CPD for ISO Auditors: Requirements and Easy Ways to Meet Them

Why CPD Matters More Than Auditors Realise

Continuing Professional Development, or CPD, is one of those topics that auditors nod along to during registration and then quietly forget about until their renewal is due. That is a mistake. CPD is not a bureaucratic box to tick. It is the mechanism that keeps your skills sharp, your knowledge current, and your professional credibility intact.

If you hold an Exemplar Global or IRCA auditor certification, you already have CPD obligations baked into your registration. If you work as an internal auditor without formal registration, your organisation still expects you to stay current, and the ISO standards themselves expect auditors to maintain competence. Either way, CPD for ISO auditors is not optional. The question is how to meet your requirements without making it a burden.

This article walks through what CPD actually requires, how the major schemes calculate it, and practical ways to accumulate CPD hours that genuinely build your capability rather than just filling a spreadsheet.

What CPD Actually Means for ISO Auditors

CPD stands for Continuing Professional Development. In the context of ISO auditing, it refers to any structured or unstructured learning activity that maintains or develops your competence as an auditor. That definition is intentionally broad, which is both helpful and occasionally confusing.

The key point is that CPD is not just about attending formal training courses. It covers a wide range of activities, from reading updated standards to conducting audits, mentoring colleagues, writing articles, attending webinars, or participating in professional forums. The intent is that you remain an active, learning practitioner rather than someone who passed a course five years ago and has not updated their knowledge since.

CPD vs Audit Activity: Understanding the Difference

Many auditors confuse CPD with audit activity. Conducting audits keeps your practical skills current, and most certification schemes count it separately as audit experience or audit hours. CPD sits alongside that. It is the learning component, not the doing component. Some schemes allow a portion of audit activity to count toward CPD, but you generally cannot satisfy your entire CPD obligation by simply continuing to audit.

CPD Requirements Under Exemplar Global

Exemplar Global is the most widely recognised auditor certification scheme in Australia and the Asia Pacific region. If you hold an Exemplar Global auditor credential at any level, you are required to maintain CPD as part of your ongoing registration.

Exemplar Global operates on an annual basis. Certified auditors are required to complete a minimum of 20 CPD hours per year. These hours must relate to activities that are relevant to your auditing practice and the standards you audit against. The scheme divides CPD into structured and unstructured categories, and both count toward your annual requirement.

Structured CPD Under Exemplar Global

Structured CPD includes activities with a defined learning outcome and some form of verification. Examples include formal training courses, webinars with assessment components, attending conferences, completing online modules, or undertaking additional auditor training in a new standard. These activities are easier to record and evidence because they typically produce a certificate, attendance record, or completion confirmation.

Unstructured CPD Under Exemplar Global

Unstructured CPD covers self directed learning. Reading updated standards, studying guidance documents, reviewing industry publications, or participating in professional discussions online all qualify. The catch is that you need to record what you did, how long it took, and what you learned from it. Exemplar Global does not require you to submit CPD records unless audited, but you must be able to produce them if asked.

For a deeper look at how auditor training hours translate into CPD, the article on how many CPD hours ISO auditor training counts for breaks this down in detail.

CPD Requirements Under IRCA

IRCA, the International Register of Certificated Auditors, is the other major scheme used by ISO auditors globally. IRCA registered auditors are required to complete 20 hours of CPD per year, which aligns with Exemplar Global on the headline number.

IRCA also distinguishes between audit activity and CPD. To maintain registration, auditors must meet both an audit day requirement and a CPD requirement. Audit days demonstrate that you are actively practising. CPD demonstrates that you are actively learning. IRCA requires auditors to log both and to retain records for at least three years.

IRCA places particular emphasis on CPD that is directly relevant to your registered scope. If you are registered as an ISO 9001 lead auditor, your CPD should include activities that relate to quality management, auditing practice, or adjacent topics that strengthen your capability in that domain.

