Audit programme planning: how to plan a year of audits in one pass
Audit programme planning for certification bodies: the three-year cycle, planning a year of audits in one pass, balancing capacity and keeping it stable.
Key takeaways
- The audit programme is the backbone of certification: every certificate's cycle, in one plan.
- Planning a year in one pass beats booking audits one at a time.
- Capacity planning shows early where internal auditors run short and subcontractors are needed.
- A stable plan with managed changes serves clients and auditors better than constant reshuffling.
Audit programme planning means laying out every audit a certification body must deliver over the certification cycle, then allocating auditors and dates for the year ahead in one coordinated pass. Planning the whole programme at once, rather than audit by audit, is what lets a body use internal capacity first, cluster travel and keep every audit inside its window.
From client programme to company programme
Each certified client has an audit programme: stage 1, stage 2, surveillance audits and recertification over three years. Add those programmes together and you get the certification body's own programme: thousands of audits, each with a window, a duration, a scope and a set of competence needs.
Most bodies manage this one client at a time, booking each audit as its window approaches. That works at small scale but hides the big picture: where capacity is short, where qualified internal auditors will sit idle and where subcontractors will be needed.
Plan the programme, not the audit.
The data a full-year plan needs
- Every certificate's cycle: certification decision date, standards and scope.
- Each audit's window and duration.
- Auditors' competence per standard and technical area, with validity dates.
- Availability: leave, training, part-time patterns and preferred regions.
- Client sites and their locations.
- Rules: rotation, conflicts, internal-first and travel limits.
Most of this already exists in your certification platform and HR records. The work is bringing it together in one place where the plan can use it.
Planning a year in one pass
- Q3Build the demandEvery audit due next year, with windows, durations and scope.
- Q3Check capacityInternal auditor days by competence and region, against demand.
- Q4AllocateAuditors and target months assigned for the whole year in one run.
- Q4Confirm earlyClients asked for preferred dates for the first quarter.
- RollingKeep it currentChanges handled as they come, re-planning only what must move.
One global certification body now plans a month of audits in 12 minutes. Another allocated 90% of a full year automatically in two minutes.
Capacity planning: the hidden benefit
When the whole year is planned at once, gaps appear early. You can see that ISO 45001 competence in one region runs out in March, or that three internal auditors have spare capacity in the autumn while work is going to subcontractors.
That turns capacity into a management decision rather than a monthly surprise: train an auditor, move work between regions, or agree subcontractor capacity in advance at a better rate.
The figure above comes from a European certification body, where the internal share of work rose from 59% to 73%. See increasing auditor utilisation for more.
Keeping the plan stable
Freeze near-term dates
Lock the next few weeks unless something must change.
Re-plan only what moves
When a change comes in, move the fewest audits possible.
Confirm with clients early
Dates agreed early are less likely to move later.
Review monthly
Look at window risk, capacity and subcontracting once a month.
Stability matters to clients and auditors alike. The best plans are rarely rebuilt from scratch; they are adjusted with care. See audit rescheduling.
Common pitfalls
MythWe'll plan each quarter when it comes.
RealityShort horizons hide capacity gaps until they're urgent and expensive to fix.
MythA full-year plan will be wrong by March, so why bother?
RealityThe plan will change, but a coordinated baseline makes each change smaller and cheaper.
MythProgramme planning is a job for one senior planner.
RealityIt depends on shared data and rules, so the whole team can maintain it.
Programme planning KPIs
ScheduleAI is audit scheduling software built for testing, inspection and certification (TIC) organisations, with a planner approving every plan.
How far ahead should we plan?
Allocate a full year in outline, confirm dates two to three months ahead, and keep the next few weeks stable.
Where does audit duration come from?
From your procedures, usually based on IAF MD 5 for common standards. The programme uses those durations; it doesn't set them.
What tools support programme planning?
Certification platforms hold the programme; audit scheduling software allocates it. Many bodies use both together.
ScheduleAI plans the whole audit programme in one pass, using internal auditors first, clustering travel and keeping every audit inside its window, then keeps the plan current as changes arrive.
Book a demo Estimate your savingsQuestions
What is audit programme planning?
Laying out every audit a certification body must deliver across the certification cycle and allocating auditors and dates for the year ahead.
Why plan a whole year at once?
It shows capacity gaps early, uses internal auditors first and allows travel to be clustered.
How long does it take to plan a year of audits?
With software, minutes: one certification body allocated 90% of a year in two minutes.
Does programme planning set audit durations?
No. Durations come from your procedures, usually based on IAF MD 5; the plan uses them.