The standard applies to all organizations needing to plan and conduct internal or external management system audits, or manage first- or second-party audit programs.

The standard's scope includes auditing principles, managing an audit program and conducting management system audits, as well as guidance on assessing the competency of employees involved in the audit process.

Clarify that the standard provides guidance, not requirements, and is generally used to develop internal auditors' competence.