The ISO Review Podcast

Jim
  • 0.0 (0)
  • Education
  • Updated Daily

The ISO Review Podcast is a production of SimplifyISO. In each episode, we share the latest International Standards Development, and is your resource for getting the most out of your management systems. Your podcast hosts are Howard Fox & Jim Moran. Howard is a Business Coach and Host of the Success InSight Podcast. Jim is an ISO Management System Professional, celebrating  30-plus years delivering ISO support.

  1. 4d ago

    ISO 9001:2026 Made Simple: Demystifying Key Changes, Risks, and Best Practices

    Welcome back to the ISO Review Podcast, your trusted source for the latest developments in international standards and practical ISO management system insights. In this episode, Jim and HowardThe conversation focused on the release of ISO 9001:2026, providing listeners with an in-depth look at the newest changes to the world’s leading quality management standard.  A key theme that emerged was the evolutionary nature of the update—no drastic overhauls, but clear clarifications and strengthening of existing requirements. The discussion explored new and significant elements such as:  The promotion of quality culture and ethical behaviorThe explicit separation of risk- and opportunity-based thinking, andAdjustments in change management and organizational knowledge. Several points were raised, including the importance of updating internal auditors, demonstrating compliance during audits, and the practical benefits for both certified organizations and those simply seeking to improve their management practices. Whether you’re currently ISO certified or considering implementation, this episode offers crucial insights, practical advice, and resources to help you stay ahead with ISO 9001:2026. DISCUSSION 1. ISO 9001:2026 Release Overview Announcement of the new release and its evolutionary, not revolutionary, natureConfirmation of no structural changes; same clause numbersTransition period: three years to September 2029Implications for certified organizations and upcoming audits2. Clause-by-Clause Review of Changes Clause 5.1.1 – Leadership Number of requirements increased from 10 to 12Reordering of top management requirementsIntroduction of “promoting quality culture and ethical behavior”Adjustment: risk-based thinking now includes opportunity-based thinkingClause 7.3 – Awareness Need for employees to be aware of quality culture and ethical behaviorCross-reference to supporting materials (e.g., paper on quality culture)Clause 4.1 – Context of the Organization Use of SWOT technique (strengths, weaknesses, opportunities, threats)Inclusion of climate change as a required considerationClause 6.1 & 6.2 – Risk and Opportunity Clear distinction made between risks and opportunities (now two separate clauses)Recommendation to create workflow maps to address risks end-to-endClause 6.3 – Planning of Changes Increase in required planning steps from 4-5 to 7Emphasis on managing and communicating changesMonitoring effectiveness of changesClause 7.1.6 – Organizational Knowledge Expansion to include know-how for full Quality Management System (QMS) results, not just products/servicesDifferentiation between organizational knowledge and work instructionsAddition of definitions in the standardClause 4.2 – Interested Parties Greater emphasis in management review processUpdate to management review documentation3. Operations and Customer Focus (Clause 8) Clause 8.2 – Customer Requirements Requirement for contingency actions in case of delivery disruptionsImportance of documenting and reviewing contingency plansClause 8.5 – Production and Service Delivery Emphasis on using the latest operating information at the point of workReinforcement of existing requirements (e.g., competent staff, preventing human error)4. Auditing and Improvement (Clauses 9 & 10) Internal Audit Requirements Need for more detailed audit program information (objectives, scope, criteria)Proof of auditor training on new standardImportance of internal audit before registrar auditManagement Review and Continual Improvement Update to management review inputs and documentationChange to improvement requirements; Clause 10.3 now embedded elsewhereOngoing importance of demonstrating improvement5. Registrar Expectations and Audit Preparation Variation between registrars in audit approachFocus on new requirements: culture, ethics, separated treatment of risks and opportunitiesImportance of communication and documentation regarding organizational changesSuggestions for practical audit preparation, including use of updated forms and risk registers6. Practical Benefits and Implementation Guidance Benefits for organizations not pursuing certification, through improved clarity and operationsApplicability to new and existing clientsValue of organizing business processes even without external certification7. Accessing Resources and Support References to the guest’s website (simplifyiso.com) and associated resources (quality culture paper)Mention of the International Management System Institute (imsipro.org)Offer of assistance and demonstrations for listeners8. Conclusion and Recap Reiteration of the evolutionary nature of changes (“fine-tuning”)Historical perspective on past major and minor changes to ISO 9001Encouragement to update systems and prepare for next auditsReminder of resource links and where to find more information about the podcast and the guestsNEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 9011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9001:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 9001:2026 Made Simple: Demystifying Key Changes, Risks, and Best Practices

