Remote Auditing Is Now a Standard Part of the Job
A remote audit is an audit conducted without the auditor being physically present at the auditee's location. Instead of walking the site, the auditor connects via video conferencing, reviews documents shared through secure platforms, and interviews personnel online. The remote audit follows the same structured process as an on-site audit, but the methods for gathering evidence are adapted to work across a digital connection.
On this page
If you have been involved in ISO auditing over the past several years, you will have noticed that remote audits are no longer an emergency workaround. They are a recognised, documented audit method covered in ISO 19011 guidance and used routinely by certification bodies, internal audit teams, and second party auditors around the world. Understanding what a remote audit is, how it differs from on-site auditing, and where it works well versus where it falls short is now core knowledge for any practising auditor.
What Makes an Audit “Remote”?
The defining characteristic of a remote audit is that the auditor and auditee are in different physical locations throughout the audit. Everything that would normally happen face to face happens instead through technology. Document requests go through shared folders or document management systems. Interviews happen via video call. Facility walkthroughs, where they are attempted at all, are conducted using live video feeds from a mobile device or fixed camera.
Remote audits are sometimes called virtual audits or desktop audits, though these terms are used loosely and not always consistently. A desktop audit typically refers to a review of documentation only, without any live interaction. A remote audit usually includes real-time interviews and may include some form of virtual site observation. The distinction matters because the depth of evidence you can gather differs significantly between the two approaches.
Exemplar Global Recognised Training ProviderRTP No. 310970
Types of Remote Audits
Fully Remote Audits
In a fully remote audit, every element of the audit is conducted off-site. Document review, interviews with management and operational staff, and any observable evidence are all gathered through digital means. Fully remote audits work best for management system elements that are largely document-based, such as policy review, planning documentation, management review records, and corrective action registers.
Hybrid Audits
A hybrid audit combines remote and on-site activity. The auditor might conduct the document review and management interviews remotely, then attend site for a targeted period to observe operational processes, inspect physical controls, or verify records that cannot be adequately reviewed digitally. Hybrid audits are increasingly common for certification audits where the certification body wants some level of physical presence but also wants to reduce travel time and cost.
Remote Surveillance Audits
Many certification bodies now conduct surveillance audits partially or fully remotely, particularly for organisations that have a strong compliance history and well-maintained documented systems. The logic is straightforward: if the organisation has demonstrated conformity over multiple audit cycles, a remote review of records and a video interview with the management team can provide sufficient evidence of continued conformity between on-site visits.
How a Remote Audit Actually Works
Planning and Preparation
The planning phase for a remote audit is more demanding than for an on-site audit, not less. The auditor needs to confirm what technology the auditee can access, agree on the platform to be used for video calls and document sharing, establish how evidence will be submitted and stored, and set a clear schedule that accounts for the limitations of remote interaction.
Document requests need to go out earlier than they would for an on-site audit. When you are on-site, you can ask for a document and someone can retrieve it in minutes. Remotely, you are dependent on the auditee having documents ready and accessible in a shared location before the session begins. Checklists and audit plans need to be shared with the auditee in advance so they can have the right people available at the right times.
The Opening Meeting
The opening meeting happens via video conference. It covers the same ground as an on-site opening: audit objectives, scope and criteria, the schedule for the day, how findings will be communicated, and the process for raising questions or concerns. The auditor should confirm that all participants can see and hear clearly, that document sharing is working, and that a guide or technical contact is available to assist with navigating the auditee's systems remotely.
Document Review
Document review in a remote audit typically happens through a shared drive, a document management system, or a secure file transfer. The auditor works through the documents on screen, often while the auditee is available on a video call to answer questions in real time. Screen sharing is useful here. The auditor can ask the auditee to navigate their system, pull up a specific record, or demonstrate how a process is documented, which gives the auditor a more realistic picture of how the system operates than simply receiving a static PDF.
