Auditor Behavior
The Auditor Behavior domain tests whether you can apply the ethical and professional principles that govern audit work - from the ISO 19011:2018 principles through the practical rules on independence, confidentiality and evidence - and whether you can recognise the exact moment a behaviour becomes a breach.
Foundation: the principles
ISO 19011:2018 sets seven principles of auditing: integrity, fair presentation, due professional care, confidentiality, independence, an evidence-based approach and a risk-based approach. Professional codes of ethics for auditors add objectivity, competence, impartiality and professional behaviour. These are not slogans: each maps onto an observable behaviour an examiner can describe - refusing a gift, declaring a conflict, or writing "the process appeared weak" as an observation rather than a finding.
Independence, objectivity and conflicts
Impartiality is threatened by self-interest, self-review, advocacy, intimidation and familiarity. A consultant who wrote the management system cannot audit it; ISO/IEC 17021-1 bars personnel who provided consultancy to a client within two years from the audit team. When independence is compromised, the auditor declares it and withdraws - the client's approval does not cure the conflict.
Worked example
An auditor learns mid-audit that the client's operations director is her brother-in-law. She does not finish the audit and disclose afterwards; she stops, tells the audit team leader, and the leader reassigns the remaining interviews and records the change. Reasoning: the threat is familiarity, it is material to the audit's credibility, and independence must hold throughout the audit, not be restored after the fact. Simply "being careful" or trusting her own objectivity is not a control.
Traps
- Disclosing a conflict after issuing the report - too late; credibility is already compromised.
- Treating confidentiality as absolute, ignoring imminent danger to life or legal disclosure obligations.
- Accepting hospitality or gifts a reasonable person would see as influencing judgement.
- Recording personal opinion as a finding; findings need criteria, evidence and a conclusion.
- Omitting obstacles to the audit from the report - fair presentation requires recording them.