Find partners
The ISO Review Podcast

The ISO Review Podcast

Hosted by Jim

Episodes

92

Latest episode

Oct 2026

Language

EN-US

About the show

The ISO Review Podcast is a production of SimplifyISO. In each episode, we share the latest International Standards Development, and is your resource for getting the most out of your management systems. Your podcast hosts are Howard Fox & Jim Moran. Howard is a Business Coach and Host of the Success InSight Podcast. Jim is an ISO Management System Professional, celebrating 30-plus years delivering ISO support.

Listen to episodes

60 recent
October 27, 2026Episode 9332 min

Navigating the ISO 14001:2026 Update: A Leader’s Guide to Compliance and EMS Upgrades

Welcome to the ISO Review Podcast, your go-to resource for the latest developments in international standards and practical insights on maximizing your management systems. In this episode, Jim focused on the recent updates to ISO 14001:2026, the environmental management system requirements, including what has changed, what organizations need to know about the new and revised clauses, and how these changes will impact leadership, audits, and everyday operations. A key theme that emerged was the introduction of Clause 6.3—Planning of Changes—as well as the broader emphasis on leadership accountability and integrating environmental considerations into all roles. The discussion explored practical approaches for gap analysis, updating your management system, and ensuring a smooth, low-stress transition to the new standard, with actionable tips for conducting audits and building an effective culture of environmental awareness. Whether you’re maintaining certification or just starting your ISO journey, this episode offers valuable guidance to help you stay compliant and keep your management system running smoothly. DISCUSSION Introduction and Setting Welcome to the ISO Review Podcast and introductions Overview of the Episode’s Focus Introduction to new releases of ISO 9001 and ISO 14001 in 2026 Outline of episode structure: What changed in the standards Discussion on leadership and audits Guidance on where to get started with upgrades Summary of ISO 14001:2026 Changes Context on previous major structural change (2015 version) Current update characterized as tweaks and small additions Maintenance of the Harmonized (High-Level) Structure (Plan-Do-Check-Act) Breakdown of Clause Changes Clauses 4.1 and 4.2 (Context and Interested Parties) Incorporation of earlier amendments Added references to biodiversity, ecosystems, pollution, resources, and climate change Clause 4.3 (Scope) Now includes lifecycle perspective reference Clause 5 (Leadership) 5.1.1 requirement expanded to support all relevant roles, not just management Emphasis on demonstration of leadership commitment Clause 6.1.4 (Risks and Opportunities) Risks and opportunities separated into distinct subclauses Renewed focus on opportunities Clause 6.3 (Planning of Changes) Introduction of a new clause on managing changes to the management system Clause 8.1–8.2 (Operations) Tweaks to external processes and contingency planning for emergencies Clause 9.3 (Management Review) Restructured into General, Inputs, and Results sections Terminology and Consolidation Disappearance of Clause 10.3 Minor updates to measurements In-Depth Exploration of Key Changes Planning of Changes (Clause 6.3) Steps required for managing changes (determining, planning, managing, reviewing) Stress reduction and risk management associated with well-planned change Importance of documented evidence for auditors Leadership (Clause 5.1) Evolution of management responsibility language Expansion to include visible accountability and support for every role Importance of integrating management systems into daily work versus seeing them as separate tasks Organizational Engagement and Cultural Change The impact of visible leadership on building an environmental culture Examples illustrating discrepancies between stated values and business decisions (“CATNIP” approach) Benefits of pro-active management involvement Practical Audit and Review Insights Conducting Effective Audits Proposed 5-part audit framework: Verifying whether processes achieve intended results Assessing risk management Seeking improvement opportunities from auditees Ensuring audit checklists reflect 2026 clause updates Emphasis on verifiable evidence in audit reporting Critical audit focus on specific clauses (4.1, 5.1, 6.3, 8.1) Management Review Practices Advocating for management reviews as decision meetings Importance of assigning ownership, resources, and deadlines to action items Integrating Supplier and Externally Provided Processes Identifying which supplier processes are relevant to environmental outcomes Adjusting controls based on the influence of each provider Practical Roadmap for Transition Gap Analysis Approach Mapping current EMS to new/changed clauses Rating, scoring, and prioritizing needed changes Ranking and Prioritization Focusing first on new, high-impact clauses (like 6.3) Raising the visibility of leadership actions Improving context reviews to include biodiversity and climate Step-by-step Transition Conduct gap analysis, training, and internal follow-up Prepare for registrar’s transition audit Advice to begin transition early to minimize stress NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 14001:2026, 10 Environmental Management System, SimplifyISO, ISO Review Podcast, Podcast Interview #JimMoran #EnvironmentalManagementSystem #ISO14001:2026 #SimplifyISO #ISOReviewPodcast #PodcastInterview

