An audit plan is one of the most important documents when it comes to audit planning. Not because it is simply an administrative document used during certification processes, but because it prepares everyone involved for the audit ahead.
It transforms the audit program into an organized set of activities and guides the audit team throughout the process. An effective audit plan allows both auditors and auditees to understand exactly what will be audited, when activities will take place, who will conduct them, and how the audit will be performed.
For these reasons, ISO 19011:2026 provides guidance that an audit plan should be sufficiently detailed to facilitate the efficient scheduling and coordination of audit activities while remaining flexible enough to accommodate changes that may become necessary as the audit progresses.
So, what should an effective audit plan include? Let’s look at the essential elements.
Â
1. Audit Objectives
An effective audit plan starts by clearly defining why the audit is being conducted.
Clear objectives provide direction for subsequent activities and help both auditors and auditees understand the purpose of the audit.
Audit objectives may include:
- Verifying conformity with a specific standard or requirement
- Evaluating the effectiveness of a management system
- Confirming the implementation and effectiveness of corrective actions
- Evaluating opportunities for improvement
An audit may have more than one objective.
Without clearly defined objectives, however, an audit can lose focus and become an administrative exercise rather than a valuable management tool.
Â
2. Audit Scope
An effective audit plan should also clearly establish what will be audited.
The scope may identify:
- Organizational units
- Processes
- Departments
- Activities
- Products and services
- Physical locations
- Virtual locations
The audit scope may include both physical environments, such as manufacturing facilities, and virtual environments, such as software platforms or digital workspaces.
When relevant, the plan may also clarify boundaries or activities that are outside the audit scope.
Â
3. Audit Criteria
Audit criteria are among the most important elements of the audit plan because they establish the references against which audit evidence will be evaluated.
In simple terms, auditors compare objective evidence against established criteria to determine conformity.
Audit criteria may include:
- ISO standards
- Internal procedures
- Organizational policies
- Statutory and regulatory requirements
- Contracts
- Technical specifications
- Customer requirements
- Industry-specific requirements
Without clearly established criteria, it is impossible to objectively determine whether a process conforms to applicable requirements.
Â
4. Dates, Duration, and Detailed Schedule
The audit plan should clearly establish the audit dates, expected duration, and schedule of activities.
A detailed schedule helps ensure the availability of both auditors and auditees while reducing disruptions to normal operations.
The schedule is commonly presented as a table and may include:
- Opening meeting
- Closing meeting
- Audits of individual processes
- Interviews
- Site visits
- Audit team meetings, when necessary
- Time for reviewing and consolidating audit findings
- Audit report preparation
- Breaks and other relevant activities
Â
Clearly Identify the Processes and Areas to Be Audited
The plan should make it clear which processes will be evaluated.
Depending on the organization, these may include:
- Sales
- Purchasing
- Engineering
- Production
- Human Resources
- Information Technology
- Maintenance
- Quality Management
- Logistics
Clearly identifying these areas helps the audit team work efficiently while allowing the organization to prepare the appropriate personnel and resources.
It can also reduce unnecessary disruption to operations and improve coordination throughout the audit.
5. Audit Methods
The audit plan should identify how the audit will be conducted.
Common audit methods include:
- Interviews
- Observation of activities and processes
- Review of documented information
- Examination of records
- Sampling
- Use of Information and Communication Technology (ICT)
The plan should also indicate whether audit activities will be conducted on-site, remotely, or through a hybrid approach.
When relevant, sampling considerations can also be established to support the collection of sufficient and appropriate audit evidence.
6. Audit Team
An effective audit plan should identify the members of the audit team.
This may include:
- Audit team leader
- Auditors
- Technical experts
- Auditors-in-training
- Observers, when applicable
Where appropriate, the responsibilities and assignments of individual audit team members should also be identified.
This facilitates coordination and helps the auditee prepare for any external participants who will be involved in the audit.
7. Auditee Representatives
Whenever practical, the audit plan should identify the representatives expected to participate in the audit.
These may include:
- Department managers
- Process owners
- Management system representatives
- Employees responsible for specific activities
- Personnel who will accompany auditors
Identifying key participants in advance helps prevent scheduling conflicts and ensures that the appropriate personnel are available when required.
8. Resources Required for the Audit
Identifying necessary resources in advance can prevent delays and operational issues during the audit.
Depending on the audit, required resources may include:
- Meeting and interview rooms
- Access to software and information systems
- Computers and ICT devices
- Personal Protective Equipment (PPE)
- Transportation
- Physical access to facilities
- Remote access to systems
- Interpreters, when necessary
- Other specialized equipment
These resources may be necessary not only to perform audit activities effectively but also to ensure the health and safety of the audit team.
9. Audit Language
For international and multilingual audits in particular, the audit plan should identify the language or languages in which audit activities will be conducted.
This is important when planning interviews, reviewing documented information, and selecting appropriate audit team members.
It also allows organizations to determine in advance whether interpreters or translation support will be required.
Flexibility Is Essential to an Effective Audit Plan
Planning and documentation are essential, but audits do not always proceed exactly as expected.
Schedules may need to change. Auditors may need to increase sample sizes, conduct additional interviews, investigate new evidence, or change the sequence of planned activities.
For this reason, an audit plan should provide structure without becoming unnecessarily rigid.
When circumstances change, the audit team leader may adjust the plan as necessary while keeping the audit objectives, scope, and criteria in focus.
A useful way to understand this is through a familiar concept: the map is not the territory.
Imagine following a map that shows a bridge along your route. When you arrive, you discover that a storm has destroyed the bridge.
Would you continue following the map and attempt to cross a bridge that no longer exists? Of course not. You would adjust the route while keeping your destination in mind.
An audit plan works the same way.
It provides direction, structure, and organization—but when circumstances change, auditors must adapt their approach while continuing to pursue the established audit objectives.