Comparing Exemplar Global and IRCA CPD

Both schemes set 20 hours per year as the minimum. Both accept a mix of structured and unstructured activities. The main practical difference is in how audit activity is counted and how records are reviewed. If you are deciding between the two schemes or hold both registrations, the article comparing Exemplar Global and IRCA certification covers the broader differences in how each scheme operates.

What Counts as CPD for ISO Auditors

This is where auditors often underestimate how much they are already doing. The range of qualifying activities is broader than most people assume. Here is a practical breakdown.

Formal Training Courses

Completing a training course in a new ISO standard is one of the most efficient ways to accumulate CPD hours. A five day lead auditor course in ISO 27001, for example, would generate substantial CPD hours in a single block. Even a two day internal auditor course in a standard you do not currently audit against counts as genuine professional development.

If you are an ISO 9001 auditor who wants to expand into ISO 45001 or ISO 14001, completing the relevant training serves double duty. You build new capability and satisfy CPD requirements at the same time. This is arguably the most productive use of your CPD budget.

Webinars and Online Learning

Webinars run by professional bodies, certification schemes, standards organisations, and training providers count as CPD when they have a defined learning focus. A one hour webinar on the ISO 14001:2026 transition changes, for example, is directly relevant CPD for any environmental auditor. Most webinar providers issue attendance certificates, which makes recording straightforward.

Reading and Self Study

Reading updated standards, guidance documents, and technical publications counts as unstructured CPD. When ISO 19011 was updated in 2026, auditors who read the new edition and reflected on what changed for their practice were engaging in legitimate CPD. The key is to record it. Note the document you read, the approximate time spent, and what you took away from it.

Conducting Audits

Some schemes allow a portion of audit activity to count toward CPD, particularly where the audit involved a new sector, a new standard, or a complex situation that required you to develop new knowledge. Check your specific scheme rules, but do not assume that conducting audits automatically satisfies your CPD requirement in full.

Mentoring and Coaching

If you mentor a less experienced auditor, that counts. Explaining concepts, reviewing audit reports, providing feedback on interview technique, or guiding someone through their first lead auditor assignment all involve active engagement with auditing knowledge. Record the time and describe what you covered.

Writing and Presenting

Writing articles, delivering presentations at industry events, or contributing to professional forums counts as CPD. The act of preparing material for others forces you to clarify your own understanding and stay current with the topic. If you have presented at a quality conference or written a procedure guide for your team, that is recordable CPD.

Professional Memberships and Events

Attending industry events, quality forums, or professional association meetings can count as CPD where there is a learning component. Networking alone generally does not qualify, but a session where an expert presents on audit programme management or supply chain risk does.

How to Record CPD Properly

Recording CPD is where most auditors fall down. They do the activity but do not document it, and then scramble when renewal comes around. The solution is simple: keep a running log and update it as you go.

What Your CPD Record Should Include

For each CPD activity, record the following:

• Date of the activity
• Description of what you did
• Learning category (structured or unstructured)
• Relevance to your auditing practice
• Time spent (in hours)
• Evidence available (certificate, screenshot, notes)

A simple spreadsheet works perfectly well. Exemplar Global provides a CPD log template through the MyExemplar portal. IRCA has an equivalent tool in its member portal. Use them. They are designed to match what the scheme expects to see if your records are reviewed.

How Much Evidence Do You Need?

For structured activities, keep the certificate or attendance confirmation. For unstructured activities, a brief written reflection is usually sufficient. You do not need to produce an essay. Two or three sentences describing what you read, what you learned, and how it applies to your practice is enough. The point is to demonstrate that the activity was genuine and deliberate, not just time spent passively.

Practical Strategies to Meet CPD Requirements Without Stress

Twenty hours per year sounds like a lot when you are busy. It works out to less than two hours per month. Approached systematically, it is very manageable.

