Audit cancellation policies that protect auditor days
How to write an audit cancellation policy for a certification body: notice tiers, fees, postponement limits, certificate consequences and refilling lost days.
Key takeaways
- A confirmed audit reserves auditor days, travel and often a team; a late cancellation usually leaves those days empty.
- A good audit cancellation policy has notice tiers, clear fees, a postponement limit and a link to certificate deadlines.
- Surveillance and recertification rules still apply, so a postponement can never push an audit past its limit without consequences.
- Fees recover some cost; a fast refill process recovers the auditor day itself.
An audit cancellation policy sets how much notice a client must give to cancel or move a confirmed audit, what it costs when notice is short, how many postponements are allowed and what happens to the certificate if an audit slips past its deadline. It belongs in the certification agreement, and it works best alongside a process for refilling the auditor days a cancellation frees up.
Why every certification body needs an audit cancellation policy
A written audit cancellation policy protects the scarcest thing a certification body has: qualified auditor days. When a client confirms an audit, you commit a competent auditor, sometimes a team with a technical expert, and often travel and hotels. If the client cancels a few days before, those days are hard to reuse, because the replacement audit needs the same competence, a nearby site and a client who can accept short notice.
Without a policy, every late change becomes a negotiation, and planners end up absorbing the cost. With one, clients know the rules at signing, and your team can apply them consistently.
For how to handle the change itself on the day, see audit cancellation management.
What should an audit cancellation policy include?
Keep it short enough that a client will actually read it, and put it in the certification agreement. ISO/IEC 17021-1 already requires a legally enforceable agreement with each client, so that is the natural home.
| Element | What to define | Example wording |
|---|---|---|
| Notice tiers | The points at which terms change | More than 30 days, 14 to 30 days, fewer than 14 days before the audit |
| Charges | What is charged in each tier | No charge; a share of the audit fee; the full fee plus non-refundable travel |
| Postponements | How many moves are allowed and how far | One free move per audit, within the permitted window |
| Certificate link | What happens if a date slips past a deadline | Suspension or expiry follows the certification rules |
| Exceptions | Events outside the client's control | Handled case by case with a documented risk review |
| Our side | What happens if we cancel | We offer the next available competent auditor and date |
Charges are a commercial decision for each body, and we do not suggest levels here. What matters is that they are written, proportionate and applied the same way to every client.
How much notice should clients give?
Set your tiers from the time you need to refill a day. If your planners can usually rebook an auditor with two weeks' notice, the late zone starts there. Measure it: for the last year of cancellations, how many days before the audit did the notice arrive, and how many of those auditor days were reused?
- 1Date confirmed with client
- 2Free change deadline
- 3Late fee applies
- 4Travel booked, non-refundable
- 5Audit day
Confirming dates earlier gives both sides more room. The article on audit date confirmation with clients covers how to get dates agreed and reminders sent.
Can a client keep postponing an audit?
No. The certification rules set outer limits that no commercial policy can override. Under ISO/IEC 17021-1:2015, surveillance must happen at least once a calendar year except in recertification years, and the first surveillance must fall within 12 months of the certification decision. Recertification must be completed before the certificate expires. A client that will not allow audits at the required frequency faces suspension. Check the current issue and scheme rules.
Say this plainly in the policy. Clients who understand that a second postponement could suspend their certificate rarely ask for a third. See surveillance audit frequency and recertification audit timing for the detail.
MythCancellation fees drive clients away.
RealityClear terms agreed at signing are rarely contested. Disputes usually start with surprises.
MythA cancelled day is lost anyway.
RealityMany days can be refilled if you keep a standby list and act the same day.
MythA client can postpone surveillance until it suits them.
RealitySurveillance frequency limits apply whatever the client prefers, and missing them leads to suspension.
MythUnannounced audits can be cancelled like any other.
RealitySchemes set their own rules on refused access for unannounced audits. See BRCGS unannounced audits.
How to refill cancelled auditor days
The fee recovers some money. Refilling recovers the day. The two work together, and refilling is usually worth more.
- Act on the same dayTreat a cancellation as a scheduling event to resolve today.
- Check the standby listKeep a list of clients who asked for an earlier date or have flexible windows.
- Pull work forwardLook for audits due later that the same auditor can do nearby and that can move within their window.
- Offer the day internallyGive the day to another planner or region before releasing a subcontractor booking.
- Record the outcomeLog whether the day was refilled, so you can track the refill rate.
For the knock-on effect on the rest of the plan, read audit rescheduling without chaos.
Audit cancellation policy for subcontracted auditors
The same logic applies in the other direction. When a subcontracted auditor withdraws late, you lose the day and may have to move the client. Mirror your client terms in auditor agreements: a notice period, a commitment to hold confirmed dates, and a clear process if they have to withdraw. The article on managing subcontracted auditors lists what else to hold in the agreement.
Putting the policy in place this quarter
Most of the work is agreeing the terms internally and applying them consistently.
A cancellation policy protects revenue; a refill process protects capacity.
- ✓Measure last year's cancellations by notice given and whether the day was refilled
- ✓Set notice tiers from the time your planners need to refill a day
- ✓Agree charges for each tier with sales and finance
- ✓Link postponement limits to surveillance and recertification deadlines
- ✓Add the policy to the certification agreement and to confirmation emails
- ✓Build a standby list of clients who want earlier dates
- ✓Track late cancellation rate and refill rate every month
Both measures belong on your certification body KPIs dashboard.
ScheduleAI is audit scheduling software built for testing, inspection and certification (TIC) organisations, with a planner approving every plan.
When an audit is cancelled, ScheduleAI proposes replacement audits for the freed auditor days within competence, window and travel rules, and its AI agents handle client date requests and reminders. Planners approve every change.
Book a demo Estimate your savingsQuestions
What is an audit cancellation policy?
The written terms that set how much notice a client must give to cancel or move a confirmed audit, what it costs when notice is short and how often an audit can be postponed.
Where should the cancellation policy be written?
In the certification agreement, which ISO/IEC 17021-1 requires to be legally enforceable, and repeated in date confirmation emails.
Can a certification body charge a late cancellation fee?
Yes, if it is in the agreement the client signed. The level is a commercial decision for each body.
What happens if a client keeps postponing surveillance?
Surveillance must happen at least once a calendar year except in recertification years. A client that does not allow audits at the required frequency faces suspension.
How do I measure whether the policy works?
Track the late cancellation rate and the refill rate each month. If refills rise and late cancellations fall, it is working.
Should extraordinary events be treated differently?
Yes. Handle them case by case with a documented risk review, and check IAF ID 3 and your accreditation body's position.