What Are Audit Objectives?
Audit objectives are the specific outcomes an audit is designed to achieve. Before a single interview is conducted or a single document reviewed, the audit team needs to know what they are actually trying to find out. Audit objectives answer that question directly.
On this page
Think of them as the reason the audit exists. Without clear objectives, an audit becomes a wandering exercise where the auditor collects information without a clear sense of what they are trying to determine. That wastes time, confuses auditees, and produces findings that are hard to act on.
ISO 19011:2018, the guidelines for auditing management systems, defines audit objectives as the outcomes to be achieved by an audit. The 2026 revision of ISO 19011 reinforces this, placing even greater emphasis on objectives being defined before the audit programme is developed. The objectives shape everything that follows: the scope, the criteria, the sampling approach, the team composition, and the reporting format.
Audit Objectives vs Audit Scope vs Audit Criteria
These three terms are often confused, even by experienced practitioners. They are related but they are not the same thing, and mixing them up causes real problems in audit planning.
Audit Objectives
Objectives define what the audit is trying to achieve. Examples include determining whether the management system conforms to requirements, evaluating whether the system is being effectively implemented, or assessing whether a supplier meets defined purchasing criteria.
Audit Scope
Scope defines the boundaries and extent of the audit. It describes what is included and what is excluded. This includes the physical locations, the organisational units, the processes, the time period covered, and the activities under review. You can read more about this in our article on audit scope explained.
Audit Criteria
Criteria are the set of requirements used as a reference against which audit evidence is compared. This might be the clauses of ISO 9001, a specific procedure, a contractual requirement, or a regulatory obligation. The criteria tell the auditor what conformity looks like. For a deeper look at this distinction, see our post on audit criteria explained.
A simple way to keep these straight: objectives tell you why you are auditing, scope tells you what and where you are auditing, and criteria tell you against what you are auditing.
Exemplar Global Certified Training ProviderRTP No. 310970
Why Audit Objectives Matter in Practice
In a busy organisation, audits can easily drift into box ticking exercises. The auditor shows up, works through a checklist, writes a report, and the findings get filed. Nobody is quite sure what changed as a result. This happens most often when the objectives were vague or unstated from the start.
Clear objectives prevent this. They give the audit team a filter for deciding what to look at and what to skip. They give the auditee a sense of what to prepare. They give management a way to evaluate whether the audit delivered what it was supposed to deliver.
From a practical standpoint, well written objectives also make it easier to write a useful audit report. When the report is structured around what the audit set out to achieve, the conclusions are more coherent and the recommendations are more targeted.
Common Types of Audit Objectives
Audit objectives vary depending on the type of audit being conducted. Here are the most common categories you will encounter in ISO auditing practice.
Conformity Objectives
The most common objective in certification and internal audits is to determine whether the management system conforms to the requirements of the applicable standard. For example, an internal audit against ISO 9001 might have the objective of determining whether the organisation has implemented and maintained a quality management system that meets the requirements of ISO 9001:2015.
This is a conformity objective. It is about checking whether what exists matches what the standard requires.
Effectiveness Objectives
A step beyond conformity is effectiveness. An audit with an effectiveness objective is asking whether the system is actually working, not just whether it exists on paper. This is a more challenging type of objective because it requires the auditor to evaluate outcomes, not just documentation.
For example, an objective might be to evaluate whether the corrective action process is effectively identifying root causes and preventing recurrence. This requires the auditor to trace corrective actions through to closure and assess whether the same problems keep coming back.
Compliance Objectives
Compliance audits focus on whether the organisation is meeting legal, regulatory, or contractual requirements. These are common in environmental and safety management system audits, where the organisation has obligations under legislation that sit alongside the ISO standard requirements.
System Improvement Objectives
Some audits are specifically designed to identify opportunities for improvement rather than to find nonconformities. This is more common in mature organisations that already have a well functioning system. The objective might be to identify areas where the management system could be strengthened or made more efficient.
Supplier and Second Party Objectives
When auditing a supplier, the objectives typically focus on whether the supplier has the capability to meet your requirements, whether they are actually meeting them, and whether there are any risks in the supply relationship. These objectives are set by the audit client, which in a second party audit is the purchasing organisation.
Who Sets Audit Objectives?
ISO 19011 is clear that audit objectives are set by the audit client. The audit client is the person or organisation requesting the audit. In an internal audit, this is typically senior management or the management system representative. In a certification audit, this is the certification body. In a supplier audit, this is the purchasing organisation.
The audit programme manager plays an important role here too. They work with the audit client to ensure the objectives are realistic, clearly stated, and achievable within the time and resources available. The lead auditor then takes those objectives and plans the audit accordingly.
In practice, objectives are often set somewhat generically, particularly for routine internal audits. The quality manager might simply state that the objective is to verify conformity with ISO 9001. That is fine as a starting point, but more specific objectives produce more useful audits. If there has been a recent product recall, an objective specifically focused on the effectiveness of nonconforming output controls will produce far more actionable findings than a general conformity check.
How to Write Effective Audit Objectives
Writing good audit objectives is a skill. Here is a practical approach that works in real audit programmes.
Be Specific About What You Want to Know
Vague objectives produce vague audits. Instead of writing to audit the quality management system, write something like to determine whether the design and development process conforms to the requirements of ISO 9001 Clause 8.3 and the organisation's documented design procedure.
The more specific the objective, the easier it is to plan the audit, allocate time, and write a useful report.
Connect Objectives to Risk
The best audit objectives are connected to what matters most in the organisation. If a process has been recently changed, if there have been customer complaints in a particular area, or if a new regulatory requirement has come into force, these are the areas where audit objectives should be focused.