October 13, 2026Episode 9233 min

ISO 9001:2026 - Exploring the 10 Building Blocks of a Quality Culture

Welcome to another episode of the ISO Review Podcast, your trusted source for the latest updates on international standards and maximizing the value of your management systems. In today’s episode, Jim Moran and Howard Fox dive into the 2026 update of ISO 9001, which introduces a significant new requirement: the promotion of a quality culture and ethical behavior by top management. Drawing from Jim Moran’s extensive experience and his "10 Building Blocks of a Quality Culture" framework, our Jim break down practical steps organizations can take to meet the new standard and improve their management systems. Whether you're a seasoned ISO professional or just starting out, this episode is packed with actionable insights to help you foster a culture of quality and stay ahead in compliance. DISCUSSION 1. Overview of Today’s Episode Introduction of topic: new 2026 version of ISO 9001 Highlighting new requirements for top management: Creating a quality culture Promoting ethical behavior Reference to Clause 5.1.1 (top management responsibilities) Mention of a free resource: “10 Building Blocks of a Quality Culture” available on simplifyasset.com 2. The 10 Building Blocks of a Quality Culture Jim Moran outlines and explains each building block: 1. Put a High Value on Quality Not all organizations truly value quality The inconsistency between professed quality values and cost-cutting reward systems The financial impact of errors on profitability The necessity of rewarding quality-oriented behavior 2. Determination to Seek Quality The importance of persistent quality pursuit Concrete actions versus lip service Impact on customer relationship and advocacy Research on the disproportionate effect of negative versus positive comments 3. Understanding Processes and Interactions Reference to Deming's Plan-Do-Check-Act (PDCA) cycle Importance of auditing for results, risk management, and improvement The role of process understanding in internal auditing and improvement 4. Design Alternatives and Possibilities Need for flexible, non-rigid systems Avoiding cycles of nonconformances and corrective actions Use of a process-focused approach to anticipate and handle issues 5. Challenge and Discard Non-Value-Added Elements Reviewing management systems to remove unnecessary complexity Involving employees through internal audits for continual improvement suggestions Reference to the “lean” approach and mistake-proofing (Taiichi Ohno and The Toyota Production System) Importance for employee ease and support 6. Be Prepared to Start Over Recognizing when full process redesign is needed Cost versus benefit analysis of modifying vs. rebuilding processes Need for top management buy-in Reference to evaluation and auditing requirements in ISO 9001 7. Use Concepts—Seeing the Forest for the Trees Value of big-picture and lateral thinking (reference to Edward de Bono) Ensuring alignment with organizational strategic direction 8. Break Things Down into Smaller Units Applying the "one bite at a time" approach Benefits of making incremental versus radical changes Applying process mapping and objective analysis for improvement 9. Be Ready to Trade Off Other Values in Favor of Quality The "quality, price, timing: pick two" constraint Willingness to simplify processes if it maintains quality Focusing on measuring what matters and eliminating unnecessary metrics (reference to Goldblatt’s Theory of Constraints) The importance of customer feedback and engagement for meaningful improvement 10. Know For Whose Sake You’re Designing Quality Understanding "interested parties" in ISO 9001 Meeting customer needs and expectations (explicit and implicit) Emphasizing empathy towards customer experience 3. Locating Quality Culture Requirements in the ISO 9001:2026 Standard Detailed references to where “quality culture” and related requirements appear: Clause 5.1.1 (leadership responsibilities, including ethical behavior) Clause 7.3 (awareness, ensuring people understand quality culture and ethical behavior) Clause 7.1.4 (environment for operation of processes, noting the influence of quality culture) Advice on integrating these concepts into orientation programs for employees and subcontractors 4. Registrar Expectations and Audit Focus What registrars will look for: Leadership interviews, patterns, and consistency over time Assessing awareness among frontline staff Communication trails reflecting the culture Note that documentation is not specifically required, but the organization’s environment should reflect a genuine pursuit of quality culture 5. Conclusion and Resources Recap of the 10 building blocks and their application Reference to availability and updates of the PDF download Note of external resources and organizational links: Simplify ISO website International Management System Institute (IMSIpro.org) LinkedIn and YouTube channels for both hosts Howard Fox’s coaching website Closing remarks, gratitude, and encouragement for listeners to access provided resources and continue exploring international standards NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Link to Jim's FREE DOWNLOAD , '10 Building Blocks of a Quality Culture.' Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 9011:2026, 10 Building Blocks of a Quality Culture, SimplifyISO, ISO Review Podcast, Podcast Interview #JimMoran #InformationSecurityManagementSystem #ISO9001:2026 #SimplifyISO #ISOReviewPodcast #PodcastInterview