  2. Sep 22

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 13-18

    Welcome back to the ISO Review Podcast, your trusted source for the latest developments in international standards and practical ISO management system insights. In this episode, Jim and Howard conclude their comprehensive review of ISO 19011:2026, the essential auditing guidelines for management systems. Together, they dive into Annex A, covering Clauses A.13 to A.18, and discuss critical topics like working documents for combined audits, collecting and verifying digital evidence, onsite and remote auditing methods, and best practices for reporting findings—especially when audits span multiple standards. Drawing from real-world examples and decades of experience, Jim also offers tips for holistic audits, efficient document control, and navigating today’s virtual audit landscape. Stay tuned for expert advice, practical anecdotes, and a glimpse at what’s next: a preview of changes coming in ISO 9001:2026. DISCUSSION 1. Overview of Current and Upcoming Standards Announcement: Completion of ISO 19011:2026 coverage (01:40)Recap: Previous episode covered up to Annex A.12Plan for this episode: Covering Annex A.13 to A.18Teaser: Upcoming release of ISO 9001:2026 and plan to discuss it in the next episode (02:14)2. Introduction to Annex A.13–A.18 in ISO 19011:2026 Reminder of the prevalence of integrated/multi-standard auditsExample: Client with ISO 9001, 14001, 45001, and 27001 across multiple sitesImpact of COVID-19 on auditing practices (shift to virtual audits)Introduction of virtual audit adaptations (03:06 - 04:16)3. Clause A.13: Working Documents for Combined Audits Importance of preparing audit criteria and working documentsCore elements of an audit plan: objective, scope, criteriaDifferent audit types (surveillance, internal, registration, Stage 1)Use of checklists and evidence collectionChallenges and efficiencies in auditing multiple standards simultaneously (05:06)4. Efficient Document Management Across Systems Leverage harmonized structure (clauses 4, 5, 6, 7, 9, 10 common across standards)Unique aspects in Clause 8 for specific domains (quality, environmental, etc.)Efficient review and avoidance of duplication through integrated documentation and software solutionsImportance of auditors’ authority and access to necessary documents (07:19 - 09:46)5. Clause A.14: Collecting and Verifying Digital Evidence Verification of authenticity and integrity (versioning, access logs, etc.)Sampling plan considerations for electronic dataHandling of digital evidence: screenshots, document identification, and data disposalGuidance on documenting evidence without unnecessary data storage (09:47 - 13:50)6. Clause A.15: Onsite Audit Considerations Health and safety and information security requirements for onsite auditorsExample of auditor pre-entry requirements (training and certification)COVID-19 impacts: masks, vaccination, cultural norms, working hoursAdvance communication: audit plans, objective/scope/criteria, minimal disruptionAddressing the misconception of auditors as "ISO cops"; clarification of audit outcomes (14:54 - 18:16)7. Audit Finding Process and Nonconformity Management Types of findings: opportunities for improvement, nonconformancesCorrective action plans and timelines (routine and urgent safety issues)Legal obligations in reporting severe health and safety violations (18:16 - 20:31)8. Clause A.16: Remote Auditing Methods Expansion of remote auditing due to recent technological and situational changesTechnical requirements: prep, access, protocols, data security, contingency planningRegistrar oversight and accreditation (standards 17011 and 17012)Practical matters: breaks, muting, permissions for screen captures and recordingsAuditor competence with remote tools (Teams, Zoom, WebEx, etc.) (20:32 - 23:05)9. Clause A.17: Remote Interviews Adapting questioning for remote interviewsUse of real-time screen sharing or physical walkthroughs via devicesEnsuring evidence gathered is verifiable and objectiveAppropriate documentation language (avoiding subjective/accusatory statements)Identifying process improvement opportunities and documentation mismatches (23:27 - 27:18)10. Clause A.18: Audit Findings and Reporting Across Multiple Standards Approaches for findings that touch multiple standards: separate or combined reportingAdvantages of harmonized structure/high-level structure in auditsProviding a holistic view for the auditee about their integrated management system’s performance (27:18 - 29:51)12. Episode Wrap-Up and Next Steps Summary: Completion of ISO 19011:2026 reviewNext episode: Review of ISO 9001:2026Listeners guided on where to find more resources (SimplifyISO.com, IMSIPRO.org, LinkedIn, YouTube, Fox Coaching)Farewell and reminders about show notes/backlinks (29:51 - 32:48)NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 13-18

