Preparation of an ISO 41001 Audit
What this domain tests
This domain tests how to prepare a risk-based ISO 41001 audit: defining objectives, scope and criteria; reviewing documentation; planning sampling and logistics; preparing work documents; and briefing the team. It distinguishes the audit programme from the individual audit plan.
Core rules and concepts
- An audit programme is the set of audits planned for a timeframe and purpose; an audit plan describes activities and arrangements for one audit.
- The audit scope should identify facilities, organizational units, processes, shifts and sites, plus any exclusions and their justification.
- Preparation includes reviewing the FMS scope, FM policy, objectives, process maps, previous findings, complaints and performance data.
- Planning should be risk-based: consider site size, complexity, service criticality, outsourced activities, changes and prior audit results.
- Multi-site sampling must be justified; not every site needs a visit, but the sample must be defensible.
- Work documents may include audit plans, checklists, sampling plans and forms, but checklists must not replace investigation.
- The team needs FM technical competence and knowledge of ISO 41001 and audit methods.
Worked example
A certification body plans a Stage 2 audit of an FM provider with 12 sites. The client asks for all 12 sites to be visited in two days. Reasoning: the plan should be based on risk and scope, not client convenience. The auditor selects a sample by region, service type, size and previous performance, and schedules interviews across shifts. The plan states sites, dates, processes, criteria and team roles, and the sampling rationale is recorded.
Traps
Using a generic checklist without reviewing the FMS; failing to define audit criteria; planning only office interviews; ignoring night shifts or outsourced services; accepting an unrealistic schedule that prevents evidence gathering.