Audit scheduling software: the complete guide for certification bodies

What is audit scheduling software?

Every certification body runs the same puzzle thousands of times a year. A client needs a surveillance audit inside its window. The audit needs someone competent in the right technical area, accredited for the right standard, free on the right days, not conflicted with the client, and not so far away that travel eats the margin. Multiply that by hundreds of auditors and thousands of audits, and planning becomes a full-time job for a team.

Audit scheduling software automates that puzzle. It reads your auditors' competences and availability, your audit programme and your scheme rules, and proposes an allocation for each audit. The better tools do this for the whole programme at once, so a decision on one audit takes account of every other audit that month.

Why spreadsheets and ERPs fall short

Most certification bodies start with spreadsheets, and many add a certification management system or ERP later. Both are useful, but neither was built to make scheduling decisions.

For the detail, see why Excel fails for audit scheduling and manual vs automated audit scheduling.

What a spreadsheet can't do

A spreadsheet stores information but cannot reason about it. It will not stop you booking an auditor whose qualification expired last week, notice that one auditor has visited the same client four years running, or show that moving one audit disturbs three others. Those checks live in planners' heads, which is why errors surface at accreditation assessments.

What an ERP usually does

Certification ERPs manage the client lifecycle: applications, audit programmes, reports, certificates and invoices. Their scheduling features record bookings and show availability, but the planner still chooses who goes where. A dedicated scheduling engine sits alongside the ERP and makes the allocation itself, then writes the result back.

The accreditation rules scheduling has to respect

Certification bodies don't schedule freely. Their programmes are shaped by ISO/IEC 17021-1 and scheme rules, and every allocation has to stand up to an accreditation assessment. Good scheduling software models these rules directly rather than leaving them to planners.

Each of these is covered in depth: audit due date tracking, multi-site audit scheduling and auditor competence verification.

The three-year certification cycle

A management-system certificate runs on a three-year cycle: an initial audit in two stages, surveillance audits in the following years, and a recertification audit before expiry. Under ISO/IEC 17021-1, the first surveillance audit after initial certification must take place within 12 months of the certification decision, so every surveillance date sits inside a window that the software has to respect.

Audit duration and multi-site sampling

The number of audit days is set by the certification body using the IAF mandatory documents, such as IAF MD 5 for audit time. Where a client has many sites, IAF MD 1 governs how sites are sampled. Scheduling software doesn't set these numbers, but it must honour them: a three-day audit needs an auditor free for three consecutive days, and sampled sites need to be visited within the programme.

Competence, impartiality and rotation

Auditors must be competent for the technical area and accredited for the standard. Impartiality means declared conflicts of interest must exclude an auditor, and many schemes limit how many consecutive audits the same auditor can perform at one client. These are exactly the checks that fail silently in a spreadsheet.

The capabilities that matter

Scheduling software for certification work is not the same as field-service or shift-planning software. These six capabilities separate tools built for accreditation from generic ones.

Two of these deserve their own guides: audit team selection and audit rescheduling.

Who uses audit scheduling software

How it works in practice

1. Load the dataAuditors, competences, availability, clients, sites and the audit programme, usually from your ERP.
2. Configure the rulesCompetence, accreditation, rotation, conflicts, windows, travel limits and priorities such as internal-first.
3. Run the allocationThe engine proposes an auditor or team and a date for every audit, with the reasons.
4. Review and approvePlanners accept, adjust or reject proposals; nothing is booked without them.
5. Handle changeWhen something moves, the engine re-plans the affected audits and the planner approves.

The shift is in the planner's role. Instead of building the plan, planners review it, resolve genuine exceptions and spend their time on clients and auditors rather than cells.

Audit scheduling software vs the alternatives

For most bodies, the answer is not either-or. The ERP remains the system of record and the scheduling engine becomes the decision layer on top of it.

Common misconceptions

What results look like

These results were measured on each customer's own production data. The pattern is consistent: planning time falls from days to minutes, more work stays with internal auditors, and travel drops because nearby visits are clustered.

How to evaluate audit scheduling software

• ✓Ask for a demo on an extract of your own auditors and audits, not a sample dataset.
• ✓Check that competence is matched per standard and technical area, with the reason shown.
• ✓Test a change: an auditor off sick for three days. See what moves.
• ✓Ask how the tool chases clients for dates and what planners still have to do.
• ✓Confirm how results are written back to your ERP.
• ✓Review security: ISO/IEC 27001, data hosting location and whether your data trains models.
• ✓Agree success criteria and a fixed price for scoping before any licence.

A vendor confident in its product will run it on your data first. If the comparison between the engine's plan and your real plan doesn't convince your planners, no slide deck should.

Use our features checklist, compare the three types of scheduling software and plan a proof of concept on your own data.

Pricing models and return on investment

Pricing varies. Some vendors charge per user, some per auditor, and some by volume of audit days scheduled. Volume-based pricing tends to suit certification bodies best, because it grows with the programme rather than with the number of people who log in.

The return usually comes from three places. Planner time falls sharply, which frees capacity for client work. Internal auditors are used first, so fewer days go to subcontractors at day rates. And travel falls as nearby visits are grouped into trips.

These figures come from our savings calculator with default UK values. Your own numbers will differ; the calculator lets you enter them, and a demo on your data measures them properly.

An implementation roadmap

The most successful rollouts start small and prove the result before expanding. A single division or scheme gives planners time to trust the engine, and gives you real numbers for the business case.

1. Weeks 1–2Custom demoYour audits planned by the engine and compared with how they were planned in reality.
2. Weeks 3–6Scoping and integrationRules configured to your procedures, ERP and calendar connections built, success criteria agreed.
3. Weeks 7–14PilotOne division live, planners trained, results measured against the agreed criteria.
4. ThenRolloutFurther divisions and countries, with support under a service-level agreement.

For certification bodies, audit scheduling software that checks competence, rotation and windows on every audit takes most of this work off the planning team.