  3. Sep 8

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 7-12

    Welcome back to the ISO Review Podcast, your trusted source for the latest in international standards development and management systems excellence. In this episode, Jim and Howard continue their practical deep dive into ISO 19011, specifically focusing on Appendix A. Together, they explore key auditing topics such as compliance and conformance, understanding organizational context, leadership and commitment, managing risks and opportunities, lifecycle perspectives, and effective auditing of the supply chain.  With insights drawn from decades of ISO experience, Jim shares real-world strategies for making audits meaningful, maintaining compliance, and enhancing the value of your management system. Whether you’re an auditor, manager, or simply passionate about process improvement, this episode is packed with actionable guidance to help you get the most out of your internal audits. DISCUSSION 1. Main Topic Introduction: ISO 19011 Appendix A Howard Fox introduces ISO 19011 Appendix A as the focus of the episode 04:412. Overview of ISO 19011 and Annex A Jim Moran clarifies ISO 19011 is an auditing guidance standard, not a requirement 04:52Explanation of previously covered topics in Annex A, including:Audit preparationAudit methodsProcess, judgment, performance, verifying information, sampling3. New Annex A Topics for this Episode a. Auditing Compliance within a Management System 05:43 Difference between compliance (legal) and conformance (voluntary standards)Importance of using correct terminology in documentationCompanies must identify applicable statutory and regulatory requirements 07:15Auditing process flow to connect compliance requirements to activitiesNeed for mechanisms to track changes in requirementsDocumentation and processes to maintain complianceSector-specific challenges (quality, environmental, health/safety, information security)Interviewing compliance-responsible personnel as part of auditb. Auditing Context (A.8) 12:29 Aligning audits with the organization's context and standardsRegulatory bodies as interested partiesImportance of planned compliance rather than hopeElements auditors should examine:Verifiable evidenceSuitability and competenceAudit focus on results, risk management, and opportunities for improvementc. Auditing Leadership and Commitment (A.9) 14:57 Leadership requirements in harmonized ISO standards (especially Clause 5.1)New requirements in latest ISO 9001 FDIS: mandate to develop a "quality culture"Auditing for evidence of leadership’s accountability and management system effectivenessRole of auditors in interacting with top management and assessing their commitmentInterviewing personnel to assess perception of management’s commitmentd. Auditing Risks and Opportunities (A.10) 18:05 Importance of robust risk identification by the organizationReference to ISO 31000 steps: Identify, Analyze, Assess risks 18:51Use of a risk mitigation plan if risks are highInquiry into risk management practices at activity levelRole of top management in addressing unmanaged risks and allocating resourcesConsidering internal and external sources of riskVisual aids (e.g. symbols) for indicating risk types in process flowse. Lifecycle Perspective (A.11) 22:06 Requirement for some management systems (notably environmental) to apply a lifecycle perspectiveConsidering influence and control over a product/service lifecycleExamples and practical steps: using AI or web for visual lifecycle diagramsApplications in environmental management, climate impact, and improving performancef. Auditing the Supply Chain (A.12) 25:24 Increased awareness of global supply chain complexity post-COVIDMention of ISO 27003 Part 2 for information security in supply chainsTypes of supply chain audits:Management systemProcessProductInformation security configurationExplanation of first, second, and third-party auditsContract-focused auditing for practicality and audit scope managementOngoing surveillance and continual improvement auditsRelationship between supply chain, lifecycle, and risk management7. Importance of ISO Standard Appendices Howard Fox and Jim Moran discuss the value of appendix content in ISO standards 31:45Suggestion to use AI for sourcing additional material to enhance audit value8. Resources and Closing Jim Moran gives details about Simplify ISO, their software, and additional resources (IMSIpro.org, LinkedIn, YouTube) 32:40Howard Fox mentions where to find more information about himself and closing statements 35:16Farewells and sign-off 34:53NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 7-12

