What should an ISO audit brief include?
An audit brief should explain the question to be answered, activities and sites in scope, criteria, timing, access and expected outputs. The builder organises these details into a download for review. It does not send information to ISOaudit or form a service agreement.
How to use this tool
- Describe the objective and the decision the audit should help you make.
- Identify the standard, edition, activities, sites and important interfaces.
- Record evidence availability, access constraints and any specialist competence needed.
- Download the brief, check it for sensitive information and agree the final scope with the selected provider.
Scope and limitations
Do not include passwords, personal records or confidential evidence. The output is a working brief, not a quotation, engagement acceptance or certification scope approval.
Use the relevant standard guide for current primary sources. Read the editorial method before relying on an example.