Interviews
Interviews remain the core of any remote audit. The auditor speaks with managers, process owners, and operational staff via video call, using the same open and probing questions they would use on-site. The main challenge is that remote interviews can feel more formal and stilted than in-person conversations. Auditees who are nervous or defensive may be harder to read without body language cues. Auditors need to be more deliberate about building rapport at the start of each session and more patient when waiting for responses.
One practical tip: schedule interviews with operational staff separately from managers. When a supervisor is sitting in the same room as the person being interviewed, you rarely get candid answers. Remotely, you can structure separate video calls to avoid this issue.
Virtual Site Observation
Where the audit scope requires observation of physical processes, the auditor can request a live walkthrough using a mobile device. A guide at the site carries a phone or tablet and walks through the area of interest while the auditor watches via video. This is not a substitute for being on-site. Camera angles are limited, lighting can be poor, and the auditor cannot independently direct their own attention to something they notice in the background. But it is far better than no observation at all, and for lower-risk areas it can provide adequate evidence.
The Closing Meeting
The closing meeting follows the same structure as on-site: the auditor presents findings, classifies any nonconformities or observations, and confirms the next steps. In a remote setting, it is good practice to share a summary document on screen during the closing meeting so participants can follow along and there is no ambiguity about what has been recorded.
When Remote Audits Work Well
Remote auditing is well suited to certain types of audits and certain types of organisations. It tends to work best when:
- The management system is mature and well-documented, with records that are genuinely accessible electronically
- The audit scope focuses on management system elements rather than physical processes or site conditions
- The organisation has a strong compliance history and the audit is a routine surveillance or follow-up activity
- The auditee is geographically remote and travel would be disproportionately costly relative to the audit scope
- The audit is for an office-based or service organisation where there is little physical infrastructure to inspect
For internal audit programmes, remote auditing opens up the ability to audit remote sites, interstate offices, or overseas operations without the cost and time of travel. An internal auditor based in Sydney can conduct a structured remote audit of a Queensland branch operation in a single day, which would otherwise require two days of travel and overnight accommodation.
Where Remote Audits Fall Short
Remote auditing has real limitations that experienced auditors are honest about. The most significant is the inability to observe physical conditions directly. If you are auditing a manufacturing facility, a construction site, a warehouse, or any environment where the physical state of equipment, housekeeping, signage, or personal protective equipment matters, a video feed through a phone camera will not give you the same confidence as walking the floor yourself.
There are also risks around document authenticity. When documents are submitted electronically, the auditor has less ability to verify that what they are seeing is the current, controlled version actually in use, rather than a document prepared specifically for the audit. On-site, you can ask to see the copy on the wall, the version in the folder at the workstation, or the record on the system terminal in the work area. Remotely, you are more dependent on trust and cross-referencing.
Auditee coaching is another concern. In a remote audit, it is easier for a manager to sit off-camera and prompt an employee during an interview, or for multiple people to be present in the room without the auditor being aware. Auditors should ask at the start of each interview who else is present in the room, and should be alert to unnatural pauses or responses that seem rehearsed.
For more on the practical techniques that help remote audits produce reliable evidence, the post on remote audit techniques that actually work covers specific methods in detail.
What ISO 19011 Says About Remote Auditing
ISO 19011 provides guidelines for auditing management systems. The 2018 edition acknowledged remote auditing as an audit method, and the 2026 revision has expanded this guidance further, recognising the role of digital tools and addressing the specific considerations that apply when audits are conducted remotely. The standard does not prescribe which audit method to use, but it does require that the audit programme manager consider the feasibility of remote methods and document the rationale for the approach chosen.
ISO/IEC TS 17012 is a separate technical specification that provides more detailed guidance specifically on remote audits for conformity assessment. Certification bodies operating under IAF accreditation are expected to follow this guidance when conducting remote certification audits. For internal auditors and second party auditors, ISO 19011 is the primary reference.
The post on remote auditing under ISO standards and what has changed goes deeper into how the standards framework has evolved to accommodate virtual audit methods.
