The Audit Engine Pipeline

Self-paced WHS plug-in for jurisdictions with positive duty (Australia, EU, Canada Bill C-45). Layers onto the Engine without repeating Annex SL fundamentals.

Environment and energy plug-in covering CSRD, SBTi and GRI cross-mapping. Pure self-paced delivery with AI scenario assessment.

Quality management with integrated enterprise risk overlay. Most popular plug-in for manufacturing, aerospace and pharma clients.

Bridge traditional management-system auditing with cybersecurity governance. Master Annex A controls, risk treatment plans, Statement of Applicability, and ISMS scoping for cloud, SaaS, and regulated environments.

ISO/IEC 27701 layers privacy controls on top of an existing ISO/IEC 27001 ISMS. Learn to audit PII processing as Controller and Processor, map controls to GDPR, the Australian Privacy Act, CCPA and PIPEDA, and assess data subject rights operations end-to-end.

ISO 31000 is guidance, not certifiable — but auditors who understand it can evaluate whether risk thinking is genuinely integrated into governance, strategy and operational decisions across every Annex-SL management system.

Train to audit a Business Continuity Management System against ISO 22301, including Business Impact Analysis, risk assessment, continuity strategies, exercise programs and recovery objectives — across supply chain, infrastructure and natural-disaster scenarios.

ISO 37002 sets out guidelines for whistleblowing management systems. Train to audit channel design, confidentiality, investigation independence, retaliation prevention and oversight — a critical governance add-on for compliance professionals.

ISO 37001 specifies requirements for an anti-bribery management system (ABMS). Train to audit bribery risk assessment, due diligence, financial and non-financial controls, gifts and hospitality, the compliance function and top-management accountability — a critical governance add-on for banks, insurers and fintechs subject to APRA, DORA and sectoral cyber-risk regulation.

ISO 30415 gives organisations a framework for embedding diversity and inclusion (D&I) across governance, the workforce lifecycle and the value chain. Train to audit D&I accountability, the workforce lifecycle (attract, recruit, develop, retain, exit), inclusive workplace controls, stakeholder engagement and the measures that prove outcomes — offered both as a standalone individual program and as a Lead Auditor plug-in option.

ISO/IEC 42001 is the first certifiable AI Management System standard. Train to audit AI policies, impact assessments, dataset governance, model lifecycle controls, and human oversight obligations — and to map findings against the EU AI Act and NIST AI RMF.

Add Hazard Analysis Critical Control Point (HACCP) competence to your core audit skill set. Cover Codex Alimentarius HACCP principles, ISO 22000 management system requirements, SQF/BRC linkage, prerequisite programs (PRPs) and traceability for retail supply chains, logistics and food manufacturing.

ISO 13485 is the global QMS standard for medical device manufacturers. Learn to audit design controls, risk management (ISO 14971), validation, sterilisation, complaint handling, post-market surveillance and regulator alignment (FDA QSR, EU MDR).

Specialised regulatory stream (highly active in Australia under the Heavy Vehicle National Law and the National Heavy Vehicle Accreditation Scheme). Train to audit Mass, Maintenance, Basic Fatigue and Advanced Fatigue Management programs across commercial transport operators.