Section 3.3: Auditor Competence, Ethics, and Professionalism

Section 3.3: Auditor Competence, Ethics, and Professionalism

The success of any audit program relies heavily on the competence, ethical conduct, and professionalism of the auditors. ISO 19011:2018 Clause 7 outlines the requirements for establishing and evaluating auditor competence, while ISO/IEC 17021-1 sets additional stringent requirements for third-party auditors. A lead auditor must not only possess technical knowledge but also exhibit specific personal behaviors and manage ethical dilemmas effectively.

Establishing Auditor Competence

Auditor competence is defined as the capability to apply knowledge and skills to achieve intended results. Under ISO 19011:2018, this competence is established through a combination of education, work experience, auditor training, and audit experience.

Technical Knowledge and Skills

A competent quality auditor must possess knowledge in several key areas:

1. Audit Principles, Procedures, and Techniques: Knowing how to plan, conduct, report, and follow up on audits (as outlined in ISO 19011).
2. Management System Standards: Deep understanding of ISO 9001:2015 and related standards (e.g., ISO 9000 vocabulary).
3. Organizational Context: Understanding the organization’s size, structure, functions, and relationships.
4. Applicable Laws and Regulations: Knowledge of statutory and regulatory requirements relevant to the sector (e.g., safety, environmental, or product-specific regulations).
5. Sector-Specific Processes: Understanding the technical characteristics of the operations being audited (e.g., chemical manufacturing, software development).

Personal Behaviors of a Professional Auditor

Technical knowledge alone is insufficient. ISO 19011:2018 lists thirteen personal behaviors that are essential for auditors to ensure professional conduct:

• Ethical: Honest, truthful, sincere, and discreet.
• Open-minded: Willing to consider alternative ideas or points of view.
• Diplomatic: Tactful in dealing with people.
• Observant: Actively observing physical surroundings and activities.
• Perceptive: Aware of and able to understand situations.
• Versatile: Readily adapting to different situations.
• Tenacious: Persistent and focused on achieving objectives.
• Decisive: Reaching timely conclusions based on logical reasoning.
• Self-reliant: Acting and functioning independently.
• Acting with Fortitude: Able to act responsibly and ethically, even if these actions are not popular and can sometimes result in disagreement or confrontation.
• Open to Improvement: Willing to learn from situations.
• Culturally Sensitive: Observant and respectful of the auditee's culture.
• Collaborative: Effectively interacting with others, including audit team members and the auditee's personnel.

Ethical Dilemmas in Auditing

Auditors frequently face ethical challenges that test their independence and professionalism. The lead auditor must manage these situations according to strict guidelines:

1. Conflict of Interest

A conflict of interest occurs when an auditor has a personal, financial, or professional relationship with the auditee that could bias their judgment.

• Rule: Auditors must not audit areas where they have a conflict. For example, under ISO/IEC 17021-1, a certification body auditor cannot audit a company if they have provided consulting services on that company's QMS within the last two years.

2. Bribery and Hospitality

Auditors must never accept gifts, favors, or excessive hospitality that could be perceived as compromising their objectivity.

• Rule: Modest business meals provided during the audit are generally acceptable, but expensive dinners, gifts, or paid accommodation violate ethical boundaries and must be refused and reported.

3. Pressure to Alter Findings

Auditees may pressure auditors to downgrade a nonconformity (e.g., asking to change a "Major Nonconformity" to a "Minor Nonconformity" or an "Opportunity for Improvement" to protect their certification status).

• Rule: The lead auditor must stand firm, acting with fortitude. Findings must be based solely on objective evidence and compared strictly against the audit criteria.

4. The Boundary Between Auditing and Consulting

An auditor's role is to evaluate, not to consult. This is a critical distinction tested on lead auditor exams.

• Consulting (Prohibited): Telling the client how to fix a nonconformity, writing their procedures, or designing their processes.
• Auditing (Permitted): Citing the nonconformity, explaining what requirement was violated, presenting the objective evidence, and explaining why the evidence represents a gap.

Lead Auditor Team Leadership Skills

The Lead Auditor (or Audit Team Leader) has additional responsibilities beyond those of a team auditor. They must possess leadership skills to manage the audit team and direct the audit process:

• Planning and Resource Allocation: Assigning audit tasks to team members based on their specific competence.
• Conflict Resolution: Managing disagreements within the audit team or between the team and the auditee.
• Time Management: Ensuring the audit plan is followed and activities remain on schedule.
• Representing the Team: Acting as the primary point of contact with the client and auditee management during opening and closing meetings.
• Evaluating Team Performance: Assessing the performance of team auditors and providing feedback.