Preparing an ISO 21001 Audit
What this domain tests
Preparation questions ask what must be defined, requested and planned before the opening meeting: objectives, scope, criteria, documentation review, audit time, sampling, team competence and the audit plan itself.
Core rules
- Define audit objectives, scope and criteria with the auditee before planning; the criteria set the boundaries of what you may conclude.
- Document review before the audit informs planning and identifies areas to probe - it does not produce findings on its own. A finding requires verification on site.
- The audit plan states objectives, scope, criteria, dates, sites, expected time per activity, team roles, and the auditee functions to be audited. It is a schedule, not a clause-by-clause checklist.
- Audit time must reflect size and complexity: number of learners, number of sites, delivery modes, shift patterns, number of programmes and level of risk.
- Multi-site sampling must be justified: cover the largest or most complex sites, plus new, high-risk or poorly performing sites; do not let the auditee choose the sample.
- Competence: the team needs ISO 21001 knowledge, education-sector understanding, and the language and technical literacy to audit e-learning, laboratories or clinical placements.
- For certification audits, Stage 1 reviews readiness and documentation; Stage 2 evaluates implementation and effectiveness.
Worked example
A university with eight campuses is to be audited in five days. The lead auditor selects the main campus plus two others: the newest campus (no audit history) and the campus with the highest learner complaint volume. Reasoning: risk-based selection, documented in the plan, gives a defensible sample; a purely random selection could miss systemic failures, and letting the auditee nominate sites undermines the evidence base.
Traps
- Issuing nonconformities from the desk review before verifying on site.
- Producing a plan that lists clauses rather than processes, sites, interviewees and times.
- Planning no access to learners, teaching sessions or assessment records.
- Allocating identical audit time regardless of learner numbers and delivery complexity.