Witness Audits and Audit Logs for Certification: What You Need to Know

Why Witness Audits and Audit Logs Matter for Your Career

If you are working toward formal auditor certification through Exemplar Global or IRCA, you will quickly encounter two requirements that trip up a lot of candidates: the witness audit and the audit log. These are not administrative formalities. They are the mechanisms that certification bodies use to verify that you can actually conduct an audit, not just that you sat through a course and passed an exam.

Understanding what a witness audit involves, how to structure your audit log, and what assessors are actually looking for will save you a significant amount of time and frustration. This article walks through both requirements in practical terms, drawing on real experience from the field.

What Is a Witness Audit?

A witness audit is an assessment in which a qualified assessor observes you conducting a real audit. The assessor watches how you plan, open, gather evidence, interview auditees, manage your time, and present findings. They are not there to help you. They are there to evaluate whether you demonstrate the competencies required for auditor certification.

For a detailed explanation of the format itself, see our article on what a witness audit is. This article focuses on how to prepare for one and how to pass it.

Who Requires a Witness Audit?

Both Exemplar Global and IRCA require witness audits as part of the certification pathway for lead auditors. The specific requirements differ slightly between schemes, but the core concept is the same: you must demonstrate auditing competence under observation before you can be certified as a lead auditor.

Some certification schemes allow you to complete a witness audit during a lead auditor training course, where the course trainer acts as the assessor during role plays or simulated audits. Others require a witness audit conducted in a real organisational setting. If you are serious about building a credible auditing career, a real audit setting is far more valuable, even if a simulated one satisfies the formal requirement.

What the Assessor Is Looking For

Assessors use a structured competency framework when observing you. They are not just watching whether you ask questions. They are evaluating specific behaviours across the full audit cycle. Common competency areas include:

• Preparation and planning: Did you review relevant documents before the audit? Did you develop a focused audit plan and checklist?
• Opening meeting conduct: Did you establish the scope, objectives, and method clearly? Did you create a professional but approachable tone?
• Evidence gathering: Did you use a mix of document review, observation, and interviews? Did you follow audit trails rather than just ticking checklist boxes?
• Interview technique: Did you use open questions effectively? Did you probe appropriately without becoming confrontational?
• Finding classification: Did you correctly identify nonconformities, observations, and opportunities for improvement?
• Closing meeting: Did you present findings clearly, accurately, and without ambiguity?
• Time management: Did you keep the audit on schedule?

The assessor will complete an evaluation form and provide you with feedback. If you fall short in a competency area, you may be required to complete a further witness audit before certification is granted.

How to Prepare for a Witness Audit

Preparation is where most candidates either build confidence or create unnecessary anxiety. The candidates who perform well in witness audits are almost always those who have done the groundwork before the assessor arrives.

Know the Standard Inside Out

You cannot audit what you do not understand. Before a witness audit, make sure you have a solid working knowledge of the relevant standard, whether that is ISO 9001, ISO 14001, ISO 45001, or another. You need to know not just what the clauses say, but what conforming evidence looks like in practice.

This means understanding the difference between what a clause requires and how an organisation might meet that requirement. A clause might require documented information to be available. The evidence might be a procedure stored in a shared drive, accessible to relevant staff, with version control in place. You need to be able to connect the requirement to the evidence, and explain the gap clearly if the evidence is absent or inadequate.

Prepare a Real Audit Plan

Do not turn up to a witness audit with a generic checklist you downloaded from the internet. Prepare a specific audit plan for the organisation, process, or scope you are auditing. Review available documentation in advance. Identify the key processes, the applicable clauses, and the areas of higher risk that warrant more attention.

Your assessor will notice immediately whether your checklist is tailored or generic. A tailored checklist signals that you have done the preparation. A generic one signals that you are relying on the document to carry the audit rather than your own professional judgement.

Practice Your Opening Meeting

The opening meeting sets the tone for the entire audit. Assessors watch it closely. Common problems include rushing through the agenda, failing to confirm the scope and objectives clearly, or being so formal that the auditee becomes defensive before the audit has even started.