  4. Aug 11

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 1-6

    Welcome to the latest episode of the ISO Review Podcast, where we dive into the essentials of international standards and provide guidance for optimizing your management systems. In this episode, Howard Fox and ISO management system expert Jim Moran explore ISO 19011:2026, focusing on Appendix A, clauses 1 through 6.  Whether you’re looking to refine your internal audit program or better understand auditing methods, professional judgment, and sampling techniques, this conversation covers the practical guidance and expert insights you need to elevate your audits and drive ongoing improvement within your organization.  Join Jim and Howard as they break down the first part of Appendix A, setting the stage for future episodes covering the remaining clauses—your go-to resource for mastering ISO 19011. DISCUSSION 1. Overview of ISO 19011 Introduction to ISO 19011 and its relevance for audits 02:12Historical background of the standard: origins, evolution, integration of quality and environmental standards, and its use globally (03:10)Universal adoption by registrars and training programs 03:352. Structure and Sections of ISO 19011 Review of previously covered main clauses/sections (definitions, preparing/audit planning, managing the audit program, conducting audits, auditor competence) 04:14Transition to Annex A, explaining its structure: 18 sections, planned coverage over three episodes (04:27)3. Details of Annex A (Clauses 1–6) A.1 Auditing MethodsHuman interaction (onsite/remote interviews, observations, document review with auditee) 06:17No human interaction (reviewing documentation alone) 07:14Audit objectives: effectiveness, risk management, improvement opportunities 07:49Importance of audit methods in planning and reporting 08:34A.2 Auditing of ProcessesRelationship of policies, objectives, and processes 09:36Understanding process inputs, activities, and outputs (input-process-output model) 10:09Interrelated processes and workflow, from customer inquiry to delivery and payment 10:25Importance of auditing end-to-end flow and process handoffs 11:23A.3 Professional JudgmentNecessity for human auditors to apply context and judgment; reasons AI can’t fully replace auditors 11:43Judging the adequacy and effectiveness of the organization’s approach rather than strictly following standard text 12:17Auditors to audit the organization’s workflow, not just standard clauses 12:41Confidentiality, non-consultancy stance, and providing suggestions without directive language 14:13A.4 Performance ResultsFocus on intended results of the management system during audits 15:26Auditor’s need for industry knowledge 15:58Use of technical experts when needed 16:34Documented information: maintain/retain requirements, and typical gaps in new ISO 9001 adopters 17:31A.5 Verifying InformationConcept of verifiable evidence versus “facts” 18:58Criteria for verification: complete, correct, consistent, current (“4 C’s”) 21:11Document accessibility requirement and practical ways to check it 21:25Care in handling sensitive and confidential information during audits 22:46A.6 SamplingChallenges in sampling: deciding quantity and representativeness 23:53Standard sampling approaches and relevance to different industries 24:51Practical sampling guidance (e.g., randomly checking 5 records) 25:09Auditing for conformance, not nonconformance; limits of 100% checking 25:41Risk with sampling and principles for application (randomization, adequacy) 26:17Mention of statistical versus judgment-based sampling approaches 27:154. Preview of Next Episode Plan to cover Annex A clauses 7–12 (compliance, context, risks and opportunities, lifecycle, supply chain auditing) 27:585. Conclusion and Resources Howard Fox’s reflections on practical connections of ISO knowledge 28:27Jim Moran’s resources: SimplifyISO, IMSIpro, other content 29:05Howard Fox’s sites and closing remarks 30:54NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 1-6

