Conducting an ISO 55001 Audit
What the domain tests
Conducting the audit covers the opening meeting, evidence collection, interviewing, observation, sampling, audit trail, team communication, findings, and the closing meeting.
Core rules
- Open with purpose, scope, criteria, methods, and confidentiality; confirm logistics and safety.
- Collect evidence through interviews, observation, document review, and records; verify and cross-check.
- Keep an audit trail: what was examined, who was interviewed, what was found, and how criteria were applied.
- Classify findings consistently; a nonconformity is a failure to meet a requirement, supported by evidence.
- Hold team meetings to calibrate findings and share risks; communicate significant issues promptly.
- At the closing meeting, present findings and conclusions, agree facts where possible, and explain follow-up.
Worked example
During a site walk, the auditor sees a deferred maintenance backlog on critical pumps. Interviews show no risk assessment for deferral, and the backlog report is not reviewed. The criterion is ISO 55001 planning for risks and operational control. The evidence is observation, interview, and report. The auditor frames the finding around the missing risk evaluation and review, not around dirty pumps. The reasoning: the system requirement is control and risk-based decisions, not cosmetic condition.
Traps
- Asking leading questions that suggest the answer.
- Accepting undocumented verbal assurances.
- Sampling only cooperative staff or tidy areas.
- Changing criteria during the audit without agreement.
- Arguing with auditees instead of recording disagreement.