October 6, 2026Episode 9137 min

ISO 9001:2026 Made Simple: Demystifying Key Changes, Risks, and Best Practices

Welcome back to the ISO Review Podcast, your trusted source for the latest developments in international standards and practical ISO management system insights. In this episode, Jim and HowardThe conversation focused on the release of ISO 9001:2026, providing listeners with an in-depth look at the newest changes to the world’s leading quality management standard. A key theme that emerged was the evolutionary nature of the update—no drastic overhauls, but clear clarifications and strengthening of existing requirements. The discussion explored new and significant elements such as: The promotion of quality culture and ethical behavior The explicit separation of risk- and opportunity-based thinking, and Adjustments in change management and organizational knowledge. Several points were raised, including the importance of updating internal auditors, demonstrating compliance during audits, and the practical benefits for both certified organizations and those simply seeking to improve their management practices. Whether you’re currently ISO certified or considering implementation, this episode offers crucial insights, practical advice, and resources to help you stay ahead with ISO 9001:2026. DISCUSSION 1. ISO 9001:2026 Release Overview Announcement of the new release and its evolutionary, not revolutionary, nature Confirmation of no structural changes; same clause numbers Transition period: three years to September 2029 Implications for certified organizations and upcoming audits 2. Clause-by-Clause Review of Changes Clause 5.1.1 – Leadership Number of requirements increased from 10 to 12 Reordering of top management requirements Introduction of “promoting quality culture and ethical behavior” Adjustment: risk-based thinking now includes opportunity-based thinking Clause 7.3 – Awareness Need for employees to be aware of quality culture and ethical behavior Cross-reference to supporting materials (e.g., paper on quality culture) Clause 4.1 – Context of the Organization Use of SWOT technique (strengths, weaknesses, opportunities, threats) Inclusion of climate change as a required consideration Clause 6.1 & 6.2 – Risk and Opportunity Clear distinction made between risks and opportunities (now two separate clauses) Recommendation to create workflow maps to address risks end-to-end Clause 6.3 – Planning of Changes Increase in required planning steps from 4-5 to 7 Emphasis on managing and communicating changes Monitoring effectiveness of changes Clause 7.1.6 – Organizational Knowledge Expansion to include know-how for full Quality Management System (QMS) results, not just products/services Differentiation between organizational knowledge and work instructions Addition of definitions in the standard Clause 4.2 – Interested Parties Greater emphasis in management review process Update to management review documentation 3. Operations and Customer Focus (Clause 8) Clause 8.2 – Customer Requirements Requirement for contingency actions in case of delivery disruptions Importance of documenting and reviewing contingency plans Clause 8.5 – Production and Service Delivery Emphasis on using the latest operating information at the point of work Reinforcement of existing requirements (e.g., competent staff, preventing human error) 4. Auditing and Improvement (Clauses 9 & 10) Internal Audit Requirements Need for more detailed audit program information (objectives, scope, criteria) Proof of auditor training on new standard Importance of internal audit before registrar audit Management Review and Continual Improvement Update to management review inputs and documentation Change to improvement requirements; Clause 10.3 now embedded elsewhere Ongoing importance of demonstrating improvement 5. Registrar Expectations and Audit Preparation Variation between registrars in audit approach Focus on new requirements: culture, ethics, separated treatment of risks and opportunities Importance of communication and documentation regarding organizational changes Suggestions for practical audit preparation, including use of updated forms and risk registers 6. Practical Benefits and Implementation Guidance Benefits for organizations not pursuing certification, through improved clarity and operations Applicability to new and existing clients Value of organizing business processes even without external certification 7. Accessing Resources and Support References to the guest’s website (simplifyiso.com) and associated resources (quality culture paper) Mention of the International Management System Institute (imsipro.org) Offer of assistance and demonstrations for listeners 8. Conclusion and Recap Reiteration of the evolutionary nature of changes (“fine-tuning”) Historical perspective on past major and minor changes to ISO 9001 Encouragement to update systems and prepare for next audits Reminder of resource links and where to find more information about the podcast and the guests NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 9011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9001:2026 #ISOReviewPodcast #SimplifyISO #Podcast

September 22, 2026Episode 9033 min

ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 13-18

Welcome back to the ISO Review Podcast, your trusted source for the latest developments in international standards and practical ISO management system insights. In this episode, Jim and Howard conclude their comprehensive review of ISO 19011:2026, the essential auditing guidelines for management systems. Together, they dive into Annex A, covering Clauses A.13 to A.18, and discuss critical topics like working documents for combined audits, collecting and verifying digital evidence, onsite and remote auditing methods, and best practices for reporting findings—especially when audits span multiple standards. Drawing from real-world examples and decades of experience, Jim also offers tips for holistic audits, efficient document control, and navigating today’s virtual audit landscape. Stay tuned for expert advice, practical anecdotes, and a glimpse at what’s next: a preview of changes coming in ISO 9001:2026. DISCUSSION 1. Overview of Current and Upcoming Standards Announcement: Completion of ISO 19011:2026 coverage (01:40) Recap: Previous episode covered up to Annex A.12 Plan for this episode: Covering Annex A.13 to A.18 Teaser: Upcoming release of ISO 9001:2026 and plan to discuss it in the next episode (02:14) 2. Introduction to Annex A.13–A.18 in ISO 19011:2026 Reminder of the prevalence of integrated/multi-standard audits Example: Client with ISO 9001, 14001, 45001, and 27001 across multiple sites Impact of COVID-19 on auditing practices (shift to virtual audits) Introduction of virtual audit adaptations (03:06 - 04:16) 3. Clause A.13: Working Documents for Combined Audits Importance of preparing audit criteria and working documents Core elements of an audit plan: objective, scope, criteria Different audit types (surveillance, internal, registration, Stage 1) Use of checklists and evidence collection Challenges and efficiencies in auditing multiple standards simultaneously (05:06) 4. Efficient Document Management Across Systems Leverage harmonized structure (clauses 4, 5, 6, 7, 9, 10 common across standards) Unique aspects in Clause 8 for specific domains (quality, environmental, etc.) Efficient review and avoidance of duplication through integrated documentation and software solutions Importance of auditors’ authority and access to necessary documents (07:19 - 09:46) 5. Clause A.14: Collecting and Verifying Digital Evidence Verification of authenticity and integrity (versioning, access logs, etc.) Sampling plan considerations for electronic data Handling of digital evidence: screenshots, document identification, and data disposal Guidance on documenting evidence without unnecessary data storage (09:47 - 13:50) 6. Clause A.15: Onsite Audit Considerations Health and safety and information security requirements for onsite auditors Example of auditor pre-entry requirements (training and certification) COVID-19 impacts: masks, vaccination, cultural norms, working hours Advance communication: audit plans, objective/scope/criteria, minimal disruption Addressing the misconception of auditors as "ISO cops"; clarification of audit outcomes (14:54 - 18:16) 7. Audit Finding Process and Nonconformity Management Types of findings: opportunities for improvement, nonconformances Corrective action plans and timelines (routine and urgent safety issues) Legal obligations in reporting severe health and safety violations (18:16 - 20:31) 8. Clause A.16: Remote Auditing Methods Expansion of remote auditing due to recent technological and situational changes Technical requirements: prep, access, protocols, data security, contingency planning Registrar oversight and accreditation (standards 17011 and 17012) Practical matters: breaks, muting, permissions for screen captures and recordings Auditor competence with remote tools (Teams, Zoom, WebEx, etc.) (20:32 - 23:05) 9. Clause A.17: Remote Interviews Adapting questioning for remote interviews Use of real-time screen sharing or physical walkthroughs via devices Ensuring evidence gathered is verifiable and objective Appropriate documentation language (avoiding subjective/accusatory statements) Identifying process improvement opportunities and documentation mismatches (23:27 - 27:18) 10. Clause A.18: Audit Findings and Reporting Across Multiple Standards Approaches for findings that touch multiple standards: separate or combined reporting Advantages of harmonized structure/high-level structure in audits Providing a holistic view for the auditee about their integrated management system’s performance (27:18 - 29:51) 12. Episode Wrap-Up and Next Steps Summary: Completion of ISO 19011:2026 review Next episode: Review of ISO 9001:2026 Listeners guided on where to find more resources (SimplifyISO.com, IMSIPRO.org, LinkedIn, YouTube, Fox Coaching) Farewell and reminders about show notes/backlinks (29:51 - 32:48) NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026 #ISOReviewPodcast #SimplifyISO #Podcast

