Can a certification body assign an auditor who isn't fully qualified?
When a certification body may book an auditor who misses a requirement, when it must not, and how to record the justification so the decision stands up at your next accreditation assessment.
Key takeaways
- The team as a whole must be competent; individual gaps can be covered by other team members.
- Trainees and observers can join an audit without counting toward audit time.
- Every exception needs a reason, an approver and a date.
- Software should block silent exceptions and make approved ones visible.
Only within the rules your procedures and scheme allow, and never for the competence the audit team as a whole must hold. ISO/IEC 17021-1 requires the team to be competent; a trainee, an observer or a team member covered by a qualified lead can join, but a gap the team cannot cover must not be booked. When a planner does approve an exception, the reason, the approver and the date should be recorded. ScheduleAI by Checkfirst lets planners approve a non-compliant assignment only with a written reason and keeps that trail for assessors.
What does 'not fully qualified' mean in practice?
It can mean three different things: an auditor in training for the technical area, an auditor whose authorisation lapses before the audit date, or an auditor qualified for the standard but not for one of the client's codes. Only the first is routinely acceptable, and only as part of a team that is competent overall.
An assignment a planner approves even though one person does not meet every requirement, with a recorded justification and a team that remains competent as a whole.
When is it acceptable, and when is it not?
Clause 9.2.2.1 of ISO/IEC 17021-1 asks for a competent audit team, which is why coverage by another team member can work while a gap nobody covers cannot. See witnessed audits and trainee auditors.
| Acceptable with a record | Not acceptable | |
|---|---|---|
| Trainee auditor alongside a qualified lead | ✓ | ✕ |
| Team covers the missing code through another member | ✓ | ✕ |
| Authorisation expired before the audit date | ✕ | ✓ |
| Nobody on the team holds the required code | ✕ | ✓ |
| Lead auditor role filled by someone not authorised to lead | ✕ | ✓ |
How should the exception be approved and recorded?
- 1FlagThe system shows which requirement is missed
- 2Check teamConfirm the team as a whole stays competent
- 3JustifyPlanner writes the reason
- 4ApproveNamed approver signs off
- 5KeepReason, approver and date stay on record
Common mistakes
MythIf the client agrees, any auditor is fine.
RealityClient consent does not change accreditation rules. The team must still be competent.
MythWe can fix the record after the audit.
RealityAssessors look for the decision at the time it was made. Record it before the booking is confirmed.
How software helps
Manual plans hide these gaps. In one historical schedule a global assurance provider shared with us, 46 audits had been allocated without the required competence. Source: our published results. A scheduler that checks every allocation shows the gap before the booking, not after the assessment.
ScheduleAI by Checkfirst checks every requirement on every allocation. If a planner needs to approve an assignment that misses one, they can only do so with a written reason, and the reason, approver and date stay in the audit trail for your accreditation assessor.
Book a demo Estimate your savingsQuestions
Can a trainee auditor count toward audit time?
No. Trainees and observers can attend but do not count toward audit time.
Can a certification body book an auditor whose qualification expires before the audit?
No. Competence must be valid on the audit dates.
What should an exception record contain?
The requirement missed, why the team is still competent, who approved it and when.