Practice your opening meeting out loud, not just in your head. Know what you are going to cover and in what order. Confirm the scope, the audit objectives, the method, the schedule, confidentiality arrangements, and how findings will be reported. Keep it concise. A good opening meeting takes around ten to fifteen minutes, not forty.

Work on Your Interview Technique

Interview technique is one of the most commonly assessed competency areas, and one of the areas where candidates most frequently fall short. The two most common problems are asking closed questions and accepting the first answer without probing further.

Open questions begin with words like what, how, tell me, describe, or walk me through. They invite the auditee to explain rather than confirm. Probing questions follow up on the initial answer to test whether the process described is actually happening in practice, not just on paper.

If an auditee tells you that all staff complete induction training before starting work, your follow up should not be a nod and a tick. It should be something like:

Can you show me the training records for the last three people who started in this department?

What Is an Audit Log and Why Does It Matter?

An audit log, sometimes called an audit experience log or audit record, is a document you maintain over time that records your auditing experience. Certification bodies use it to verify that you have accumulated the required number of audits and audit days before granting or renewing certification.

The audit log is not just a list of audits you have attended. It is a structured record that demonstrates the nature and scope of your experience. Getting it right from the beginning will save you significant headaches when you apply for certification.

What Goes Into an Audit Log

Different certification schemes have slightly different requirements, but a well constructed audit log typically includes the following for each audit entry:

• Date of the audit
• Organisation audited (can be anonymised where confidentiality is required)
• Industry sector or type of organisation
• Standard or criteria audited against
• Scope of the audit
• Your role in the audit (team member, lead auditor, observer)
• Number of audit days you personally participated in
• Name and contact details of the lead auditor or audit programme manager who can verify the entry

The verifier is important. Certification bodies may contact the person listed to confirm that the audit took place and that your participation was as described. Choose verifiers who are reachable and who will respond promptly if contacted.

How Many Audits Do You Need?

Requirements vary by scheme and certification level. For Exemplar Global lead auditor certification, you generally need to demonstrate a minimum number of complete audit days across multiple audits, conducted under the supervision of a qualified lead auditor. IRCA has similar requirements, with specific thresholds for audit days and the number of separate audits.

The key point is that quality matters as much as quantity. An audit log full of half day internal audits in a single organisation is less compelling than a log showing varied experience across different industries, standards, and audit types. Certification bodies look for breadth of experience, not just volume.

Common Audit Log Mistakes

The most frequent mistakes candidates make with audit logs include:

• Waiting too long to start recording. Every audit you conduct without logging it is experience you cannot recover later.
• Recording attendance rather than participation. Sitting in on an audit as an observer is different from actively conducting one. Be honest about your role.
• Vague descriptions of scope. Quality audit tells the certification body very little. Specify the standard, the processes audited, and the type of audit.
• Missing or uncontactable verifiers. Always confirm that your verifier is willing to be contacted before you list them.
• Combining multiple audit days into a single entry when they were separate audits. Each distinct audit should have its own entry.

For a detailed walkthrough of how to structure your log entries, see our dedicated guide on how to keep an audit log for auditor certification.

Building Audit Experience Before Your Witness Audit

One of the most common questions from candidates is how to build enough audit experience to satisfy certification requirements when they are just starting out. This is a genuine challenge, but it is not insurmountable.

Internal Audits as a Starting Point

Internal audits within your own organisation are the most accessible starting point for most people. If your organisation is certified to ISO 9001, ISO 14001, or ISO 45001, there is almost certainly an internal audit programme in place. Volunteering to participate in those audits, initially as a team member under the supervision of a more experienced auditor, is how most auditors build their early experience.

The limitation of internal audits is that they are conducted in a single organisational context. Certification bodies recognise this, which is why they typically require a mix of internal and external audit experience for lead auditor certification.

Supplier Audits as Experience

Second party audits, where you audit a supplier or contractor on behalf of your organisation, count as external audit experience in most certification schemes. If your role involves supplier management or procurement, this is a practical way to accumulate external audit days without working for a certification body.