Technology Requirements for Remote Audits
A remote audit is only as effective as the technology supporting it. At a minimum, both parties need a reliable internet connection, a video conferencing platform that all participants can access, and a method for sharing documents securely. In practice, this usually means agreeing on a platform in advance, testing the connection before the audit day, and having a backup plan if the technology fails.
Common platforms used for remote audits include Microsoft Teams, Zoom, and Google Meet for video conferencing, combined with SharePoint, Google Drive, or a dedicated document management system for file sharing. The auditor should confirm during the planning phase that the auditee's IT environment allows access to the chosen platform, particularly if the organisation has firewall restrictions or requires VPN access for external users.
Screen sharing is a valuable tool. Asking the auditee to share their screen while navigating their document management system gives the auditor a more realistic view of how records are maintained than receiving a batch of PDFs. It also makes it harder to present a curated selection of documents while hiding others.
Remote Auditing as an Internal Auditor
For internal auditors, remote auditing is a practical skill that extends the reach of the internal audit programme without requiring significant additional resources. If your organisation has multiple sites, remote auditing allows you to maintain audit frequency across all locations rather than concentrating audit effort on the sites closest to your office.
The key discipline for internal auditors conducting remote audits is maintaining the same rigour as you would on-site. It is easy to let a remote audit become a document review with a brief conversation attached. The audit should still follow a structured plan, include substantive interviews with relevant personnel, and produce findings that are supported by specific evidence rather than general impressions.
The post on running remote internal audits provides a practical walkthrough for internal audit teams setting up remote audit processes for the first time.
Remote Auditing as a Lead Auditor
Lead auditors conducting remote certification or second party audits carry additional responsibilities. They need to plan the audit to account for the limitations of remote methods, allocate additional time for document review and technical setup, and make a professional judgement about whether the remote approach will yield sufficient evidence for the audit conclusion.
Where the lead auditor determines that remote methods cannot adequately cover part of the audit scope, they should document this and either arrange for an on-site component or flag the limitation clearly in the audit report. Signing off on a remote audit conclusion when you know the evidence base is insufficient is a professional integrity issue, not just a procedural one.
Lead auditors also need to manage remote audit teams effectively. When team members are conducting parallel remote interviews from different locations, communication between auditors during the audit day becomes more deliberate. Daily debriefs and clear handover protocols between team members are essential.
Exemplar Global Recognised Training ProviderRTP No. 310970Preparing for a Remote Audit as the Auditee
If your organisation is about to be audited remotely, whether by an internal auditor, a second party auditor, or a certification body, the preparation is similar to an on-site audit but with additional attention to document accessibility and technology readiness.
Organise your documents in a shared folder structure that mirrors the audit plan. Test your video conferencing setup in advance. Confirm who will be available for interviews and at what times. Arrange for a technical guide who can navigate your document management system during the audit if needed. And brief your staff on the process so they are not caught off guard by a video call from an auditor they have never met.
The post on how to prepare your organisation for an external audit covers the broader preparation process, much of which applies equally to remote and on-site audits.
The Future of Remote Auditing
Remote auditing is not going away. The combination of improved technology, reduced travel budgets, and growing auditor familiarity with virtual methods means remote and hybrid audits will remain a significant part of the audit landscape. Certification bodies have invested in developing remote audit protocols, and most now have established procedures for conducting surveillance audits and even initial certification audits with a significant remote component.
For auditors, this means that competence in remote audit methods is no longer optional. Understanding how to plan a remote audit, how to gather reliable evidence through digital channels, how to conduct effective video interviews, and how to document the limitations of the remote approach are all skills that belong in the modern auditor's toolkit.
If you are building your auditing skills and want practical training that covers both on-site and remote audit methods, the courses at Audit Workshop are designed to reflect how auditing actually works today, not just the theory. Whether you are starting with an Internal Auditor course or working toward Lead Auditor certification across ISO 9001, ISO 14001, or ISO 45001, the training covers the real skills you need to conduct audits that produce reliable, defensible results in any format.