September 8, 2026Episode 8935 min

ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 7-12

Welcome back to the ISO Review Podcast, your trusted source for the latest in international standards development and management systems excellence. In this episode, Jim and Howard continue their practical deep dive into ISO 19011, specifically focusing on Appendix A. Together, they explore key auditing topics such as compliance and conformance, understanding organizational context, leadership and commitment, managing risks and opportunities, lifecycle perspectives, and effective auditing of the supply chain. With insights drawn from decades of ISO experience, Jim shares real-world strategies for making audits meaningful, maintaining compliance, and enhancing the value of your management system. Whether you’re an auditor, manager, or simply passionate about process improvement, this episode is packed with actionable guidance to help you get the most out of your internal audits. DISCUSSION 1. Main Topic Introduction: ISO 19011 Appendix A Howard Fox introduces ISO 19011 Appendix A as the focus of the episode 04:41 2. Overview of ISO 19011 and Annex A Jim Moran clarifies ISO 19011 is an auditing guidance standard, not a requirement 04:52 Explanation of previously covered topics in Annex A, including: Audit preparation Audit methods Process, judgment, performance, verifying information, sampling 3. New Annex A Topics for this Episode a. Auditing Compliance within a Management System 05:43 Difference between compliance (legal) and conformance (voluntary standards) Importance of using correct terminology in documentation Companies must identify applicable statutory and regulatory requirements 07:15 Auditing process flow to connect compliance requirements to activities Need for mechanisms to track changes in requirements Documentation and processes to maintain compliance Sector-specific challenges (quality, environmental, health/safety, information security) Interviewing compliance-responsible personnel as part of audit b. Auditing Context (A.8) 12:29 Aligning audits with the organization's context and standards Regulatory bodies as interested parties Importance of planned compliance rather than hope Elements auditors should examine: Verifiable evidence Suitability and competence Audit focus on results, risk management, and opportunities for improvement c. Auditing Leadership and Commitment (A.9) 14:57 Leadership requirements in harmonized ISO standards (especially Clause 5.1) New requirements in latest ISO 9001 FDIS: mandate to develop a "quality culture" Auditing for evidence of leadership’s accountability and management system effectiveness Role of auditors in interacting with top management and assessing their commitment Interviewing personnel to assess perception of management’s commitment d. Auditing Risks and Opportunities (A.10) 18:05 Importance of robust risk identification by the organization Reference to ISO 31000 steps: Identify, Analyze, Assess risks 18:51 Use of a risk mitigation plan if risks are high Inquiry into risk management practices at activity level Role of top management in addressing unmanaged risks and allocating resources Considering internal and external sources of risk Visual aids (e.g. symbols) for indicating risk types in process flows e. Lifecycle Perspective (A.11) 22:06 Requirement for some management systems (notably environmental) to apply a lifecycle perspective Considering influence and control over a product/service lifecycle Examples and practical steps: using AI or web for visual lifecycle diagrams Applications in environmental management, climate impact, and improving performance f. Auditing the Supply Chain (A.12) 25:24 Increased awareness of global supply chain complexity post-COVID Mention of ISO 27003 Part 2 for information security in supply chains Types of supply chain audits: Management system Process Product Information security configuration Explanation of first, second, and third-party audits Contract-focused auditing for practicality and audit scope management Ongoing surveillance and continual improvement audits Relationship between supply chain, lifecycle, and risk management 7. Importance of ISO Standard Appendices Howard Fox and Jim Moran discuss the value of appendix content in ISO standards 31:45 Suggestion to use AI for sourcing additional material to enhance audit value 8. Resources and Closing Jim Moran gives details about Simplify ISO, their software, and additional resources (IMSIpro.org, LinkedIn, YouTube) 32:40 Howard Fox mentions where to find more information about himself and closing statements 35:16 Farewells and sign-off 34:53 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026 #ISOReviewPodcast #SimplifyISO #Podcast

