A special audit is one of the least talked about audit types in ISO circles, yet it is the one that tends to cause the most anxiety when it arrives. Unlike a scheduled surveillance audit or a planned internal audit, a special audit is unplanned. It happens because something specific has occurred that requires an independent assessment outside the normal audit cycle. Understanding what triggers one, what to expect during it, and how to handle it professionally is essential knowledge for any quality manager, auditor, or compliance professional.
On this page
This article explains what a special audit is, how it differs from other audit types, the most common triggers, and what both auditees and auditors need to know when one lands on the calendar without much warning.
Defining a Special Audit
A special audit is an audit conducted outside the planned audit programme in response to a specific event, concern, or circumstance. It is not a routine check. It is initiated because something has happened, or is suspected to have happened, that warrants a closer look at a particular area of the management system.
Special audits can be conducted by any party. A certification body might initiate one following a serious complaint or a significant incident at a certified organisation. An internal audit manager might call one after a major product recall. A client might request one after discovering a supplier has failed to meet contractual obligations. The common thread is that the audit is reactive rather than proactive, and its scope is typically narrower and more targeted than a standard audit.
ISO 19011:2018 and the updated ISO 19011:2026 both recognise that audit programmes need to be flexible enough to accommodate unplanned audits when circumstances demand them. The standard makes clear that the audit programme manager must be prepared to initiate additional audits when significant changes occur or when concerns arise that fall outside the normal schedule.
Exemplar Global Certified Training ProviderRTP No. 310970
How a Special Audit Differs From Other Audit Types
To understand what makes a special audit distinct, it helps to compare it briefly with the audit types it sits alongside.
Surveillance Audits
A surveillance audit is a scheduled, periodic audit conducted by the certification body between recertification audits. It follows a fixed cycle, typically annually, and covers a defined portion of the management system. A special audit, by contrast, is not scheduled and is not part of the standard certification cycle.
Internal Audits
Internal audits are planned in advance as part of the organisation's audit programme and cover the full scope of the management system over a defined period. A special internal audit sits outside this programme and is triggered by a specific event rather than a calendar date.
Follow Up Audits
A follow up audit is conducted to verify that corrective actions from a previous audit have been implemented effectively. It is reactive in the sense that it follows a finding, but it is a defined step in the audit process rather than an emergency response to an unexpected event.
Pre Assessment Audits
A pre assessment audit is voluntary and preparatory. Organisations request them before a certification audit to identify gaps. A special audit is not voluntary in the same way and is rarely something an organisation asks for.
Common Triggers for a Special Audit
Special audits do not happen without a reason. The trigger is always something specific, and the audit scope is shaped by what that trigger is. Here are the most common scenarios that lead to one being initiated.
Significant Incidents or Accidents
A serious workplace incident, a major product failure, an environmental spill, or a data breach can prompt a certification body to initiate a special audit. The purpose is to assess whether the management system failed, whether the organisation responded appropriately, and whether the conditions that led to the incident have been addressed.
For example, if a certified manufacturer experiences a significant product recall due to a quality failure, the certification body may conduct a special audit to assess whether the quality management system under ISO 9001 adequately controlled the process that produced the defective product. This is not a punitive measure. It is an assessment of system integrity.
Serious Customer Complaints
A formal complaint from a customer, particularly one that alleges a systemic failure rather than an isolated incident, can trigger a special audit. Certification bodies take complaints seriously because they reflect on the credibility of the certification itself. If a certified organisation is repeatedly failing to meet customer requirements, the value of the certificate is called into question.
Significant Organisational Changes
When an organisation undergoes major changes, such as a merger, acquisition, relocation, significant change in scope, or a substantial restructure of its operations, a special audit may be warranted. The existing certificate was granted based on the system as it was. Major changes can alter the system in ways that the standard audit cycle would not capture in time.
ISO 19011 guidance on audit programme management specifically acknowledges that significant changes to the organisation or its context should be factored into the audit programme, including the possibility of additional, unscheduled audits.
Regulatory or Legal Issues
If an organisation is found to be in breach of regulatory requirements relevant to its certified management system, a special audit may be initiated to assess the extent of the non compliance and whether the management system is still fit for purpose. This is particularly relevant for ISO 14001 and ISO 45001 certified organisations where legal compliance is a specific requirement of the standard.
Concerns Raised by a Whistleblower or Third Party
Credible allegations from employees, contractors, or other third parties about systemic failures, falsified records, or deliberate non compliance can prompt a special audit. These situations require careful handling, and the audit team needs to approach them with particular attention to objectivity and evidence gathering.
Internal Triggers Within the Audit Programme
Special audits can also be internally initiated. If an internal auditor discovers a significant issue in one area that suggests similar problems may exist elsewhere, the audit programme manager might call an additional audit of the related processes rather than waiting for the next scheduled cycle. This is good risk based audit programme management in practice.
