What does ISO 19011 guide organizations on?

ISO 19011 provides guidance on conducting audits, specifically in the context of management systems. This standard offers a framework for auditing management systems, including guidelines for planning and managing audits, as well as for assessing the competence of auditors. The ISO 19011 standard is essential for organizations seeking to establish a structured approach to audits, ensuring that they are effective, efficient, and produce reliable results. By following the guidelines set forth in ISO 19011, organizations can improve their audit processes, which ultimately supports compliance and operational efficiency.

The other options relate to different aspects of organizational management. Developing quality policies is typically covered by other standards such as ISO 9001, while managing risk is addressed in standards like ISO 31000. Establishing an information security system is typically focused on standards like ISO/IEC 27001. While these areas are important for organizations, they are beyond the scope of what ISO 19011 specifically guides in terms of auditing practices.