August 11, 2026Episode 8831 min

ISO 19011:2026 Guidelines for Auditing Management Systems - Annex A, Clauses 1-6

Welcome to the latest episode of the ISO Review Podcast, where we dive into the essentials of international standards and provide guidance for optimizing your management systems. In this episode, Howard Fox and ISO management system expert Jim Moran explore ISO 19011:2026, focusing on Appendix A, clauses 1 through 6. Whether you’re looking to refine your internal audit program or better understand auditing methods, professional judgment, and sampling techniques, this conversation covers the practical guidance and expert insights you need to elevate your audits and drive ongoing improvement within your organization. Join Jim and Howard as they break down the first part of Appendix A, setting the stage for future episodes covering the remaining clauses—your go-to resource for mastering ISO 19011. DISCUSSION 1. Overview of ISO 19011 Introduction to ISO 19011 and its relevance for audits 02:12 Historical background of the standard: origins, evolution, integration of quality and environmental standards, and its use globally (03:10) Universal adoption by registrars and training programs 03:35 2. Structure and Sections of ISO 19011 Review of previously covered main clauses/sections (definitions, preparing/audit planning, managing the audit program, conducting audits, auditor competence) 04:14 Transition to Annex A, explaining its structure: 18 sections, planned coverage over three episodes (04:27) 3. Details of Annex A (Clauses 1–6) A.1 Auditing Methods Human interaction (onsite/remote interviews, observations, document review with auditee) 06:17 No human interaction (reviewing documentation alone) 07:14 Audit objectives: effectiveness, risk management, improvement opportunities 07:49 Importance of audit methods in planning and reporting 08:34 A.2 Auditing of Processes Relationship of policies, objectives, and processes 09:36 Understanding process inputs, activities, and outputs (input-process-output model) 10:09 Interrelated processes and workflow, from customer inquiry to delivery and payment 10:25 Importance of auditing end-to-end flow and process handoffs 11:23 A.3 Professional Judgment Necessity for human auditors to apply context and judgment; reasons AI can’t fully replace auditors 11:43 Judging the adequacy and effectiveness of the organization’s approach rather than strictly following standard text 12:17 Auditors to audit the organization’s workflow, not just standard clauses 12:41 Confidentiality, non-consultancy stance, and providing suggestions without directive language 14:13 A.4 Performance Results Focus on intended results of the management system during audits 15:26 Auditor’s need for industry knowledge 15:58 Use of technical experts when needed 16:34 Documented information: maintain/retain requirements, and typical gaps in new ISO 9001 adopters 17:31 A.5 Verifying Information Concept of verifiable evidence versus “facts” 18:58 Criteria for verification: complete, correct, consistent, current (“4 C’s”) 21:11 Document accessibility requirement and practical ways to check it 21:25 Care in handling sensitive and confidential information during audits 22:46 A.6 Sampling Challenges in sampling: deciding quantity and representativeness 23:53 Standard sampling approaches and relevance to different industries 24:51 Practical sampling guidance (e.g., randomly checking 5 records) 25:09 Auditing for conformance, not nonconformance; limits of 100% checking 25:41 Risk with sampling and principles for application (randomization, adequacy) 26:17 Mention of statistical versus judgment-based sampling approaches 27:15 4. Preview of Next Episode Plan to cover Annex A clauses 7–12 (compliance, context, risks and opportunities, lifecycle, supply chain auditing) 27:58 5. Conclusion and Resources Howard Fox’s reflections on practical connections of ISO knowledge 28:27 Jim Moran’s resources: SimplifyISO, IMSIpro, other content 29:05 Howard Fox’s sites and closing remarks 30:54 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026 #ISOReviewPodcast #SimplifyISO #Podcast

