One audit,many standards
ISO management system standards share a common structure, so an integrated audit can cover leadership, planning, support and improvement once for every standard. Orisynx holds the template, the programme and the corrective actions for all of them in one workspace.
| Audit | Standard | Date | Status |
|---|---|---|---|
| Purchasing | ISO 9001 | 12 Mar | Confirmed |
| Warehouse, Leeds | ISO 45001 | 3 Apr | Scheduled |
| Kestrel Metals | Supplier | 21 May | Tentative |
| Access control | ISO 27001 | 9 Jun | Scheduled |
7 of 18 audits confirmed
Clauses 4 to 10 are shared ground
ISO 9001, ISO 14001, ISO/IEC 27001, ISO 45001 and ISO 50001 follow the same high-level structure, now called the harmonized structure. Context, leadership, planning, support, operation, performance evaluation and improvement sit in the same clause numbers in each.
Requirements such as documented information, internal audit, management review and corrective action read much the same across them. Auditing them once spares the auditee from answering the same question for each standard in turn.
- 4 Context of the organization
- 5 Leadership, 6 Planning, 7 Support
- 8 Operation
- 9 Performance evaluation, 10 Improvement
Shared clauses once, specifics after
Orisynx has no pre-loaded clause library: you build templates, and they can follow the clause structure of the standards you hold. For an integrated audit, put the shared clauses in one section and add a section for each standard’s own requirements.
That might mean environmental aspects and compliance obligations for ISO 14001, hazard identification for ISO 45001, and Annex A controls for ISO/IEC 27001. Start a custom audit from that template and every auditor covers the same ground.
- Supplier nameText
- Date of last evaluationDate
- Evaluation outcomeChoice
- Late deliveries in last 12 monthsNumber
Used in 14 audits this year
One programme for every standard
An audit plan can hold planned audits against ISO 9001, 14001, 27001, 45001 and 50001, and the same standards are accepted when you import a programme from .xlsx or .csv.
Integrated and single-standard audits sit side by side in one plan and on one shared calendar, each with its own department or site, dates, priority and status.
- 3 APRWarehouse, Leeds · ISO 45001Audit · Scheduled
- 17 APRBoiler house · ISO 50001Audit · Moved from 10 Apr
- 30 APRRe-evaluate suppliersTask due · J. Okafor
One corrective action process
Clause 10.2 asks much the same of every standard: react to the nonconformity, find the cause, act on it and review whether the action worked.
In Orisynx that process is the same whichever standard a finding was raised against. Findings are graded low, medium, high or critical, actions move from open through in progress and verify to closed, and effectiveness is recorded on each action.
- Open
- In progress
- Verify
- Closed
Integrated audits: questions
Can one audit cover several standards in Orisynx?
Yes. Start a custom audit from a template you have built to cover the shared clauses and the requirements of each standard. Audits can also be started against a single standard: ISO 9001:2015, ISO 14001:2015, ISO/IEC 27001:2022 or ISO 45001:2018.
What about ISO 50001?
Audit plans and spreadsheet imports accept ISO 50001. To run the audit itself, start a custom audit from your own ISO 50001 or integrated template.
Will our certification body accept an integrated internal audit?
The standards ask for internal audits that cover the requirements of each management system, not for separate audits. Most certification bodies are used to integrated management systems, but check how yours expects audit coverage to be shown for each standard.
Keep reading
Guides
Standards
Use cases
See it with your own audits
Bring an audit you have already run. We will walk it through Orisynx with you, from the plan to the last closed corrective action.