  5. Jul 28

    ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 6 & 7

    Welcome to another episode of the ISO Review Podcast, your trusted source for the latest developments in international standards and practical guidance for getting the most out of your management systems.  Join hosts Howard Fox and Jim Moran—an ISO management system professional celebrating 34 years of expertise—as they dive into the newly updated ISO 19011:2026 standard. In this episode, they break down Section 6 (Conducting an Audit) and Section 7 (Auditor Competence), explore the growing importance of hybrid and remote auditing methods, discuss how evidence reliability and technology skills have become essential, and share tips to ensure your audit process is truly value-adding, not just a box-ticking exercise. Whether you’re an internal auditor, management rep, or just ISO-curious, this episode will help you leverage the latest guidance to make your audit program more effective and resilient. DISCUSSION 1. Introduction to the ISO Review Podcast Purpose of the podcast: sharing developments in international standards and management systems2. Overview of ISO 19011:2026 Background: ISO 19011 guidance document for auditing management systems 00:42Clarification: It provides guidance, not requirements; cannot be certified to this document 01:58Value of the standard: Utility for planning, developing, and implementing audit programs 02:08Mention of a new helpful flowchart in the document 02:183. Auditing Philosophy and Approach Common mistakes: Focusing on procedural compliance (tick box exercise) 02:38Key audit questions:Is the process getting intended results? 03:12Are risks managed effectively? 03:37Are there opportunities for improvement? 04:02Differences between internal and registrar auditing approaches 04:254. Section 6: Conducting an Audit (ISO 19011:2026) Audit lifecycle stages: initiating, preparing, conducting, reporting 05:04Evolution of the standard: From quality/environmental focus to encompassing all ISO standards 05:15Hybrid and remote auditing:Increased emphasis since the COVID-19 pandemic 05:42Savings in travel costs and flexibility 05:56Integration of technology and guidance on data privacy 06:13Distinction between remote and hybrid audits 06:29Impact of regulatory changes and industry adaptation:History of audit day calculations (MD5 document) 06:53Automotive sector’s response to remote audits 07:53Current spectrum: onsite, virtual, or hybrid depending on organizational context 08:11Registrar's use of judgment for effective audits and value addition 08:26Applicability to different organization types (manufacturing, services) and handling various forms of evidence 09:03Embracing of hybrid delivery and integrated audits 09:44a. Selecting the Audit Method Requirement to specify methods (onsite, remote, hybrid) in the audit plan 10:05Planning stage includes method selection, not post-audit justification 11:05Critical planning elements: objective, scope, criteria 11:13Method selection examples: remote review vs. onsite observation 11:45Main auditing techniques:Interview 12:20Direct observation 12:25Records review 12:31Paradigm shift: focus on outcomes and improvement, not just procedural adherence 13:01b. Evidence Reliability and Data Security Importance of verifying genuine evidence 14:06Shift in terminology from “fact-based” to “evidence-based” decision-making 14:43Data security considerations in digital and remote evidence collection 14:515. Section 7: Auditor Competence Emphasis on competence for registrars (and lessons for internal auditors) 15:14Expansion of competence requirements to include technology and information security 15:55Ensuring auditors understand and have access/permission for required evidence 16:35Identification and management of risks in the audit process 17:01Auditor performance evaluation: including feedback from auditees and stakeholders 17:52Auditor’s role: collaborator rather than “ISO cop” 18:18Historical context: evolution from nonconformance focus to improvement and communication 19:07Importance of 2-way and 3-way communication (auditor, auditee, audit planner) 19:40Application of Plan-Do-Check-Act to internal audits 20:02Using feedback loops to assess and improve audit program effectiveness 20:15Ongoing competence maintenance: continuing professional development 20:29Scheduling audits throughout the year for skill retention (vs. “audit blitz” before registrar visit) 21:24Advantages of flowcharts for process clarity and audit handoffs 22:15The 80/20 rule for nonconformances linked to process handoffs 22:456. Recap and Key Takeaways Lifecycle and method selection for audits 23:18Importance of evidence reliability 24:03Distinction between requirements and guidance (should vs. shall) 23:32Technology competence and digitalization in audit management 24:08Feedback loops and competence maintenance (regular training, recertification) 24:37Typical recordkeeping practices (3-year retention guidance) 25:287. Upcoming Episode Preview Next episode to cover Annex A of ISO 19011 25:558. Resources and Contact Information Jim Moran contact details and resources: simplifyiso.com, imsi.org, imsi-pro.org 26:30Additional links to LinkedIn, YouTube, and LinkedIn articles 27:13Howard Fox contact: foxcoaching.com 28:10NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 6 & 7

