Over the years, management system standards have undergone a significant transformation from being very prescriptive and procedure focused to the latest iterations that concentrate on performance (outcomes) with very little prescribed documentation. This presentation will discuss the implications of these changes, both for organizations that are implementing the system and for the auditors who need to verify system effectiveness. It will focus on the three main concepts that need to be understood in order to conduct a successful audit: the organization’s processes, the risks associated with those processes, and the use of the plan-do-check-act cycle to manage the processes and the system as a whole.