Auditor capacity planning for certification bodies
A practical guide to auditor capacity planning: turn the audit programme into days by competence, compare with supply, then hire, train or subcontract.
Key takeaways
- Plan capacity per competence cell (standard, IAF code or technical area, region), because total headcount hides the real gaps.
- Most demand is already known: surveillance and recertification dates follow fixed certification cycle rules.
- Size supply from available days at a realistic target utilisation.
- Review a rolling 12 to 18 month plan every quarter, because training a new auditor to a scope takes time.
Auditor capacity planning compares the audit days you must deliver with the auditor days you can supply, broken down by competence, region and month. Demand comes from surveillance, recertification and new business, sized with your audit time rules. Supply is available days per competent auditor at a target utilisation. The gaps show where to hire, train, subcontract or move dates.
What is auditor capacity planning?
Auditor capacity planning is the job of making sure you have enough competent auditor days, in the right places and months, to deliver every audit inside its window. It sits above day-to-day scheduling. Scheduling decides who does which audit next month. Capacity planning decides whether you will have anyone able to do it at all next spring.
Most certification bodies do it at headcount level: we have 30 auditors and 6,000 audit days, so we are fine. That hides the real problem. You may have plenty of ISO 9001 capacity and one person qualified for a busy technical area, who is booked solid and due to retire.
How does auditor capacity planning work?
The method is the same whether you use a spreadsheet or a scheduling engine. Convert the audit programme into days, split those days by what they require, and set them against the days your competent auditors can actually give.
- 1Forecast demandSurveillance, recertification and new business
- 2Convert to daysApply your audit time rules
- 3Split by competenceStandard, code, region, language, month
- 4Compare with supplyAvailable days at target utilisation
- 5Decide the fixHire, train, subcontract or rephase
Audit time comes from your duration rules, which for management systems means IAF MD 5 audit time and, for integrated audits, IAF MD 11.
How do I forecast audit demand?
Start with what is already certain. Under ISO/IEC 17021-1:2015, surveillance audits happen at least once a calendar year except in recertification years, and the first surveillance after initial certification must be within 12 months of the certification decision. Recertification must be completed before the certificate expires. So your existing client base produces a predictable stream of audits for the next three years.
Add new business from the sales pipeline, weighted by likelihood, with stage 1 and stage 2 audits. Then add a smaller allowance for special audits, transfers, extensions to scope and short-notice work. Check the current issue of each standard and scheme for timing rules. The article on surveillance audit frequency covers the timing rules in detail.
Illustrative data. Competent supply at target utilisation: 70 days a month.
How to calculate supply by competence
For each auditor, take available days: contracted days minus leave, holidays, training and non-audit duties. If you have no better figure, the savings calculator on this site uses 200 working days a year. Multiply by your target utilisation to get plannable audit days. Then assign those days only to the cells the auditor is competent for.
An auditor competent across several codes appears in several cells, so do not add cells together. Instead, look for cells where supply depends on one or two people. Those are your single points of failure.
| IAF 17 | IAF 19 | IAF 28 | IAF 31 | IAF 35 | |
|---|---|---|---|---|---|
| Auditor A | |||||
| Auditor B | |||||
| Auditor C | |||||
| Auditor D | |||||
| Auditor E |
QualifiedIn trainingNot qualified
In this illustration, IAF 28 rests on Auditor C alone, with one trainee. IAF 35 is well covered. A usable auditor competence matrix makes this visible at a glance. See IAF codes explained for what each code covers.
A worked example of a capacity gap
Demand for one technical area next year is 600 audit days. Three auditors are competent for it. Each has 200 available days and a target utilisation of 85%, giving 170 plannable days each, or 510 in total. But those three also cover other work, and last year they gave 60% of their audit days to this area. Real supply is therefore about 306 days.
The gap is 294 days. That is too large to fix by squeezing calendars. The options are to train two more auditors into the area, subcontract part of the gap, or move some audits to a quieter month where the rules allow.
| Option | Works best when | Watch out for |
|---|---|---|
| Train internal auditors | The gap is lasting and the area is core business | Lead time for evidence of competence and witnessed audits |
| Hire | Several cells are short at once | Recruitment time and a new auditor's narrow early scope |
| Subcontract | Gaps are seasonal, remote or specialist | Margin and control; see managing subcontracted auditors |
| Rephase audits | Windows allow earlier or later dates | Surveillance and recertification deadlines |
How far ahead should you plan capacity?
Plan on several horizons at once. The further ahead you look, the coarser the plan can be.
- Every yearSet headcount and training plan12 to 18 month demand by competence cell, reviewed with finance
- Every quarterRebalanceUpdate the pipeline, retirements and new qualifications; re-run the gap analysis
- Every monthAllocateBook audits for the coming months within the capacity you have
- Every weekAbsorb changesCancellations, sickness and client date requests
Training new people into a scope takes time, because competence has to be evidenced and new auditors are usually observed. Read scheduling trainee auditors before you count trainees as supply.
Auditor capacity planning checklist for this quarter
You can build a first capacity plan in a few weeks with the data you already hold. Most of the work is agreeing definitions. The maths is simple.
- ✓Export every audit due in the next 18 months with standard, code, site region and due date
- ✓Apply your audit time rules to convert audits into days
- ✓Add new business from the pipeline, weighted by likelihood
- ✓Calculate available days per auditor from HR data
- ✓Set a target utilisation and apply it
- ✓Map each auditor's days to the competence cells they cover
- ✓List cells where supply depends on one or two people
- ✓Agree a fix and an owner for each gap
For how this links to utilisation, read auditor utilisation rate.
For certification bodies, audit scheduling software that checks competence, rotation and windows on every audit takes most of this work off the planning team.
ScheduleAI plans the whole audit programme against real auditor calendars, competence, accreditation and travel in one run, so planners can see where capacity is short by standard, code and month before it becomes a missed window.
Book a demo Estimate your savingsQuestions
What is the difference between capacity planning and scheduling?
Capacity planning checks months ahead whether you have enough competent auditor days. Scheduling assigns named auditors and dates to specific audits.
How many working days should I assume per auditor?
Use HR data where you have it. As a starting point, our savings calculator assumes 200 working days a year per auditor.
Which utilisation target should I plan with?
Use a figure your team has actually achieved or can sustain, and plan below 100% to leave room for travel, reporting and training.
How far ahead should a certification body plan capacity?
Keep a rolling 12 to 18 month view reviewed quarterly, because hiring and training auditors takes longer than a scheduling cycle.
Why plan by IAF code rather than headcount?
Auditors can only take audits within their approved scope. Headcount can look healthy while a single technical area has one qualified person.
What if demand exceeds supply in a peak month?
Move audits earlier or later within their windows where the rules allow, then use subcontracted auditors for the remaining gap. See how to clear an audit backlog.