July 28, 2026Episode 8728 min

ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 6 & 7

Welcome to another episode of the ISO Review Podcast, your trusted source for the latest developments in international standards and practical guidance for getting the most out of your management systems. Join hosts Howard Fox and Jim Moran—an ISO management system professional celebrating 34 years of expertise—as they dive into the newly updated ISO 19011:2026 standard. In this episode, they break down Section 6 (Conducting an Audit) and Section 7 (Auditor Competence), explore the growing importance of hybrid and remote auditing methods, discuss how evidence reliability and technology skills have become essential, and share tips to ensure your audit process is truly value-adding, not just a box-ticking exercise. Whether you’re an internal auditor, management rep, or just ISO-curious, this episode will help you leverage the latest guidance to make your audit program more effective and resilient. DISCUSSION 1. Introduction to the ISO Review Podcast Purpose of the podcast: sharing developments in international standards and management systems 2. Overview of ISO 19011:2026 Background: ISO 19011 guidance document for auditing management systems 00:42 Clarification: It provides guidance, not requirements; cannot be certified to this document 01:58 Value of the standard: Utility for planning, developing, and implementing audit programs 02:08 Mention of a new helpful flowchart in the document 02:18 3. Auditing Philosophy and Approach Common mistakes: Focusing on procedural compliance (tick box exercise) 02:38 Key audit questions: Is the process getting intended results? 03:12 Are risks managed effectively? 03:37 Are there opportunities for improvement? 04:02 Differences between internal and registrar auditing approaches 04:25 4. Section 6: Conducting an Audit (ISO 19011:2026) Audit lifecycle stages: initiating, preparing, conducting, reporting 05:04 Evolution of the standard: From quality/environmental focus to encompassing all ISO standards 05:15 Hybrid and remote auditing: Increased emphasis since the COVID-19 pandemic 05:42 Savings in travel costs and flexibility 05:56 Integration of technology and guidance on data privacy 06:13 Distinction between remote and hybrid audits 06:29 Impact of regulatory changes and industry adaptation: History of audit day calculations (MD5 document) 06:53 Automotive sector’s response to remote audits 07:53 Current spectrum: onsite, virtual, or hybrid depending on organizational context 08:11 Registrar's use of judgment for effective audits and value addition 08:26 Applicability to different organization types (manufacturing, services) and handling various forms of evidence 09:03 Embracing of hybrid delivery and integrated audits 09:44 a. Selecting the Audit Method Requirement to specify methods (onsite, remote, hybrid) in the audit plan 10:05 Planning stage includes method selection, not post-audit justification 11:05 Critical planning elements: objective, scope, criteria 11:13 Method selection examples: remote review vs. onsite observation 11:45 Main auditing techniques: Interview 12:20 Direct observation 12:25 Records review 12:31 Paradigm shift: focus on outcomes and improvement, not just procedural adherence 13:01 b. Evidence Reliability and Data Security Importance of verifying genuine evidence 14:06 Shift in terminology from “fact-based” to “evidence-based” decision-making 14:43 Data security considerations in digital and remote evidence collection 14:51 5. Section 7: Auditor Competence Emphasis on competence for registrars (and lessons for internal auditors) 15:14 Expansion of competence requirements to include technology and information security 15:55 Ensuring auditors understand and have access/permission for required evidence 16:35 Identification and management of risks in the audit process 17:01 Auditor performance evaluation: including feedback from auditees and stakeholders 17:52 Auditor’s role: collaborator rather than “ISO cop” 18:18 Historical context: evolution from nonconformance focus to improvement and communication 19:07 Importance of 2-way and 3-way communication (auditor, auditee, audit planner) 19:40 Application of Plan-Do-Check-Act to internal audits 20:02 Using feedback loops to assess and improve audit program effectiveness 20:15 Ongoing competence maintenance: continuing professional development 20:29 Scheduling audits throughout the year for skill retention (vs. “audit blitz” before registrar visit) 21:24 Advantages of flowcharts for process clarity and audit handoffs 22:15 The 80/20 rule for nonconformances linked to process handoffs 22:45 6. Recap and Key Takeaways Lifecycle and method selection for audits 23:18 Importance of evidence reliability 24:03 Distinction between requirements and guidance (should vs. shall) 23:32 Technology competence and digitalization in audit management 24:08 Feedback loops and competence maintenance (regular training, recertification) 24:37 Typical recordkeeping practices (3-year retention guidance) 25:28 7. Upcoming Episode Preview Next episode to cover Annex A of ISO 19011 25:55 8. Resources and Contact Information Jim Moran contact details and resources: simplifyiso.com, imsi.org, imsi-pro.org 26:30 Additional links to LinkedIn, YouTube, and LinkedIn articles 27:13 Howard Fox contact: foxcoaching.com 28:10 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026 #ISOReviewPodcast #SimplifyISO #Podcast

July 14, 2026Episode 8641 min

ISO 19011:2026 Guidelines for Auditing Management Systems - Clauses 3-5

Welcome to another episode of the ISO Review Podcast, presented by Simplify ISO. Join hosts Jim Moran and Howard Fox as they explore the latest developments in international standards and offer practical guidance for maximizing your management systems. In this episode, Jim Moran shares insights into the newly released 2026 edition of ISO 19011, the key auditing standard for management systems. Together, they break down the history and evolution of auditing guidelines, clarify the difference between requirements and guidelines, and provide an overview of critical topics such as audit principles, program management, and auditor competence. Whether you're an internal auditor, a seasoned quality professional, or new to the world of ISO, this episode delivers essential tips on planning, conducting, and improving your audit programs. Stay tuned for clear explanations, actionable advice, and a roadmap for getting the most from your management system audits. DISCUSSION 1. History of Auditing Standards ISO 19011 standard: name and editions (2002, 2011, 2018, 2026) 02:28 Prior standards: ISO 10011, ISO 14001, and related documents 02:54 Merging of past standards into ISO 19011 03:40 Historical purpose and evolution of auditing guidelines 02:54 2. Structure of ISO 19011:2026 Auditing Standard Overview of major clauses and their roles: Clause 3: Definitions 04:15 Clause 4: Auditing Principles 04:22 Clause 5: Management System Overview 04:30 Preview of next episodes covering Clause 6 (Conducting Audits) and Clause 7 (Auditor Competence), and Annex A 05:17 3. Purpose and Nature of ISO 19011 Explanation of guidance vs. requirements in standards 07:23 Difference between “should” (guidelines) and “shall” (requirements) 07:37 Applicability for different types of audits and management systems 07:56 Use of ISO 19011 by registrars 08:50 Relationship to other ISO standards and structures 06:10 4. Clause 3: Terms and Definitions Focus on importance of definitions for clarity in audits 10:07 Key terms defined: audit, combined audit, joint audit, remote audit, objective evidence, risk, effectiveness, etc. 10:27 Role of verifiable evidence and statements of fact 11:08 Practical exercises for auditors based on definitions 11:56 5. Clause 4: Principles of Auditing Explanation of auditing principles versus rules/techniques 12:27 List and discussion of seven core principles: Integrity 12:44 Objectivity 13:39 Fair Presentation 13:42 Due Professional Care 14:43 Confidentiality 16:30 Independence 17:23 Evidence-based Approach 18:50 Risk-based Approach 19:23 Integrity and the importance of evidence-based conclusions 13:08 The evolution from fact-based to evidence-based auditing 20:15 6. Clause 5: Managing an Audit Program Planning and organizing an audit program 21:14 Plan-Do-Check-Act framework 21:28 Consideration of organizational size, scope, complexity, and risk 21:45 Audit scheduling across quarters/year 21:45 Functionality and complexity differences for various industries 22:58 Single location vs. multinational organization considerations 22:44 Industry-specific competence and language needs 24:13 Context and external/internal issues, including technology and information security 24:52 Focus of internal audits: looking for conformance, not nonconformance 25:35 Value of flowcharts in process and auditing 26:31 Auditor competence and impartiality 27:09 Maintaining objectivity and addressing potential biases 28:01 Auditor records, logbooks, and tracking industry experience 27:43 Training and preparation of auditors 29:07 7. Steps in Managing an Audit Program (Clause 5 Specifics) Establishing objectives, evaluating program risks/opportunities 29:36 Implementing and monitoring the audit program 29:47 Flowchart use for organizing and documenting audits 30:30 Review and improvement of the audit program 30:53 Setting program objectives: results, risk management, and improvement 33:19 Evaluating resources, team selection, communication, competence 33:36 Documentation: audit scope, criteria, resources, and evidence 34:43 Authority and competence of audit program manager 34:09 8. Review and Preview of Next Episodes Howard Fox summarizes the episode focus and praises structure 37:31 Emphasis on difference between “should” (guidance) and “shall” (requirement), and auditing implications 38:11 Teaser for next podcast: conducting audits and auditor competence, plus in-depth look at Annex A 38:03 9. Closing and Resources Where to learn more: simplifyiso.com, IMSI, other links 39:12 Encouragement for next episode and outro 40:43 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 19011:2026, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9011:2026 #ISOReviewPodcast #SimplifyISO #Podcast