Plan Your CPD at the Start of the Year

At the beginning of each year, identify two or three structured activities you will complete. This might be one training course, a series of webinars, and attendance at a professional event. Lock these in early. Structured activities are the backbone of a solid CPD record, and planning them in advance means they actually happen rather than getting pushed aside.

Use Standard Revisions as CPD Triggers

ISO standards are revised periodically, and each revision is a natural CPD opportunity. ISO 14001 was revised in 2026. ISO 19011 was updated in 2026. ISO 9001 is under revision. Each time a standard you audit against is updated, studying the changes is directly relevant CPD. Set a reminder when revisions are published and allocate time to work through the new requirements. The article on the ISO 14001:2026 transition is a good example of the kind of content that supports this type of CPD.

Subscribe to Industry Publications

Quality Australia, the Australian Institute of Company Directors, and various ISO body publications regularly produce content relevant to auditors. Subscribing and reading regularly generates unstructured CPD hours that accumulate over the year without requiring any special effort beyond staying informed.

Expand Your Standard Coverage

One of the most career relevant forms of CPD is adding a new ISO standard to your competence profile. If you currently audit ISO 9001 and ISO 14001, completing training in ISO 45001 or ISO 27001 significantly broadens your value as an auditor and generates a substantial block of CPD hours in one go. This is the kind of CPD that pays dividends well beyond the renewal requirement.

Record as You Go, Not at Renewal

The single most practical piece of advice is to update your CPD log immediately after each activity. Do not wait until renewal time. Auditors who leave it to the last minute either undercount their hours because they cannot remember what they did, or they scramble to manufacture activities to fill the gap. Neither is a good position to be in.

CPD for Internal Auditors Without Formal Registration

If you are an internal auditor who does not hold an Exemplar Global or IRCA registration, you may not have a formal CPD obligation. But that does not mean CPD is irrelevant to you.

ISO 19011 requires that auditors maintain and demonstrate competence. Your organisation's audit programme should include provisions for auditor development. If you are auditing against ISO 9001, ISO 45001, or any other standard and the standard is revised, you are expected to understand the changes and adjust your approach accordingly.

Internal auditors who invest in CPD also position themselves for career progression. Moving from internal auditor to lead auditor, or from an employed auditor to a contract or consulting role, requires demonstrated competence and a credible professional development history. Starting that record early gives you a stronger foundation when the time comes. The ISO auditor career path article covers how this progression typically works in practice.

Common CPD Mistakes to Avoid

A few patterns come up repeatedly when auditors struggle with CPD.

• Counting audit hours as CPD hours in full. Audit activity and CPD are separate. Do not assume that a busy audit schedule satisfies your CPD requirement.
• Recording time without recording learning. Logging that you spent two hours reading something is not enough. Record what you read and what you took away from it.
• Leaving everything to the last quarter. Cramming CPD into the final months of the year is stressful and often results in lower quality activities chosen for convenience rather than relevance.
• Ignoring standard revisions. When a standard you audit against is updated, studying the changes is not optional. It is a core competence requirement.
• Not keeping evidence. Schemes do not routinely audit every member's CPD records, but when they do, you need to produce evidence. Keep certificates and notes.

How Audit Workshop Supports Your CPD

Audit Workshop delivers training across ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 42001, ISO 37001, and ISO 13485 at Foundation, Internal Auditor, and Lead Auditor levels. Every course generates CPD hours that count toward Exemplar Global and IRCA requirements. Courses are available both live and self paced, which means you can schedule your CPD around your work commitments rather than the other way around.

If you are looking to expand your standard coverage as part of your CPD plan, completing a course in a new standard is one of the most efficient and career relevant ways to do it. Each course is designed by practising auditors with real field experience, so the content reflects what auditors actually encounter rather than a textbook interpretation of the standard.

Whether you are maintaining existing credentials or building toward lead auditor registration, structured training through a recognised provider is the most straightforward way to satisfy your CPD requirements and genuinely develop your capability at the same time.