Catalogue · ISO/IEC 17024
Generated from code · 48 tools · 7 competencesTools by level and competence
RQLevel 1 — Requirements
5 tools: 1 for each mandatory competence + 4 of your choice
C1Standard interpretationNo tool
- What it produces
- Read the standard, tell what it requires from what it recommends, and recognise the evidence that would demonstrate compliance.
- How it is demonstrated
- Course and exam.
C2Diagnosis and contextMandatory
- What it produces
- The organisation contrasted against the requirements: gaps, interested parties, legal and customer requirements, suppliers.
- How it is demonstrated
- Tool and ruling on the file.
- Mandatory in this level
- The gap analysis against the requirements of the standard.
- 1.1Gap analysisCross-cutting · all nine standardsRQ · C2Covers the mandatory one
- 1.2Interested PartiesCross-cutting · all nine standardsRQ · C2Covers the mandatory one
- 1.3Supplier EvaluationCross-cutting · all nine standardsRQ · C2Covers the mandatory one
- 1.4Legal and Other RequirementsISO 9001ISO 45001ISO 50001ISO/IEC 27001ISO 37001ISO 22000FSSC 22000HACCPRQ · C2Covers the mandatory one
C3System documentationYour choice
- What it produces
- A map, flow or inventory of system elements —processes, assets, energy uses, hazards, base programmes— and the definition of objectives and indicators (define, not analyse).
- How it is demonstrated
- Tool and ruling on the file.
- 1.5Process mappingCross-cutting · all nine standardsRQ · C3Your choice
- 1.6Quality objectivesCross-cutting · all nine standardsRQ · C3Your choice
- 1.7KPIsCross-cutting · all nine standardsRQ · C3Your choice
- 1.8OHS hazard identificationISO 45001RQ · C3Your choice
C10Auditor conductNo tool
- What it produces
- Objectivity, ethics and integrity, communication, impartiality and independence, observation, tenacity, leadership, decisiveness and firmness. Starts at level 1 and grows with each level.
- How it is demonstrated
- Case-study module (M-CE) of levels 2 and 3, conduct note in the ruling, code of conduct and monitoring. Deliberately without a tool.
AULevel 2 — Internal auditor
4 tools: 3 for each mandatory competence + 1 of your choice
C4Risk assessment and analysisMandatory
- What it produces
- Risks, aspects, hazards or threats assessed with a significance criterion and an associated control; failure, vulnerability and baseline analyses.
- How it is demonstrated
- Tool and ruling on the file · level 2 exam.
- Mandatory in this level
- The risk assessment of each standard: the specific one if the standard has it; the generic risks-and-opportunities one otherwise (9001 and 50001).
- 2.1Risks and opportunities analysisCross-cutting · all nine standardsAU · C4Covers the mandatory one
- 2.2AMEF / FMEACross-cutting · all nine standardsAU · C4Covers the mandatory one
- 2.3Hazard AnalysisISO 45001AU · C4Covers the mandatory one
C5Correction and improvementMandatory
- What it produces
- Root-cause analysis and corrective action with effectiveness verification, from a nonconformity, incident or investigation.
- How it is demonstrated
- Tool and ruling on the file.
- Mandatory in this level
- The root-cause analysis and corrective action (CAPAS).
- 2.4CAPAS — Root cause analysisCross-cutting · all nine standardsAU · C5Covers the mandatory one
- 2.5Occupational Health and Safety Incident InvestigationISO 45001AU · C5Covers the mandatory one
C6Auditing: plan and performMandatory
- What it produces
- An audit plan or programme with objectives, scope, criteria and sequence.
- How it is demonstrated
- Tool and ruling (the plan) · level 2 course and exam.
- Mandatory in this level
- The audit plan.
- 2.6Audit planCross-cutting · all nine standardsAU · C6Covers the mandatory one
- 2.7Internal Audit ProgrammeCross-cutting · all nine standardsAU · C6Covers the mandatory one
TLLevel 3 — Lead auditor
3 tools: 2 for each mandatory competence + 1 of your choice
C7Operational controlMandatory
- What it produces
- The control plan of the standard: controls, owners, criteria, monitoring and review; response plans and statement of applicability of controls.
- How it is demonstrated
- Tool and ruling on the file.
- Mandatory in this level
- The control plan of each standard (in the HACCP scheme, the HACCP Plan).
- 3.1OHS operational control planISO 45001TL · C7Covers the mandatory one
- 3.2Emergency planISO 45001TL · C7Covers the mandatory one
C8Performance and verificationMandatory
- What it produces
- The analysis of indicators or system performance with data, trend and conclusions (analyse, not define); compliance evaluation and system verification.
- How it is demonstrated
- Tool and ruling on the file.
- Mandatory in this level
- The management system performance analysis.
- 3.3Management System Performance AnalysisCross-cutting · all nine standardsTL · C8Covers the mandatory one
- 3.4Legal Compliance EvaluationCross-cutting · all nine standardsTL · C8Covers the mandatory one
C9Leadership and decisionNo tool
- What it produces
- Lead an audit team and an audit programme, apply professional judgement and take the decisions an audit demands.
- How it is demonstrated
- Mandatory level 3 course and exam.
How a tool gets in
A tool declares three facts —level, competence and standards— and nothing else. It does not declare itself mandatory: if its competence is, the tool is one option to fulfil it. A new tool is one row in the catalogue; no QMS scheme is edited.
Nothing counts twice: the tool that fills the mandatory slot does not count as an elective, and the elective slots belong to the level, with options from any competence of that level. A tool lives in one level and one competence only.
In the ISO 22000 and FSSC 22000 schemes the HACCP course is a training prerequisite and does not count as a tool. The HACCP Plan module is the mandatory operational-control tool only in the HACCP scheme.