Becoming a CQI and IRCA certified ISO 9001 auditor

Becoming an ISO 9001 auditor is one of the most recognised paths to a career in quality management. But between the internal auditor title, CQI and IRCA certified training and registration on the international register of auditors, the landmarks blur quickly. This article clarifies what IRCA quality auditor certification really is, the path to obtaining it, what the training and examination assess, and the conditions for registration at the lead auditor grade, backed by official sources.

This article covers the certification route. To place that level among the three that exist, see ISO auditor: the 3 levels and what they require.

Who is IRCA, and why this name comes up everywhere

IRCA, the International Register of Certificated Auditors, is the international register of management system auditors. It is owned by the CQI, the Chartered Quality Institute, a British professional institute that has structured the quality profession for more than a century and brings together members in around a hundred countries. When a course is described as CQI and IRCA certified, it means that its programme, its materials and its examination have been audited and approved against the IRCA framework. It is this approval that gives the certificate its international value, recognised by employers and certification bodies.

Three things that are often confused need to be distinguished. Being an internal auditor means auditing the system of your own organisation, with no mandatory certification. Following CQI and IRCA certified training means obtaining a recognised certificate of achievement. Being registered with IRCA means appearing on the register at a given grade, which requires training but also demonstrated audit experience. Confusing the training certificate with registration on the register is the most frequent mistake candidates make.

Auditor, lead auditor: understanding the grades

The profession reads as levels of increasing responsibility. The internal auditor checks conformity within their own organisation. The auditor, or third-party auditor, conducts audits on behalf of a certification body. The lead auditor leads an audit team, plans the assignment, runs the opening and closing meetings and carries responsibility for the findings. It is this last grade that most candidates for IRCA certification are aiming for, because it opens access to certification assignments and to senior quality manager roles.

The path to becoming a certified ISO 9001 auditor

The path is marked out and follows a simple logic: first master the standard, then learn to audit, and finally prove your experience.

1. Master ISO 9001:2015. Before any auditor training, you need to know the structure of the standard, the process approach, the PDCA cycle and the seven quality management principles. The CQI and IRCA expect this foundation at the entry to the training.
2. Follow a CQI and IRCA certified lead auditor training. Lasting 40 hours, it teaches audit techniques, the ISO 19011 framework and the conduct of an assignment from end to end.
3. Pass the examination and the continuous assessment. The certificate of achievement attests competence to audit; it is valid for 5 years for certification.
4. Build up experience and register with IRCA. The lead auditor grade requires a minimum of 4 audits covering the whole audit cycle, 20 audit days in total of which 15 on site, then an application for registration at the target grade.

In other words, the training opens the door, but it is audit experience that makes the registered auditor. Many candidates obtain the certificate, then build their portfolio of audits over twelve to twenty-four months before applying for registration.

The certified training: what it really requires

ISO 9001 lead auditor training is not a mere theoretical course. The CQI and IRCA expect participants to arrive already knowing the requirements of the standard, or to have completed a QMS fundamentals module beforehand. The programme covers audit planning, conducting interviews, gathering audit evidence, writing findings and nonconformity reports, as well as auditor ethics in the sense of ISO 19011. We detail the programme, the prerequisites and the examination format in our dedicated article: ISO 9001 auditor training (CQI and IRCA), programme and prerequisites.

The examination: what separates a good candidate from a certified candidate

The examination does not reward reciting the standard, but the ability to reason in an audit situation: distinguishing a descriptive finding from an evaluative judgement, linking a gap to the right clause, writing a defensible nonconformity and deciding when the audit evidence is sufficient. It is an exercise of method as much as of knowledge. To practise under real conditions, we offer a mock practical examination and its detailed answer guide, with a marking grid and a set of practice exercises. Our article passing the ISO 9001 quality auditor examination explains the method point by point.

From training to the register: IRCA registration

With the certificate of achievement in hand, the candidate is not yet registered with IRCA. Registration at the lead auditor grade requires building an experience portfolio: a minimum of four management system audits covering the whole audit cycle, twenty audit days in total of which fifteen on site, then a formal application to IRCA with a commitment to continual professional development. It is this requirement of real experience that gives the register its credibility: a registered auditor has not only learned to audit, but has proved it in the field.

Tooling matters as much as method: in the field, an auditor works with an audit plan, assessment grids, finding sheets and a report template. To see what a complete auditor toolkit looks like, our ISO 9001:2015 Auditor Pack gathers a guide per ISO 19011:2026, two self-scoring Excel grids and the fifteen templates, from the opening meeting to auditor qualification.

Do you need IRCA registration to audit?

The question comes up in every session, and the answer fits in one sentence: no standard requires it. ISO 9001:2015 covers internal audit in clause 9.2 and asks, in 9.2.2 c), that auditors be selected and audits conducted so as to ensure the objectivity and impartiality of the audit process. It names no diploma, no certificate and no register.

One widespread formula is in fact no longer there. « An auditor shall not audit their own work » belonged to the 2008 edition and disappeared in 2015. What remains is broader and is judged case by case: objectivity and impartiality apply to the audit process as a whole, not only to the link between the auditor and the activity being audited. Quoting it as a current requirement on exam day costs you marks in front of an examiner who has the standard open.

The requirement, where it exists, therefore comes from whoever commissions the audit, not from the standard. A certification body recruits against its own competence criteria. A client may write IRCA registration into a specification. An employer may make it a condition of hiring or promotion. Being on the register is professional recognition, not a normative obligation, and that is exactly what gives it value in a market where anyone can call themselves an auditor.

In practice this settles which route to take. To audit your own organisation's system, an internal auditor course based on ISO 19011 is enough, and nobody will ask you for a register number. To audit on behalf of a certification body, or to sell auditing as a service, the CQI and IRCA certified lead auditor route is the one recognised from one country to the next.

Training on site or remotely

This is one of the most searched questions on the subject, and it deserves a precise answer rather than a convenient promise. In our training catalogue, implementing an ISO 9001 QMS and internal auditing to ISO 19011 are delivered on site, in a live virtual classroom or as a tailored in-house session. ISO 9001 Lead Auditor exam preparation, however, is delivered on site or in-house, and not as a virtual classroom.

One distinction matters, because the two look alike in a catalogue and are nothing alike in practice: a virtual classroom is a live session with the trainer, at a fixed time. HEMC does not produce e-learning, meaning a module you follow alone whenever you like.

The only genuinely self-paced route we offer is written: the exam preparation workbook, a 90 point mock paper with its commented answer key, which you work through at your own pace, with no timetable and no room to book.

How HEMC supports future auditors

Training and support towards quality certification are among HEMC's areas of expertise. We prepare candidates to master ISO 9001:2015, audit techniques and the examination, combining the theory of the standard with practice under real conditions. To find out more, discover our training offer or talk to our consultants.

A new outlet for a trained auditor: the verification of sustainability information, whose principles ISO 14019-1 set in February 2026, with team competence covered by ISO 14019-4. Our verification readiness grid lays out the mechanics.

This article is provided for information. The training and registration conditions are authoritative in their official version: consult the publications of the CQI and IRCA and the text of the ISO 9001:2015 standard.