Auditor of Compliance Management Systems (ISO 37301)

The course “Auditor of Compliance Management Systems (ISO 37301)” is designed to prepare professionals responsible for planning, organizing, conducting, and documenting audits of compliance management systems (CMS).

Participants will study the requirements of ISO 37301:2021, including compliance risk assessment, verification of the conformity of policies and procedures, evaluation of the effectiveness of the CMS, analysis of audit evidence, formulation of audit conclusions and preparation of audit reports, as well as planning and monitoring of corrective actions based on audit results. The course covers the requirements of ISO 19011 for planning, conducting, documenting, and evaluating the effectiveness of management system audits, as well as the requirements of ISO 17021 for bodies providing audit and certification of management systems, particularly with regard to their competence, consistency, and impartiality. A separate module is dedicated to the updates to ISO 19011:2026 and their practical application in external audits, including key changes to the standard and the use of remote audit methods.

Course program
Application

Duration

68hours

Language

English/Ukrainian

Format

100% online

Objectives

To prepare auditors capable of professionally planning, conducting, documenting, and evaluating audits of an implemented CMS (in accordance with ISO 37301), taking into account the guidelines of ISO 19011 and the requirements of ISO 17021, as well as formulating well-founded, impartial conclusions regarding the conformity of the CMS with established requirements and recommendations for its improvement.

Target audience

The course is intended for auditors, lead auditors, auditor candidates undergoing training to work for certification bodies, and professionals involved in CMS certification audits.

Document on completion

Upon successful completion of the course, participants are awarded a certificate conferring the qualification “Auditor of Compliance Management Systems”, listed in the SIC international register.

Thematic plan

The course has a total duration of 68 hours and consists of 3 training modules.

Objectives

Module 1 — Description of the requirements of ISO 37301:2021 “Compliance management systems. Requirements with guidance for use”. SIC.MODULE.ISO37301:2021
№ Тopic Hours
1 Introduction to the CMS 2
2 Context of the organization as a fundamental basis of the CMS 3
3 Leadership, culture and compliance policy 2
4 Risk-based planning of the CMS 4
5 Resources and documentation of the CMS 3
6 Operational activities and processes of the CMS 4
7 Evaluation and analysis of the effectiveness of the CMS 3
8 Corrective actions and improvements to the CMS 2
9 Testing 1
  Hours total 24
Module 2 — Conducting audits of management systems in accordance with ISO 19001, ISO/IEC 17021-1:2015. SIC.MODULE.ISO/IEC 17021-1:2015
№ Topic Hours
1 Audit: objectives and criteria 2
2 Classification of audits and related standards 2
3 Terms and definitions 1
4 Audit principles and their practical implementation 4
5 Attestation procedure, requirements for auditors 4
6 Pre-certification measures and sampling application 4
7 Audit planning 2
8 Primary certification: I and II stages of the audit 2
9 Audit conducting 2
10 Certification decision 2
11 Support: supervisory and special audits, recertification 2
12 Suspension, cancellation, reduction of certification scope 1
13 Appeals and claims 1
14 Testing 1
15 Case-reviews 2
  Hours total 32
Module 3 — ISO 19011:2026 – updates for auditors. SIC.MODULE.А.SO19011:2026
…