  6. Jul 14

    ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 3-5

    Welcome to another episode of the ISO Review Podcast, presented by Simplify ISO. Join hosts Jim Moran and Howard Fox as they explore the latest developments in international standards and offer practical guidance for maximizing your management systems.  In this episode, Jim Moran shares insights into the newly released 2026 edition of ISO 19011, the key auditing standard for management systems. Together, they break down the history and evolution of auditing guidelines, clarify the difference between requirements and guidelines, and provide an overview of critical topics such as audit principles, program management, and auditor competence.  Whether you're an internal auditor, a seasoned quality professional, or new to the world of ISO, this episode delivers essential tips on planning, conducting, and improving your audit programs. Stay tuned for clear explanations, actionable advice, and a roadmap for getting the most from your management system audits. DISCUSSION 1. History of Auditing Standards ISO 19011 standard: name and editions (2002, 2011, 2018, 2026) 02:28Prior standards: ISO 10011, ISO 14001, and related documents 02:54Merging of past standards into ISO 19011 03:40Historical purpose and evolution of auditing guidelines 02:542. Structure of ISO 19011:2026 Auditing Standard Overview of major clauses and their roles:Clause 3: Definitions 04:15Clause 4: Auditing Principles 04:22Clause 5: Management System Overview 04:30Preview of next episodes covering Clause 6 (Conducting Audits) and Clause 7 (Auditor Competence), and Annex A 05:173. Purpose and Nature of ISO 19011 Explanation of guidance vs. requirements in standards 07:23Difference between “should” (guidelines) and “shall” (requirements) 07:37Applicability for different types of audits and management systems 07:56Use of ISO 19011 by registrars 08:50Relationship to other ISO standards and structures 06:104. Clause 3: Terms and Definitions Focus on importance of definitions for clarity in audits 10:07Key terms defined: audit, combined audit, joint audit, remote audit, objective evidence, risk, effectiveness, etc. 10:27Role of verifiable evidence and statements of fact 11:08Practical exercises for auditors based on definitions 11:565. Clause 4: Principles of Auditing Explanation of auditing principles versus rules/techniques 12:27List and discussion of seven core principles:Integrity 12:44Objectivity 13:39Fair Presentation 13:42Due Professional Care 14:43Confidentiality 16:30Independence 17:23Evidence-based Approach 18:50Risk-based Approach 19:23Integrity and the importance of evidence-based conclusions 13:08The evolution from fact-based to evidence-based auditing 20:156. Clause 5: Managing an Audit Program Planning and organizing an audit program 21:14Plan-Do-Check-Act framework 21:28Consideration of organizational size, scope, complexity, and risk 21:45Audit scheduling across quarters/year 21:45Functionality and complexity differences for various industries 22:58Single location vs. multinational organization considerations 22:44Industry-specific competence and language needs 24:13Context and external/internal issues, including technology and information security 24:52Focus of internal audits: looking for conformance, not nonconformance 25:35Value of flowcharts in process and auditing 26:31Auditor competence and impartiality 27:09Maintaining objectivity and addressing potential biases 28:01Auditor records, logbooks, and tracking industry experience 27:43Training and preparation of auditors 29:077. Steps in Managing an Audit Program (Clause 5 Specifics) Establishing objectives, evaluating program risks/opportunities 29:36Implementing and monitoring the audit program 29:47Flowchart use for organizing and documenting audits 30:30Review and improvement of the audit program 30:53Setting program objectives: results, risk management, and improvement 33:19Evaluating resources, team selection, communication, competence 33:36Documentation: audit scope, criteria, resources, and evidence 34:43Authority and competence of audit program manager 34:098. Review and Preview of Next Episodes Howard Fox summarizes the episode focus and praises structure 37:31Emphasis on difference between “should” (guidance) and “shall” (requirement), and auditing implications 38:11Teaser for next podcast: conducting audits and auditor competence, plus in-depth look at Annex A 38:039. Closing and Resources Where to learn more: simplifyiso.com, IMSI, other links 39:12Encouragement for next episode and outro 40:43NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 3-5

  7. Jun 30

    ISO 9001:2026 Final Draft Release: Key Changes for Organizations and Quality Management Professionals

