Launching Soon with 50% off all courses → Browse courses
Auditor Training

How to Conduct an Opening Meeting for an ISO Audit

DL

Dilawar Laghari

Lead Auditor and Trainer19 min read
How to Conduct an Opening Meeting for an ISO Audit

The opening meeting of an ISO audit sets the tone for the entire engagement. Whether you are conducting an internal audit of your own organisation or leading a certification audit as an external auditor, those first thirty minutes will determine whether the auditees cooperate fully, understand what you are looking for, and feel confident in the process. A poorly run opening meeting creates suspicion, defensive attitudes, and missed opportunities for genuine dialogue. A well structured opening meeting establishes credibility, clarifies expectations, and builds the foundation for a thorough and fair audit. This guide walks you through the practical steps of conducting an opening meeting that achieves these outcomes.

Why the Opening Meeting Matters

Many auditors underestimate the importance of the opening meeting. They see it as a formality to be rushed through before getting into the "real" audit work. In practice, the opening meeting is where you address anxiety, manage expectations, and establish the audit's scope and approach. For internal audits, staff members may worry about job security or assume the audit is punitive. For certification audits, organisations often have minimal understanding of what the auditor will actually examine or how long it will take.

The opening meeting is also where you discover critical contextual information that changes how you conduct the audit. An organisation that has recently undergone significant staffing changes, relocated, or experienced a major incident needs a different audit approach than one in stable circumstances. You may learn about planned changes to processes, recent system updates, or resource constraints that affect your audit planning in real time.

From a procedural standpoint, the opening meeting ensures informed consent. Auditees understand what information you will access, how you will conduct interviews, what you will and will not do, and who will receive the audit report. This transparency reduces conflict and demonstrates professionalism.

Build your ISO auditing skills

Self-paced ISO courses built for practitioners. Foundation, Internal Auditor and Lead Auditor levels.

Browse courses

Preparation Before the Meeting

Effective opening meetings do not happen by accident. You must prepare thoroughly beforehand. Begin by reviewing all documentation about the organisation. Read the scope of certification if this is an external audit, review previous audit reports, check for any recent changes to the standard being audited, and familiarise yourself with the organisation's industry and operational context.

For internal audits, obtain copies of the organisation's documented information, understand the audit programme schedule, and clarify which specific processes or departments are within scope. For certification audits, request the quality management system documentation, any audit notices of non conformity from previous audits, and organisational charts showing key personnel.

Review the audit programme to understand the planned schedule and resource allocation. Confirm who will attend the opening meeting, including auditee representatives, process owners, and management representatives. In many organisations, the Quality Manager or an equivalent person coordinates the audit. Ensure you know exactly who this person is and confirm the meeting time at least one week in advance.

Prepare written materials. Even for internal audits, you should provide a one page summary covering audit objectives, scope, methodology, timeline, key contact details, and what to expect. External auditors should provide a more formal opening meeting agenda and any audit team introductions. These materials demonstrate professionalism and provide something auditees can refer to if they forget what was discussed.

Check your audit documentation. Ensure you have your audit plan, checklist or audit programme, and any standards or regulatory requirements you will reference. Have contact details for all audit team members. Ensure your laptop, recorder if using one, and any presentation materials are functioning.

Logistics and Room Setup

The physical environment affects the opening meeting's success. Choose a neutral space if possible. Avoid holding the opening meeting in the auditor's vehicle, a cramped office, or a location where interruptions are constant. The meeting room should have adequate seating for all participants, be reasonably quiet, and have temperature control.

Arrange seating to encourage dialogue rather than confrontation. Sitting across a desk or at the head of a table creates distance. A more relaxed setup with people sitting around a table or in a circle is less intimidating, particularly for internal audits where you want staff to feel comfortable raising concerns.

Ensure you have water and if the meeting is more than one hour, consider tea or coffee. Small courtesies demonstrate respect for people's time. Start on time and respect the agreed duration. If the meeting runs long, ask if participants can stay rather than simply extending without permission.

Opening the Meeting Professionally

Begin with brief personal introductions. State your name, your role, and relevant background. For external auditors, mention your credentials and experience level. For internal auditors, clarify your independence within the organisation (whether you report directly to management or to a specific function). Introduce any other audit team members and their roles.

Keep introductions genuine but brief. An extended personal history is unnecessary and wastes time. Something like "I'm Sarah, a Lead Auditor with Exemplar Global certification and five years of experience in quality management system audits across manufacturing. I am joined today by Tom, an internal auditor from our head office" is sufficient.

Acknowledge the organisation's commitment to quality, environment, or health and safety management, depending on which standard is being audited. This is not empty praise. Reference something specific. For example: "I notice you recently implemented a new supplier quality programme, which demonstrates genuine commitment to continuous improvement." This shows you have prepared and respect the organisation's efforts.

