Closing an ISO 55001 Audit
What the domain tests
Closing covers the audit report, findings and conclusions, distribution, the closing meeting, corrective action, follow-up, and audit completion.
Core rules
- The report should state objectives, scope, criteria, dates, team, sites, findings, conclusions, and any limitations; it should be factual and evidence-based.
- Findings should identify the requirement, evidence, and significance; avoid opinions and unsupported recommendations.
- The closing meeting presents findings and conclusions; disagreements should be recorded.
- Corrective action addresses root cause, not just the symptom; follow-up verifies implementation and effectiveness.
- Audit completion occurs when planned activities are done and the report is issued; follow-up may be a separate activity.
Worked example
A major nonconformity is raised because maintenance technicians lack competence records for critical assets. The organization proposes retraining all staff. The auditor should require root-cause analysis: was the competence matrix incomplete, or was training not scheduled? Follow-up should verify records and interviews show competence, not just attendance. The reasoning: ISO 55001 requires competence and evidence, and corrective action must prevent recurrence.
Traps
- Writing recommendations as requirements.
- Issuing a report with findings not discussed at the closing meeting.
- Accepting an action plan without root cause.
- Verifying paperwork only, not effectiveness.
- Breaking confidentiality in report distribution.