    Welcome to another episode of the ISO Review Podcast, your trusted resource for the latest developments in international standards and tips for maximizing your management systems.  In this episode, hosts Jim Moran and Howard Fox dive into the just-released final draft of ISO 9001:2026, marking a new evolution in quality management standards. Jim Moran highlights the key changes—ranging from editorial clarifications to the addition of requirements around quality culture, ethics, and climate change resilience—while reassuring listeners that this update is more evolutionary than revolutionary.  They discuss what organizations can expect as they transition from ISO 9001:2015, including a generous three-year adaptation period and minimal disruptive changes. Jim and Howard also share insights on how technology and automation can ease compliance, and tease upcoming episodes on the newly revised ISO 19011 auditing standard. Whether you’re a seasoned ISO professional or just exploring the world of standards, this episode is packed with valuable information to help you navigate the evolving landscape of management systems. DISCUSSION 1. Transition to ISO Standards Discussion Link between international sport and international standards 02:19Announcement of final draft release for ISO 9001:2026 02:272. History and Evolution of ISO 9001 Standards Notable changes by edition:1987, 1994: Initial version, focus on documented procedures 2000, 2008: Process approach highlighted2015: Major structural change to “high level structure” 03:243. Structural and Content Changes in New Revisions Minimal structural changes from prior high level structure versions 04:49Key ISO clauses/building blocks outlined 05:224. Evolution of Documentation Methods Shift from physical binders to electronic documentation 06:57Anecdotes: physical binder requirements of early ISO days 07:105. Current Management System Tools and Simplification Improvements in software for handling nonconformances and audits 09:23Connection to previous podcast series “50 Ways to Simplify Your Management System” 09:416. The ISO 9001:2026 Draft Release and Change Process Release process: Committee Draft (CD), Draft International Standard (DIS), Final Draft International Standard (FDIS) 10:03Nature of changes from 2015 to 2026: evolutionary, not revolutionary 12:09Predicted timeline: September 2026 release, three-year transition period for organizations 11:407. Major Thematic Changes in ISO 9001:2026 Editorial clarifications, not overhauls 12:27Explicit emphasis on quality culture and ethics 12:45Organizations required to foster auditable quality culture and ethics 13:138. Climate Change Consideration in Standards Incorporation of climate change into ISO 9001 14:17Integration of prior amendment into the new standard 14:31Quality outputs must be defendable against climate-driven interruptions 15:049. Summary of Key Transition Points and Definitions Reinforcement of evolutionary change, not overhaul 18:56Reminder of three-year transition and audit process 19:09ISO 9000 as main source for terms and definitions with minor approach in ISO 9001 20:02Diagram/visual changes: “quality management system” to “scope of the quality management system” 20:49Importance and expansion of Annex A 20:5710. Context, Interested Parties & Climate Change in Implementation External and internal context considerations 22:04Climate change as an explicit external issue 22:4711. Detailed Review of Clause Changes Clause 4: Context 26:16Clause 5: Leadership—quality culture and ethics 27:15Evidence examples: town halls, orientation trainingClause 6: Risks and opportunities; restructuring for separate auditability; change management 28:39Clause 7: Support/resources 29:41Work environment’s three pillars: physical, social, psychological 30:32Psychological safety as auditable elementStaff awareness of ethics and empowerment to stop processes 31:14Clause 8: Operations is unique to each standard, no major changes 32:23Clause 9: Performance evaluation, editorial clarifications 33:23Clause 10: Continual improvement, leadership’s role 33:3512. Transition Timeline for Certification September release target for final international standard 34:19Three-year transition advised, but changes are minor 34:51Guidance for organizations starting new implementations 35:0413. Concluding Reflections and Next Steps Overview recapped as “final draft,” anticipation for September release 36:38Future episode preview: clause-by-clause upgrade guidance 36:56Registrar and audit requirements for transition 37:25Comparison to 2015’s significant changes 38:0014. Preview of Next Podcast Topics Announcement of new ISO 19011 (auditing standard) release for future episodes 39:27NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 9001:2026 Final Draft, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9001:2026FinalDraft  #ISOReviewPodcast #SimplifyISO #Podcast

    ISO 9001:2026 Final Draft Release: Key Changes for Organizations and Quality Management Professionals