Risk based thinking should drive objective setting. Ask: where is the organisation most exposed? Where have things gone wrong before? Where is the system least mature? The answers to these questions should shape the objectives.
Make Objectives Achievable
An objective that cannot be achieved in the time available is worse than no objective at all, because it sets up the audit to fail. If you have half a day to audit a complex manufacturing process, your objective cannot be to comprehensively evaluate every aspect of the production system. Be realistic about what can be accomplished.
State Objectives in Writing
Objectives should always be documented. They should appear in the audit plan and be communicated to the auditee before the audit begins. This is not just good practice. It is a requirement under ISO 19011 and, for internal audits under ISO 9001, it is implied by the requirement to plan audits that consider the importance of the processes concerned.
Our article on how to write audit objectives that actually focus your audit goes into the writing process in more detail with worked examples.
Audit Objectives in Different Audit Types
Internal Audits
For internal audits, objectives are typically set by the quality manager or audit programme manager in consultation with senior management. ISO 9001 Clause 9.2 requires that internal audits provide information on whether the management system conforms to requirements and is effectively implemented and maintained. These are your baseline objectives for every internal audit.
But internal audit objectives can and should go further. They can be tailored to address specific risks, follow up on previous nonconformities, or evaluate the effectiveness of particular processes. The audit programme should reflect this variation rather than running the same generic audit every time.
Certification Audits
In a Stage 1 certification audit, the objective is typically to evaluate the organisation's readiness for the Stage 2 audit, including reviewing the management system documentation and understanding the organisation's context. In a Stage 2 audit, the objective shifts to determining whether the management system is implemented and effective and whether it meets the requirements of the standard.
Surveillance audits have narrower objectives, typically focused on confirming that the certified system is being maintained and that any previous nonconformities have been effectively addressed.
Supplier Audits
Supplier audit objectives are driven by the purchasing organisation's needs. They might focus on capability assessment before awarding a contract, ongoing performance monitoring during a contract, or investigation following a quality or delivery problem. The objectives will shape the entire approach, from the areas audited to the evidence collected.
Communicating Objectives to the Auditee
One of the most common mistakes in audit planning is failing to communicate objectives clearly to the auditee before the audit begins. When auditees do not understand what the audit is trying to achieve, they often prepare the wrong things, bring the wrong people to interviews, or feel blindsided by the direction the audit takes.
Objectives should be shared in the audit plan, which should be sent to the auditee before the audit starts. They should also be stated clearly at the opening meeting. This is not about giving the auditee a roadmap to hide problems. It is about making the audit as efficient and productive as possible.
A well informed auditee can have the right records ready, arrange for the right people to be available, and understand why certain questions are being asked. This makes the auditor's job easier and the findings more reliable.
Reviewing Objectives During and After the Audit
Objectives are not set in stone. During an audit, the lead auditor may find that the situation on the ground is different from what was anticipated. A process that was expected to be straightforward might reveal significant issues that warrant deeper investigation. The objectives may need to be adjusted, and this should be communicated to the audit client.
After the audit, the conclusions should be evaluated against the objectives. Did the audit achieve what it set out to achieve? If not, why not? Were the objectives unrealistic? Was the time allocation insufficient? Were there access issues? This kind of reflection improves future audit planning.
The audit report should explicitly state whether the audit objectives were achieved. This gives the audit client the information they need to decide whether any follow up is required.
Common Mistakes in Setting Audit Objectives
After conducting hundreds of audits, certain patterns of poor objective setting come up repeatedly. Here are the ones worth watching for.
Objectives that are too broad. Saying the objective is to audit the entire management system across all sites in one day is not realistic. Broad objectives lead to superficial audits.
Objectives that are actually scope statements. Saying the objective is to audit the production department describes where you are going, not what you are trying to find out. Objectives and scope serve different purposes.
Objectives that are never reviewed. Setting objectives at the start of the audit programme and never revisiting them, even when the organisation's risk profile changes, produces stale audits that miss what matters.
Objectives that nobody reads. If the objectives are buried in a document that the audit team and auditee never look at again after it is written, they serve no purpose. Objectives should be actively used throughout the audit process.
Exemplar Global Certified Training ProviderRTP No. 310970Audit Objectives and the ISO 19011:2026 Update
The 2026 revision of ISO 19011 places greater emphasis on audit programme objectives, distinguishing them from individual audit objectives. The audit programme itself should have defined objectives that reflect the organisation's strategic direction and management system risks. Individual audit objectives then sit within that broader framework.
This is a useful distinction. The audit programme objective might be to provide assurance that the management system is effective across all critical processes. The individual audit objectives then break that down into specific, auditable questions for each audit event.
The 2026 edition also introduces more explicit guidance on considering risks to the audit programme itself, including the risk that audit objectives are not achieved due to resource constraints, access issues, or auditor competence gaps. This is a practical acknowledgement that audit planning does not always go to plan.
Putting It All Together
Audit objectives are the foundation of every effective audit. They define why the audit is happening, focus the audit team's efforts, set expectations for the auditee, and provide the basis for evaluating whether the audit delivered value.
Getting objectives right is not complicated, but it does require deliberate thought. It means asking what you actually want to know, connecting that to what matters most in the organisation, and stating it clearly enough that everyone involved understands the purpose of the audit.
If you want to build this kind of discipline into your auditing practice, structured training makes a significant difference. At Audit Workshop, our internal auditor and lead auditor courses spend considerable time on audit planning, including how to set objectives that produce genuinely useful audits rather than compliance theatre. Courses are available across ISO 9001, ISO 14001, ISO 45001, ISO 27001, and more, in both live and self paced formats. Visit auditworkshop.com to find a course that fits where you are in your auditing career.