Supplier audits also tend to be excellent preparation for witness audits because they involve real stakes. The auditee is not a colleague. The findings have real consequences. That pressure is good preparation for the environment a witness assessor creates.

Shadowing Experienced Auditors

If you can arrange to shadow an experienced lead auditor on a certification or surveillance audit, even as an observer rather than a team member, the learning is invaluable. Watch how they manage time, how they handle difficult auditees, how they transition between processes, and how they construct their findings at the closing meeting.

Observer days may or may not count toward your audit log depending on the certification scheme. Check the requirements carefully. But even if they do not count formally, the experience will make you significantly more effective when you do conduct audits that count.

If you are still working out which certification pathway is right for you, our comparison of the ISO auditor career path from internal auditor to lead auditor provides a useful framework for planning your progression.

On the Day: How to Perform Well Under Observation

Being observed changes how most people behave. Some candidates become rigid and mechanical, following their checklist so closely that they miss obvious signals from the auditee. Others become so focused on performing for the assessor that they forget to actually audit.

Treat It Like a Real Audit

The best advice is straightforward: treat the witness audit exactly like any other audit. Your job is to gather sufficient, appropriate evidence to reach a conclusion about conformity. The assessor is watching you do that job. If you focus on doing the job well, the assessment takes care of itself.

This means following audit trails where they lead, even if that takes you away from your planned checklist. It means asking follow up questions when an answer does not quite add up. It means being honest when you find a nonconformity rather than softening it to avoid an uncomfortable moment.

Manage Your Time Visibly

Assessors pay attention to time management. If you spend forty five minutes on one process and then rush through the remaining three, that is a finding against you. Build a realistic time plan into your audit plan and stick to it. If you are running over in one area, make a conscious decision about where to adjust.

It is acceptable to note that you were not able to complete a full review of a particular area due to time constraints, as long as you have covered the higher risk areas adequately and you are transparent about the limitation in your closing meeting.

Handle the Closing Meeting Professionally

The closing meeting is your opportunity to demonstrate that you can communicate findings clearly, accurately, and without creating unnecessary conflict. Present your findings in a structured way. Distinguish between nonconformities and observations. Be specific about the evidence that supports each finding. Do not hedge or apologise for findings that are genuine nonconformities.

Assessors watch for candidates who back down under pressure from auditees. If the evidence supports a nonconformity, it is a nonconformity. Your job is to present it accurately, not to negotiate it away to keep the room comfortable.

After the Witness Audit: What Happens Next

After the witness audit, the assessor will provide you with a formal evaluation. If you have met the competency requirements, the assessment is recorded and contributes to your certification application. If there are gaps, the assessor will identify the specific areas where further development is needed.

Do not treat a partial pass or a request for further assessment as a failure. Most assessors are experienced auditors who want candidates to succeed. The feedback they provide is genuinely useful for your development. Take it seriously, address the gaps, and approach the next assessment with the additional preparation it deserves.

Once your witness audit is complete and your audit log meets the minimum requirements for the certification scheme you are pursuing, you can submit your application for formal certification. Keep your audit log updated after certification. Renewal typically requires evidence of ongoing audit activity, so the log you build during the certification process is one you will maintain throughout your career.

How Audit Workshop Can Help

Audit Workshop delivers lead auditor training across ISO 9001, ISO 14001, and ISO 45001 through both live virtual and self paced formats. The courses are designed and delivered by Dilawar Laghari, a certified lead auditor with over 14 years of experience and more than 500 external certification audits completed across Australia, the Middle East, and South Asia.

The training is built around practical auditing skills, not just theory. That means the techniques covered in the classroom are the same ones that hold up in a real witness audit setting. If you are working toward lead auditor certification and want training that prepares you for the actual assessment, not just the exam, explore the course options at auditworkshop.com.

For those still working out which level of training to start with, our article on ISO lead auditor vs internal auditor courses will help you make the right call for where you are in your career right now.