Why Remote Internal Audits Are Now a Permanent Feature
Remote internal audits are no longer a workaround. What started as a necessity during the pandemic has become a recognised and accepted method of conducting ISO internal audits across all three major standards: ISO 9001, ISO 14001, and ISO 45001.
On this page
Organisations with multiple sites, distributed teams, or staff working from home have discovered that a well-run remote audit can be just as effective as an on-site visit, provided the auditor prepares properly and uses the right techniques. The challenge is not the technology. The challenge is maintaining audit rigour when you cannot walk the floor, observe work in progress, or read the room the way you can face to face.
This guide covers everything you need to run a remote internal audit that produces genuine findings, not a tick-box exercise conducted over a video call.
What Remote Auditing Actually Means
A remote audit is one conducted without the auditor being physically present at the location being audited. This can mean fully remote, where the entire audit is conducted via video conferencing and document sharing, or partially remote, where some sessions are conducted online and others on site.
For internal audits, fully remote is increasingly common. You might be auditing a branch office in another city, a team that works from home, or a process owner who is rarely in the one location. The ISO framework supports this. Remote auditing under ISO standards has been formally acknowledged in guidance documents, and ISO 19011 now includes specific considerations for technology-assisted auditing methods.
What does not change remotely is the audit itself. You still need a scope, objectives, criteria, an audit plan, evidence, findings, and a report. The method of gathering evidence changes. The standard you are auditing against does not.
Planning a Remote Internal Audit
Start With a Clear Scope and Objectives
This matters more in a remote audit than in an on-site one. When you are physically present, you can adapt on the fly. You walk past a storage area, notice something, and follow the thread. Remotely, you need to be more deliberate about what you intend to cover and how.
Define your scope clearly. Which processes, clauses, or sites are included? What are the audit objectives? Are you verifying conformance, assessing effectiveness, or both? Document this before you send out the audit plan so auditees know what to prepare.
If you are working from an annual audit programme, make sure the remote format is reflected in the scheduling. Some processes lend themselves to remote auditing better than others. Document-heavy processes like management review, documented information control, training records, and supplier evaluation are well suited to remote methods. Physical processes like production, warehouse operations, or on-site environmental controls are harder to audit remotely and may require a hybrid approach or a camera-assisted walkthrough.
Notify Auditees Early and Be Specific
Auditees need more preparation time for a remote audit, not less. They need to gather documents in advance, ensure they have the right technology, and arrange for records to be accessible during the session.
Send the audit plan at least a week before the audit. Include the specific processes and clauses you intend to cover in each session, the names of the people you want to speak to, and a list of documents or records you will want to review. Be specific. Asking for “relevant training records” is vague. Asking for “training records for the three most recently onboarded employees in the production team” gives the auditee something concrete to prepare.
Also confirm the technology platform you will use. Whether it is Microsoft Teams, Zoom, Google Meet, or something else, make sure both parties can access it and that screen sharing works. Test this before the audit day.
Technology Setup That Actually Works
Video Conferencing Is Not Optional
Conducting a remote audit by phone alone is not adequate. You need video. Facial expressions and body language carry a lot of information during an audit interview. You need to see when an auditee looks uncertain, when they are reaching for a document, or when they are checking with a colleague off screen.
Ask auditees to keep their cameras on throughout the session. This is a reasonable request and helps maintain the professional tone of the audit. If there are genuine technical reasons why video is not possible for part of the session, that is fine, but make it the exception rather than the default.
Document Sharing Arrangements
Agree on how documents will be shared before the audit starts. There are several workable approaches. The auditee can share their screen and navigate documents while you observe. They can upload documents to a shared folder in advance. They can use screen share to show you records in real time, including navigating to specific entries in a database or quality management system.
Each approach has trade-offs. Screen share is good for live navigation but can be slow if the auditee is not confident with technology. Pre-uploaded documents give you time to review before the session but may not capture the most current version. Discuss this with the auditee coordinator when you send the audit plan.
Keep a record of every document you review, including the document title, version, and date. This forms part of your audit evidence and should be noted in your working papers just as it would be in an on-site audit. For more on what counts as audit evidence and how to record it properly, see our guide on gathering audit evidence that stands up to scrutiny.
Camera-Assisted Site Walkthroughs
For processes that involve a physical environment, such as a workshop, laboratory, warehouse, or construction site, consider a camera-assisted walkthrough. This involves the auditee or a guide walking through the area with a mobile device or laptop camera while you observe remotely.
This is not a perfect substitute for being there in person. You cannot smell a chemical storage area, feel whether a surface is clean, or get a sense of the overall housekeeping standard the way you can when you walk in yourself. But it is far better than skipping the physical element entirely.
Brief the guide beforehand. Tell them what you want to see: specific equipment, storage areas, signage, control measures, or work in progress. Ask them to slow down at points of interest and to be willing to zoom in or pan around on request. Treat it like directing a camera operator, because that is essentially what you are doing.
Conducting the Remote Audit Sessions
Opening Meeting
The opening meeting is just as important in a remote audit as it is on site. Do not skip it or treat it as a brief formality. Use it to confirm the scope and objectives, introduce yourself, explain the audit process, remind auditees of confidentiality, and invite questions.
In a remote setting, it can be harder to establish rapport. You are looking at faces on a screen rather than shaking hands in a meeting room. Spend a few extra minutes at the start of the opening meeting building that connection. Ask a straightforward question about how the team has been managing the process since the last audit. This gets people talking and signals that you are there to understand, not to catch them out.
Interview Technique in a Remote Setting
Remote interviews require more deliberate technique than face-to-face ones. Silences feel longer on video. Interruptions happen more easily. Background noise, poor audio, and connection drops all disrupt the flow.
