants to study flexibly.
An appropriately competent IMS Lead Auditor can audit across these disciplines. Completing training alone does not automatically establish competence for every sector, audit scope, or certification-body role. Additional experience and competence evaluation may be necessary.
LMS TRG is an Australian-based Auditor Training Provider and Exemplar Global Recognised Training Provider, delivering high-quality, practical and industry-focused ISO training across Australia and internationally.
We provide professional auditor training to individuals, businesses and large organisations. We also have established partnerships with leading certification bodies, delivering auditor training on their behalf as part of their training services.
Our 100% online, self-paced courses cover ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 13485 and Integrated Management Systems (IMS), offering Foundation, Internal Auditor and Lead Auditor Training to suit different levels of experience and professional development needs.
Our training helps professionals develop auditing skills, achieve recognised competencies and advance their careers, while supporting organisations in building capable, confident and competent audit teams.
Our email content is full of value, void of hype, tailored to your interests whenever possible, never pushy, and always free.
50% Complete
Kindly complete the form below and confirm your email address. We will keep you updated with news, articles and promotions.