State the audit objective clearly and specifically. Rather than saying "we are conducting an ISO 9001 audit," say something like "We are conducting a surveillance audit to verify your quality management system's continued conformity with ISO 9001:2015 and assess the effectiveness of corrective actions implemented since the last audit in March 2024." This precision helps auditees understand exactly what will happen.

Clarifying Audit Scope

Take time to explicitly define what is within and outside the audit scope. This prevents disagreement later. Walk through the organisational scope: Which departments are included? Which sites? Are all products and services covered, or only specific product lines? What about outsourced processes such as manufacturing or logistics?

For time bound audits, explain how many days the audit will take, which dates, and which hours you will be present. If the audit is split over multiple days or weeks, provide a rough timetable showing which departments or processes will be audited on which days. This allows people to plan their work accordingly.

Explain what the audit does and does not include. For instance, state: "We will examine design processes, manufacturing, quality control, and customer service processes. We will not examine financial records, human resources matters unrelated to the quality system, or any information that is confidential to customers." This clarity prevents surprises and demonstrates that you respect organisational boundaries.

Reference the standard being audited and any regulatory requirements relevant to the industry. If you are auditing against ISO 9001, you might say: "Our audit will verify your system's conformity with the requirements of ISO 9001:2015, particularly clauses 8 and 9, which cover operational and performance evaluation requirements." This grounds the audit in concrete standards rather than leaving it vague.

Describing Your Audit Methodology

Explain how you will actually conduct the audit. This removes mystery and reduces anxiety. Describe the key activities: reviewing documented information, observing work activities, interviewing staff, and examining records. Be specific about what "interviewing" means. Explain that you will talk with people at all levels, from operators to management, and that you want honest feedback about how the system actually works, not how the procedures manual says it works.

Explain that you will visit work areas. If this is a manufacturing environment, tell people you will walk the floor, talk to operators, and watch processes in action. If it is a service environment, you might observe how customer calls are handled or how orders are processed. This prevents people from being startled when you appear in their work area with a clipboard.

Clarify that your role is not to inspect quality or find fault. You are not checking whether products meet specifications or whether customer service is good. You are verifying whether the documented system is being followed, whether the system is effective, and whether it complies with the relevant standard. This distinction is crucial. Staff often assume auditors are looking for quality failures rather than system conformity.

Explain what you will do with information. Will you observe confidentiality? Will you attribute statements to individuals or report them anonymously? For internal audits, clarify that you are not reporting individual performance to management but rather identifying system improvements. For certification audits, explain that individual feedback is confidential but process findings will be included in the audit report.

If you are using an audit checklist, explain how it guides your audit but does not limit it. Tell auditees that you may ask questions beyond what is written on the checklist based on what you observe or what they tell you. This prevents them from thinking the audit is mechanically ticking boxes.

Addressing Audit Evidence and Documentation

Explain what documentation you will need to access. Will you need to examine the quality manual? Will you review procedures? Do you need access to records such as calibration certificates, training records, or complaint logs? Will you want to see emails or communications? Being specific prevents situations where you ask for something later and people are uncertain whether they should provide it.

Clarify your right of access and any limitations. Some documentation may be confidential or protected. Some organisations have legal restrictions on what external parties can see. Discuss these openly rather than having them emerge during the audit. If you cannot access something you need, it is better to know this in the opening meeting and adjust your audit plan accordingly than to discover it midway through.

Explain how you will gather evidence. Will you take photographs? Record observations in writing? Ask people to demonstrate procedures? Do you need copies of documents or can you review them on screen? These practical details matter to auditees and prevent misunderstandings.

For gathering audit evidence that can withstand scrutiny, explain your specific approach in the opening meeting. If you will be using recording equipment, ask for permission explicitly. If you will be taking photographs, explain why and where. Transparency here builds trust.

Walking Through the Audit Timeline

Provide a practical timeline for the audit. If this is a three day audit, walk through what will happen each day. For example:

  • Day 1 morning: opening meeting, management interviews, and review of quality documentation
  • Day 1 afternoon: process observation and process owner interviews
  • Day 2: detailed examination of procedures and records in specific departments
  • Day 2 afternoon: follow up interviews and clarification of findings
  • Day 3 morning: completion of any outstanding observations and preliminary conclusion discussion
  • Day 3 afternoon: closing meeting

Clarify when you will be available. Will you be present five days a week during standard business hours, or do you need access outside these times? Do you need access to night shift operations? Will you break for lunch with the organisation or bring your own food? These practical details help people plan their days.