Use open questions and give auditees time to answer. If there is a pause, resist the urge to fill it immediately. The auditee may be thinking, or they may be navigating to a document. Watch their screen if they are sharing it. Ask follow-up questions based on what you observe, not just what they say.
Keep your sessions to a manageable length. Two hours is about the maximum for a focused remote interview before concentration drops on both sides. If you need to cover more ground, schedule a break or split the session across two calls. Audit fatigue is real, and it is amplified in a remote setting where you are staring at a screen rather than moving between rooms.
Sampling Records Remotely
Audit sampling works the same way remotely as it does on site. You ask for a sample of records, review them, and draw conclusions about the population. The difference is that you are relying on the auditee to navigate to the records rather than picking them yourself.
This is a genuine limitation of remote auditing. In an on-site audit, you might walk to the filing cabinet and pull a record yourself, which removes the possibility that the auditee has pre-selected records they know are compliant. Remotely, you need to ask for specific records by name, date, or reference number to reduce the risk of cherry-picking.
One practical approach: ask the auditee to show you a list of all records in a given category, then you nominate which ones you want to review. For example, ask them to open the training register and show you the full list of training completed in the last six months. Then you select three or four records to examine in detail. This gives you more control over the sample without being adversarial about it.
Common Challenges and How to Handle Them
Technical Failures Mid Audit
Connections drop. Screens freeze. Audio cuts out. Plan for this. Have a backup contact method ready, whether that is a phone number, a different platform, or an agreed process for reconnecting. If a significant portion of a session is lost due to technical issues, reschedule rather than trying to rush through the remaining content. A half-completed audit session is not adequate evidence.
Auditees Who Are Disengaged or Distracted
Remote settings make it easier for auditees to be distracted by emails, colleagues, or their phone. If you notice someone is not engaged, name it directly but professionally. Something like: “I want to make sure we cover this properly. Can we pause for a moment and make sure we have your full attention?” is reasonable and appropriate.
If the problem is structural, meaning the auditee is trying to manage their normal workload during the audit session, that is a planning failure. Raise it with the audit coordinator and reschedule the session if necessary. An audit conducted with a distracted auditee is not a reliable audit.
Processes That Cannot Be Audited Remotely
Be honest about the limitations of your remote audit. Some things genuinely cannot be verified without being on site. Physical controls, actual work practices, the condition of equipment, and the behaviour of workers in their normal environment are all harder to assess remotely.
Document these limitations in your audit report. Note which elements were audited remotely and which could not be fully assessed due to the remote format. Recommend that these elements be included in a future on-site audit. This is not a failure. It is professional honesty, and it is exactly what ISO 19011 guidance on remote auditing expects.
Documenting and Reporting Remote Audit Findings
Your audit report for a remote audit should look the same as one produced from an on-site audit. It needs to include the audit objectives, scope, criteria, methodology, a summary of findings, any nonconformities with supporting evidence, observations, and the audit conclusion.
Add a brief note in the methodology section describing how the audit was conducted remotely, what platforms were used, and any limitations encountered. This gives the reader context and demonstrates that you have been transparent about the audit method.
Nonconformities raised in a remote audit carry exactly the same weight as those raised on site. Do not soften findings because the audit was remote. If the evidence supports a nonconformity, write it up clearly and reference the specific clause and the evidence you reviewed. For guidance on writing findings that hold up to scrutiny, the post on how to write a nonconformity report that actually gets fixed covers this in detail.
Maintaining Auditor Independence Remotely
Auditor independence is a core principle under ISO 19011, and it does not change in a remote setting. You should not audit processes you are responsible for, and you should not allow the remote format to reduce your professional objectivity.
One risk specific to remote auditing is over-reliance on what the auditee chooses to show you. When you are on site, you can observe things independently. Remotely, you are largely dependent on the auditee to navigate to the evidence. This means you need to be more proactive about asking to see specific things, more willing to ask follow-up questions when something does not add up, and more careful about forming conclusions based on a limited view of the evidence.
If something feels incomplete, say so. Ask to see more. A good auditee will not object. If they do, that itself is worth noting.
Building Remote Auditing Into Your Annual Programme
Remote auditing should not be an afterthought or a fallback. Build it deliberately into your annual internal audit programme. Identify which processes and sites are well suited to remote auditing, which require on-site visits, and which might benefit from a hybrid approach.
For multi-site organisations, remote auditing can dramatically reduce the cost and time of maintaining a comprehensive audit programme. A site that previously required a full day of travel and on-site auditing might be covered effectively in a three-hour remote session for document-heavy processes, with an on-site visit every second or third cycle for the physical elements.
Review the effectiveness of your remote audits as part of your audit programme review. Are findings from remote audits comparable in depth and quality to those from on-site audits? Are there recurring gaps that suggest certain processes need more on-site attention? Use this data to refine your approach over time.
Training for Remote Auditing
Conducting a remote audit well requires the same foundational skills as any audit, including planning, interviewing, evidence gathering, and report writing, plus an additional layer of technical and interpersonal competence specific to the remote format.
If you are building your auditing skills from the ground up, a structured internal auditor course will cover the core competencies you need. The remote-specific skills can then be developed through practice and by reviewing guidance like ISO 19011. Audit Workshop's internal auditor training covers the full audit process including evidence gathering, interview technique, and report writing, all of which translate directly into the remote context.
If you are already an experienced internal auditor looking to sharpen your remote auditing practice, consider reviewing the changes to remote auditing under ISO standards and applying the ISO 19011 guidance on technology-assisted methods to your current programme.