  8. Jun 16

    50 Ways to Simplify Your ISO Management System - Part X

    Welcome to another episode of the ISO Review Podcast, produced by Simplify ISO. Join hosts Howard Fox and Jim Moran as they wrap up their popular series, “50 Ways to Simplify Your ISO Management System.” In this episode, Jim Moran, who brings over 34 years of ISO expertise, shares the final five tips for streamlining management systems—covering practical advice on corrective actions, root cause analysis, tracking improvement actions alongside business objectives, making the most of key performance indicators, and remembering that your ISO system supports rather than defines your business. The hosts also explore the benefits of process-based auditing, integrating multiple ISO standards, and adapting to continuous improvement, all while dispelling a few ISO myths along the way. Whether you’re new to ISO or refining an established management system, tune in for actionable insights to boost your efficiency and profitability. DISCUSSION Sequence of Topics Covered1. Introduction & Catching Up 2. Recap of Previous Episode’s Tips (41-45) Using internal audits as process reviews, not clause-by-clause 02:16Importance of starting with flowcharts for processes 02:29Auditing fewer things but with better focus (“less is more”) 02:45Asking “show me how this works” vs “are you following your procedure?” 03:09Training staff only on what they need to know, dispelling the myth that everyone must know everything 03:27Role of top management in culture and teamwork 03:54Replacing classroom training with micro training 04:113. Overview of This Episode’s Tips (46-50) Corrective actions 04:38Root causes 04:43Tracking improvement actions 04:47Using KPIs 04:49Final summary: ISO management system supports the business 04:534. Deep Dive: Tips 46–50 46. Use Corrective Actions Only When Needed Understanding non-conformance (“non-fulfillment of a requirement”) 05:25Deciding between correction and corrective action 06:23Encouraging openness to corrections versus hiding non-conformances 06:41Importance of tracking corrections for trend analysis 07:1047. Fix Root Causes Once, Not Repeatedly Emphasis on true root cause analysis to avoid recurring errors 07:30Financial impact of recurring mistakes (example: $1,000 error needs $50,000 in new revenue to offset) 07:57Challenges of management ineptness as a root cause 09:08Suggestion to look for similar issues elsewhere in the business 09:3148. Track Improvement Actions Alongside Business Actions Setting objectives/goals as per various ISO standards; aligning improvements with these 09:56Breaking objectives into smaller targets and tracking progress 10:43Avoiding unintended negative impact on other processes/parts of the organization 11:44Classic systems theory (Taiichi Ohno, John Seddon) and its application 12:2049. Use Key Performance Indicators (KPIs) Already in Use Use existing KPIs as performance evidence for ISO 14:44Clause 9.1 asks organizations to choose what to measure 14:59Don’t create unnecessary KPIs just for ISO compliance 15:58Various company scenarios: adapting or rebuilding management systems 16:08The difference between “variety” and “change” in organizations 16:58Using effective KPIs for profitability and in new standards like ISO 42001 (AI management) 18:0950. ISO Management System Supports the Business The management system is a support tool, not the business itself 18:52Integration of multiple standards and systems for efficiency 19:45Case example: client with multiple separate management systems and missed opportunity for integration 20:01Organizational resistance to integration due to perceived job loss 20:59Reframing staff roles toward continuous improvement rather than system maintenance 21:43Integrating systems as a path to profit improvement 22:12Reducing recurring non-conformances as a key profitability driver 22:125. Closing Reflections Howard Fox and Jim Moran discuss using freed-up resources for process improvement 22:27Final thoughts on finishing the 50 ways series and previewing upcoming ISO 9001 changes 23:446. AI and ISO: Brief Comments Benefits and concerns of AI in ISO management systems 24:57Balancing business value, energy use, and public debate on AI 25:417. Resources and Contact Information Simplify ISO website and resources 27:04Availability of the podcast on LinkedIn, YouTube, and other channels 27:22International Management System Institute (imsipro.org) 27:41How to reach out with topics or contact questions 27:31Howard Fox's coaching and LinkedIn details 28:208. Wrap-Up and Sign-Off Thanks and closing remarks from both hosts 28:44Promotion of show notes and backlinks for further learning 28:21NEXT STEPS We appreciate your likes & comments, and shares.  Click here to visit the SimplifyISO website.  Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website: https://foxcoaching.com LinkedIn: https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

    50 Ways to Simplify Your ISO Management System - Part X
See All (91)

About

The ISO Review Podcast is a production of SimplifyISO. In each episode, we share the latest International Standards Development, and is your resource for getting the most out of your management systems. Your podcast hosts are Howard Fox & Jim Moran. Howard is a Business Coach and Host of the Success InSight Podcast. Jim is an ISO Management System Professional, celebrating  30-plus years delivering ISO support.

Information

  • Creator
    Jim
  • Years Active
    2022 - 2026
  • Episodes
    91
  • Rating
    Explicit
  • Copyright
    © 2026 The ISO Review Podcast
  • Show Website
    The ISO Review Podcast