Ask about organisational constraints. Are there times when you cannot audit particular areas due to safety requirements, customer visits, or scheduled downtime? Are there staff members on leave? Are there planned maintenance activities that might affect what you can observe? The more you understand about the organisation's calendar, the better you can structure your audit to be minimally disruptive.

Explain that timelines are provisional. You will adjust based on what you find. If something unexpected emerges, you may spend more time in one area and less in another. If significant non conformities are identified, you may need to dig deeper. Auditees should understand that audits are not inflexible and you will be responsive to emerging information.

Discussing Audit Findings and Reporting

Explain how you will communicate findings as the audit progresses. Will you hold daily debriefs? Will you provide verbal feedback at the end of each day or collect all findings for the closing meeting? Different auditors use different approaches, and auditees should know what to expect.

Be clear about terminology. Explain the difference between observations, findings, and non conformities. An observation might be something interesting but not problematic. A finding is something that does not conform to requirements. A non conformity is a finding severe enough to affect certification or system effectiveness. Understanding what constitutes each category helps auditees understand what you are looking for.

Explain that you will provide an audit report. For internal audits, clarify who receives the report, whether it is shared organisation wide, and who sees the detailed findings. For certification audits, explain that non conformities must be corrected and you will follow up during surveillance audits to verify corrective actions. Explain timelines for corrective action responses.

Discuss the closing meeting. Explain that you will present preliminary findings at the closing meeting. Auditees will have an opportunity to provide context or clarification about any findings. Clarify whether the final report is provided at the closing meeting or sent later.

Addressing Questions and Concerns

Allocate time for genuine questions. Ask "What questions do you have about how this audit will work?" and pause. Do not rush to fill silence. Often, people are quiet for several seconds before asking questions. If you jump in immediately, you may suppress questions that should be answered.

Answer questions directly. If someone asks whether you will be looking for specific things, answer honestly. If someone expresses concern about a particular area, listen and address it. For instance, if the Quality Manager says "We recently had turnover in our purchasing department and the new staff are still learning," you might say "That is helpful context. I will spend extra time understanding the purchasing process and reviewing recent records to ensure consistency." This shows you are listening and willing to adjust.

If you do not know the answer to a question, say so. Do not bluff. If someone asks about a specific requirement of the standard and you are not immediately certain, you can say "That is a good question. Let me verify the exact wording and confirm during our documentation review." This maintains credibility.

If someone is anxious or hostile, acknowledge it. You might say "I understand you may have concerns about this audit. Our aim is to verify that your system is working effectively and complies with the standard, not to find fault. I encourage you to ask questions and let me know if you have concerns as we proceed." Direct acknowledgment of emotion often reduces it.

Key Ground Rules

Establish clear ground rules for the audit. Explain that you need honest information and that providing accurate responses is more important than providing answers you think the auditor wants to hear. You might say: "I want you to tell me how things actually work. If someone is not following a procedure, I want to know. If a process is not working as intended, I want to know. I am here to understand the system as it is, not how it is supposed to be on paper."

State your confidentiality approach. Explain that what people tell you in interviews will be treated confidentially. Individual comments are not attributed to people by name in reports (unless there is a safety issue or serious breach of requirements). Process findings are reported, but not individual performance.

Clarify how you want to be treated and what you need. Do you prefer to be escorted by a designated person or do you want to move around independently? Should people interrupt you if something urgent comes up, or should they wait until a break? Do you want to be notified when people are available for interviews or should you approach them?

Ask about safety requirements. If this is a manufacturing or construction environment, you may need to wear personal protective equipment, follow safety inductions, or respect restricted areas. Ask about these requirements explicitly so you can comply fully.

Common Pitfalls in Opening Meetings

Avoid being overly formal or distant. Some auditors adopt a severe demeanor thinking it demonstrates authority. In practice, it creates unnecessary anxiety. Be professional but approachable. Smile. Make eye contact. Show genuine interest in the organisation and the people you will be working with.

Do not speak at excessive length. Aim for opening meetings of 45 to 60 minutes maximum. If you are still talking after an hour, you have covered too much detail or have become tangential. Respect people's time.

Avoid making commitments about outcomes. Do not say "I am sure this will go smoothly" or "I anticipate no major issues." You do not yet know what you will find. Maintain objectivity. You can be positive about the organisation's commitment without prejudging your findings.

Do not be defensive if people seem dismissive or skeptical. Some organisations have poor experiences with previous auditors or view audits as compliance theater. Do not react emotionally. Instead, focus on demonstrating through your professionalism that this audit will be different.

Avoid jargon unless you are confident auditees understand it. Terms like "documented information," "nonconformity," "continual improvement," and "risk based approach" are standard in ISO circles but may be unfamiliar to front line staff. Define terms the first time you use them, particularly in internal audits where staff may have limited quality management system experience.