Who Initiates a Special Audit?
The initiating party depends on the context. For external special audits, the certification body is typically the one who decides a special audit is necessary and contacts the certified organisation to arrange it. The organisation does not usually have the option to decline without risking its certification status.
For internal special audits, the audit programme manager, quality manager, or senior management can initiate one. In some cases, the board or executive team may direct that a special audit be conducted following a significant event.
Second party special audits can be initiated by a client organisation that has concerns about a supplier. If a supplier's performance has deteriorated significantly or an incident has occurred that affects the client, the client may exercise its contractual right to conduct an unscheduled audit of the supplier's operations.
What Happens During a Special Audit?
The conduct of a special audit follows the same fundamental process as any other audit. There is an opening meeting, evidence gathering, analysis, and a closing meeting with findings. What differs is the scope and the level of scrutiny applied to the specific area of concern.
Narrow Scope, Deep Focus
Special audits are typically scoped tightly around the triggering event. Rather than reviewing the entire management system, the audit team focuses on the specific processes, clauses, or activities that are relevant to the concern. This means the audit can be conducted more quickly than a full system audit, but the depth of evidence gathering in the targeted area is often greater.
An auditor conducting a special audit after a workplace incident under ISO 45001 might focus exclusively on hazard identification, risk assessment, operational controls, and incident investigation processes. They will not spend time reviewing management review records or training matrices unless those areas are directly relevant to the incident.
Evidence Gathering Is Critical
Because special audits are often triggered by something that has already gone wrong, the evidence gathering phase is particularly important. Auditors need to establish a clear factual picture of what happened, what controls were in place, whether those controls were effective, and what the organisation has done or is doing in response.
If you are an auditor conducting a special audit, your approach to gathering audit evidence needs to be methodical and thorough. Do not rely solely on documents. Interview the people involved. Walk the process. Look for gaps between what the procedures say should happen and what actually happened.
Findings and Outcomes
The outcomes of a special audit can range from a finding of conformity with recommendations for improvement, through to major nonconformities that require immediate corrective action. In serious cases, a certification body may suspend or withdraw certification if the findings indicate that the management system has fundamentally failed or that the organisation is not operating in good faith.
It is worth understanding that a special audit finding does not automatically mean the end of certification. The organisation has the opportunity to respond, implement corrective actions, and demonstrate that the system has been restored to an effective state. The process mirrors what happens after any major nonconformity is raised.
How to Prepare If a Special Audit Is Called
If you receive notification that a special audit is being initiated, resist the urge to panic. The worst thing you can do is attempt to retrospectively create records or coach staff on what to say. Auditors are trained to spot inconsistencies, and any attempt to manipulate evidence will make the situation significantly worse.
Here is a more productive approach.
- Understand the scope. Ask the audit team what specific area or event the audit will focus on. You are entitled to know the audit objectives and scope before the audit begins.
- Gather existing records. Pull together the documented information that is relevant to the scope. Corrective action records, incident reports, training records, monitoring data, and relevant procedures should all be readily accessible.
- Brief relevant staff honestly. Tell the people who will be interviewed what the audit is about and remind them to answer honestly based on what they actually do. Do not script their answers.
- Engage constructively. Treat the special audit as an opportunity to demonstrate that the organisation takes its management system seriously and is capable of responding effectively to problems.
Exemplar Global Certified Training ProviderRTP No. 310970Special Audits and the Audit Programme
From an audit programme management perspective, special audits are a sign that the programme is responsive rather than rigid. A well managed audit programme anticipates the possibility of unplanned audits and has a process for initiating them quickly when needed.
If you are responsible for managing your organisation's internal audit programme, it is worth including a provision for special audits in your programme documentation. Define the circumstances that would trigger one, who has the authority to initiate it, how the scope will be determined, and how findings will be reported and actioned.
This kind of structured approach to unplanned audits reflects the risk based thinking that underpins modern ISO standards and demonstrates to external auditors that your programme is genuinely dynamic rather than a paper exercise.
Special Audits as a Learning Tool
For auditors, a special audit is one of the most instructive experiences available. Because the scope is tight and the stakes are often higher than a routine audit, you are forced to be precise, methodical, and objective under pressure. You cannot rely on a standard checklist. You need to think through the evidence trail specific to the event and follow it wherever it leads.
If you are building your audit experience and want to develop real capability, seek out opportunities to participate in special audits, even in a supporting role. The skills you develop in those situations will make you a significantly better auditor across all audit types.
If you want to build the foundational skills that will prepare you for any audit situation, including unplanned and high pressure ones, the training courses at Audit Workshop are designed around practical, real world audit scenarios rather than theory alone. Whether you are starting with an Internal Auditor course or progressing to Lead Auditor level, the training gives you the tools to handle whatever an audit programme throws at you.