June 30, 2026Episode 8541 min

ISO 9001:2026 Final Draft Release: Key Changes for Organizations and Quality Management Professionals

Welcome to another episode of the ISO Review Podcast, your trusted resource for the latest developments in international standards and tips for maximizing your management systems. In this episode, hosts Jim Moran and Howard Fox dive into the just-released final draft of ISO 9001:2026, marking a new evolution in quality management standards. Jim Moran highlights the key changes—ranging from editorial clarifications to the addition of requirements around quality culture, ethics, and climate change resilience—while reassuring listeners that this update is more evolutionary than revolutionary. They discuss what organizations can expect as they transition from ISO 9001:2015, including a generous three-year adaptation period and minimal disruptive changes. Jim and Howard also share insights on how technology and automation can ease compliance, and tease upcoming episodes on the newly revised ISO 19011 auditing standard. Whether you’re a seasoned ISO professional or just exploring the world of standards, this episode is packed with valuable information to help you navigate the evolving landscape of management systems. DISCUSSION 1. Transition to ISO Standards Discussion Link between international sport and international standards 02:19 Announcement of final draft release for ISO 9001:2026 02:27 2. History and Evolution of ISO 9001 Standards Notable changes by edition: 1987, 1994: Initial version, focus on documented procedures 2000, 2008: Process approach highlighted 2015: Major structural change to “high level structure” 03:24 3. Structural and Content Changes in New Revisions Minimal structural changes from prior high level structure versions 04:49 Key ISO clauses/building blocks outlined 05:22 4. Evolution of Documentation Methods Shift from physical binders to electronic documentation 06:57 Anecdotes: physical binder requirements of early ISO days 07:10 5. Current Management System Tools and Simplification Improvements in software for handling nonconformances and audits 09:23 Connection to previous podcast series “50 Ways to Simplify Your Management System” 09:41 6. The ISO 9001:2026 Draft Release and Change Process Release process: Committee Draft (CD), Draft International Standard (DIS), Final Draft International Standard (FDIS) 10:03 Nature of changes from 2015 to 2026: evolutionary, not revolutionary 12:09 Predicted timeline: September 2026 release, three-year transition period for organizations 11:40 7. Major Thematic Changes in ISO 9001:2026 Editorial clarifications, not overhauls 12:27 Explicit emphasis on quality culture and ethics 12:45 Organizations required to foster auditable quality culture and ethics 13:13 8. Climate Change Consideration in Standards Incorporation of climate change into ISO 9001 14:17 Integration of prior amendment into the new standard 14:31 Quality outputs must be defendable against climate-driven interruptions 15:04 9. Summary of Key Transition Points and Definitions Reinforcement of evolutionary change, not overhaul 18:56 Reminder of three-year transition and audit process 19:09 ISO 9000 as main source for terms and definitions with minor approach in ISO 9001 20:02 Diagram/visual changes: “quality management system” to “scope of the quality management system” 20:49 Importance and expansion of Annex A 20:57 10. Context, Interested Parties & Climate Change in Implementation External and internal context considerations 22:04 Climate change as an explicit external issue 22:47 11. Detailed Review of Clause Changes Clause 4: Context 26:16 Clause 5: Leadership—quality culture and ethics 27:15 Evidence examples: town halls, orientation training Clause 6: Risks and opportunities; restructuring for separate auditability; change management 28:39 Clause 7: Support/resources 29:41 Work environment’s three pillars: physical, social, psychological 30:32 Psychological safety as auditable element Staff awareness of ethics and empowerment to stop processes 31:14 Clause 8: Operations is unique to each standard, no major changes 32:23 Clause 9: Performance evaluation, editorial clarifications 33:23 Clause 10: Continual improvement, leadership’s role 33:35 12. Transition Timeline for Certification September release target for final international standard 34:19 Three-year transition advised, but changes are minor 34:51 Guidance for organizations starting new implementations 35:04 13. Concluding Reflections and Next Steps Overview recapped as “final draft,” anticipation for September release 36:38 Future episode preview: clause-by-clause upgrade guidance 36:56 Registrar and audit requirements for transition 37:25 Comparison to 2015’s significant changes 38:00 14. Preview of Next Podcast Topics Announcement of new ISO 19011 (auditing standard) release for future episodes 39:27 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO 9001:2026 Final Draft, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISO9001:2026FinalDraft #ISOReviewPodcast #SimplifyISO #Podcast

