What is an Auditor?
An auditor is a qualified, independent professional who systematically examines whether an organization's processes, management systems, or financial records comply with defined standards, norms, or internal policies. In the context of ISO management systems such as ISO 9001 for quality management or ISO 14001 for environmental management auditors assess whether a company's system is both compliant and genuinely effective. The role goes far beyond checking paperwork. A skilled auditor acts as a diagnostic partner: identifying weaknesses, uncovering hidden risks, and recommending concrete improvements. Their work directly supports an organization's ability to maintain certifications, satisfy customers, and continuously improve.Expert perspective
At Sternberg Consulting, our work as certified internal auditors and external Quality Management Representatives (QMR) spans manufacturing, medical devices, IT, and construction. In our experience, the best audits don't just confirm compliance — they surface the operational insights that drive real improvement.
Auditors operate on two foundational principles: objectivity (impartial, fact-based assessment free from conflicts of interest) and methodical rigor (using structured techniques such as document review, process observation, and structured interviews to gather reliable evidence).
Core Tasks and Responsibilities of an Auditor
The exact tasks depend on the type of audit and industry, but management system auditors particularly those working to ISO standards follow a clearly defined process guided by ISO 19011, the international standard for auditing management systems.1. Audit Planning
Before anything else, the auditor defines the scope, objectives, and criteria of the audit. This involves drafting an audit plan, coordinating with the relevant process owners and management, and reviewing existing documentation to prepare effective questions and checklists.2. Conducting the Audit
During the on-site audit, the auditor uses three primary techniques to gather objective evidence:- Document and record review — verifying that required documentation exists, is up to date, and reflects actual practice
- Interviews — speaking with employees at all levels to understand how processes work in practice (not just on paper)
- Process observation — directly watching workflows to identify gaps between documented procedures and real operations
3. Evaluating Business Processes
The auditor assesses whether key processes are appropriately documented, consistently implemented, monitored for performance, aligned with customer requirements, and compliant with applicable legal and normative requirements. In a quality management audit, this means verifying the effectiveness of the entire QMS — not just individual elements.4. Identifying Nonconformities
One of the auditor's central outputs is identifying deviations from the applicable standard. These can be result-based (e.g., missing training records, inadequate documentation) or process-based (e.g., unclear responsibilities, missing controls at critical process steps). Nonconformities are graded by severity and form the basis of the audit report and subsequent corrective actions.5. Preparing and Presenting the Audit Report
At the close of the audit, the auditor prepares a structured report summarizing the audit findings, listing all nonconformities and observations, and providing recommendations for improvement. This report is presented to management in a closing meeting and serves as the formal record of the audit.6. Following Up on Corrective Actions
In follow-up audits or subsequent cycles, the auditor verifies whether corrective actions from previous audits have been implemented and are producing the intended results. This follow-through is what makes auditing a driver of genuine continuous improvement rather than a one-time compliance check.Practical tip
The most common mistake organizations make during audits is treating them as events to "pass" rather than opportunities to learn. Auditors who find real problems are giving you valuable information — the goal is continuous improvement, not a perfect score.