Managing an ISO 50001 audit programme
Domain 7 - Managing an ISO 50001 audit programme
This domain tests programme-level thinking under ISO 19011:2018: a programme is a set of audits planned for a period, not a single audit. The exam expects you to link audit frequency and scope to risk, energy performance, changes and prior findings.
Programme rules
- Establish programme objectives, scope, responsibilities, resources and procedures.
- Identify risks and opportunities affecting the programme: energy significance, legal and other requirements, changes, complexity, site performance, previous findings and audit team competence.
- Schedule audits considering risk, changes, results of previous audits and defined intervals. A significant SEU, poor energy performance or repeated nonconformities can justify more frequent or broader audits.
- Select competent auditors and ensure impartiality; avoid assigning auditors to areas where they have conflicts.
- Provide resources, communicate the programme, maintain records and monitor performance indicators such as completion, finding trends and timeliness.
- Review and improve the programme at planned intervals and when significant changes occur.
Worked example
A company has three sites. Site A has stable performance, one minor finding and a mature EnMS. Site B has a new SEU, rising energy intensity and two major findings from the last audit. A risk-based programme audits Site B sooner and more deeply, while Site A remains on the normal cycle. The programme review records the rationale.
Traps
Treating the programme as one audit plan; scheduling by calendar alone; failing to verify auditor competence; ignoring changes to SEUs or scope; and never reviewing programme effectiveness.