June 16, 2026Episode 8429 min

50 Ways to Simplify Your ISO Management System - Part X

Welcome to another episode of the ISO Review Podcast, produced by Simplify ISO. Join hosts Howard Fox and Jim Moran as they wrap up their popular series, “50 Ways to Simplify Your ISO Management System.” In this episode, Jim Moran, who brings over 34 years of ISO expertise, shares the final five tips for streamlining management systems—covering practical advice on corrective actions, root cause analysis, tracking improvement actions alongside business objectives, making the most of key performance indicators, and remembering that your ISO system supports rather than defines your business. The hosts also explore the benefits of process-based auditing, integrating multiple ISO standards, and adapting to continuous improvement, all while dispelling a few ISO myths along the way. Whether you’re new to ISO or refining an established management system, tune in for actionable insights to boost your efficiency and profitability. DISCUSSION Sequence of Topics Covered 1. Introduction & Catching Up 2. Recap of Previous Episode’s Tips (41-45) Using internal audits as process reviews, not clause-by-clause 02:16 Importance of starting with flowcharts for processes 02:29 Auditing fewer things but with better focus (“less is more”) 02:45 Asking “show me how this works” vs “are you following your procedure?” 03:09 Training staff only on what they need to know, dispelling the myth that everyone must know everything 03:27 Role of top management in culture and teamwork 03:54 Replacing classroom training with micro training 04:11 3. Overview of This Episode’s Tips (46-50) Corrective actions 04:38 Root causes 04:43 Tracking improvement actions 04:47 Using KPIs 04:49 Final summary: ISO management system supports the business 04:53 4. Deep Dive: Tips 46–50 46. Use Corrective Actions Only When Needed Understanding non-conformance (“non-fulfillment of a requirement”) 05:25 Deciding between correction and corrective action 06:23 Encouraging openness to corrections versus hiding non-conformances 06:41 Importance of tracking corrections for trend analysis 07:10 47. Fix Root Causes Once, Not Repeatedly Emphasis on true root cause analysis to avoid recurring errors 07:30 Financial impact of recurring mistakes (example: $1,000 error needs $50,000 in new revenue to offset) 07:57 Challenges of management ineptness as a root cause 09:08 Suggestion to look for similar issues elsewhere in the business 09:31 48. Track Improvement Actions Alongside Business Actions Setting objectives/goals as per various ISO standards; aligning improvements with these 09:56 Breaking objectives into smaller targets and tracking progress 10:43 Avoiding unintended negative impact on other processes/parts of the organization 11:44 Classic systems theory (Taiichi Ohno, John Seddon) and its application 12:20 49. Use Key Performance Indicators (KPIs) Already in Use Use existing KPIs as performance evidence for ISO 14:44 Clause 9.1 asks organizations to choose what to measure 14:59 Don’t create unnecessary KPIs just for ISO compliance 15:58 Various company scenarios: adapting or rebuilding management systems 16:08 The difference between “variety” and “change” in organizations 16:58 Using effective KPIs for profitability and in new standards like ISO 42001 (AI management) 18:09 50. ISO Management System Supports the Business The management system is a support tool, not the business itself 18:52 Integration of multiple standards and systems for efficiency 19:45 Case example: client with multiple separate management systems and missed opportunity for integration 20:01 Organizational resistance to integration due to perceived job loss 20:59 Reframing staff roles toward continuous improvement rather than system maintenance 21:43 Integrating systems as a path to profit improvement 22:12 Reducing recurring non-conformances as a key profitability driver 22:12 5. Closing Reflections Howard Fox and Jim Moran discuss using freed-up resources for process improvement 22:27 Final thoughts on finishing the 50 ways series and previewing upcoming ISO 9001 changes 23:44 6. AI and ISO: Brief Comments Benefits and concerns of AI in ISO management systems 24:57 Balancing business value, energy use, and public debate on AI 25:41 7. Resources and Contact Information Simplify ISO website and resources 27:04 Availability of the podcast on LinkedIn, YouTube, and other channels 27:22 International Management System Institute (imsipro.org) 27:41 How to reach out with topics or contact questions 27:31 Howard Fox's coaching and LinkedIn details 28:20 8. Wrap-Up and Sign-Off Thanks and closing remarks from both hosts 28:44 Promotion of show notes and backlinks for further learning 28:21 NEXT STEPS We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional. Click here to learn about our new DIY ISO 9001 program using AI Learn more about Jim on LinkedIn & YouTube. LinkedIn LinkedIn Articles YouTube Learn about Howard's Coaching and Podcast Services Website : https://foxcoaching.com LinkedIn : https://www.linkedin.com/in/foxcoachinginc/ Podcast Discovery Call: https://calendly.com/foxcoachinginc/podcast-discovery-call KEYWORDS Jim Moran, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast #JimMoran #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

Is this your show?

Claim this listing to keep it up to date, reach guests who want to pitch you, and manage bookings with Guestify.

Claim this listing

More Business podcasts