Documenting the Opening Meeting

Make a brief note of key information discussed in the opening meeting. Document the date, time, attendees, key points discussed, questions raised, and any special requirements or constraints. This provides a record and is useful if later there is any dispute about what was agreed.

For formal audits, you might include a section in your audit report confirming opening meeting details. For internal audits, a simple email to the Quality Manager summarising the opening meeting discussion is sufficient.

Record any commitments made. If you said you would provide additional information, clarify what, when, and to whom. If auditees asked for something specific, note it. If there were accessibility issues or special requirements, record them. This demonstrates follow through and professionalism.

Closing the Opening Meeting

End the opening meeting with clear next steps. Confirm the audit will commence at a specific time on a specific day. Confirm who will meet you first and where. Confirm contact details for key people if you have questions before the audit starts.

Thank people for their time and cooperation. A simple "Thank you for taking the time to meet with me today. I look forward to working with your team over the next few days" is genuine and professional. It sets a positive tone for the audit itself.

Ask if anyone has final questions before you finish. This gives a final opportunity for important issues to surface. Do not rush to pack up your materials immediately. A few seconds of silence gives people time to think of something they forgot to ask.

If you are an external auditor conducting a certification audit, provide written confirmation of the opening meeting details. A brief email sent that evening summarising what was discussed ensures there is no misunderstanding about scope, timeline, or expectations.

After the Opening Meeting

Before you begin the actual audit, review your notes from the opening meeting and adjust your audit plan if necessary. If you learned that a key process is undergoing changes, spend more time in that area. If staff turnover has been high, adjust your sampling of records and interviews to account for this. If there are access restrictions you did not anticipate, adjust your audit scope accordingly.

Share any critical information with your audit team if you have one. If there are sensitive areas, safety requirements, or contextual information that should shape how the audit is conducted, brief your team before the first day begins.

If you identified any immediate concerns in the opening meeting, think about how to address them. For instance, if someone expressed serious concern about a procedure not being followed, you may want to investigate this early in your audit rather than waiting until a scheduled time.

Internal Audit Specific Considerations

Internal audits have some differences from external certification audits. The opening meeting is often less formal. You may be more familiar with the organisation and the people may be your colleagues. However, the opening meeting remains essential.

As an internal auditor, emphasise that your audit is about improving the system, not evaluating people. Staff may be more relaxed with an internal auditor, but they may also be more suspicious if they perceive you are providing ammunition for management to use against them. Be clear that you are independent and focused on system effectiveness.

If you are conducting your first internal audit, understanding the foundations of internal auditing helps you conduct the opening meeting with confidence. You should know the relevant standard requirements, understand your organisation's policy on internal audits, and be clear about your reporting relationship.

In internal audits, the opening meeting is often combined with a brief orientation in the specific department or process area. Rather than sitting in a meeting room for an hour, you might spend 15 minutes confirming scope and objectives, then walk through the work area with the process owner to understand layout, key processes, and relevant personnel.

External Audit Specific Considerations

External auditors conducting certification audits typically have more formal opening meetings. You represent the certification body and your professionalism directly reflects on their reputation. Take the opening meeting seriously.

Certification audits often have multiple audit team members. Ensure clear coordination between team members about what has been agreed in the opening meeting. If team members are working in different departments, they need to understand whether different access arrangements have been negotiated.

External auditors should provide written materials in advance. A formal audit plan or opening meeting agenda sent a week before the audit demonstrates professionalism and allows the organisation to prepare properly.

In certification audits, the opening meeting is where you establish the organisation's understanding of your independence. They need to know you are not there to help them pass but to independently verify their conformity with the standard. You can do this respectfully and professionally.

Audit Workshop offers accredited ISO auditor training at Foundation, Internal Auditor, and Lead Auditor levels for ISO 9001, ISO 14001, and ISO 45001. Our courses are Exemplar Global recognised and include practical exercises, case studies, and assessment support.

Frequently Asked Questions

Typically 45 to 60 minutes is appropriate for most audits. An internal audit of a small organisation might take 30 minutes. A certification audit with a large organisation or one with significant scope changes might take 90 minutes. The key is allowing adequate time for questions and discussion without becoming so detailed that you lose people's attention. If you are still talking after 90 minutes, you have covered too much information or have gone too deep into technical details better addressed during the audit itself.

Start Learning

Ready to Build Real Audit Skills?

Join practitioners training with ISO auditors who've conducted 500+ external certification audits.

Auditing Skills Workshop
View Details
A$ 247Launch Offer
Auditing Skills Workshop
  • Skill Based
  • Virtual Blended
ISO 45001:2018 Lead Auditor Training
Coming Soon
View Details
ISO 45001:2018 Lead Auditor Training
  • Lead Auditor
  • Self-Paced Online