Question:DenSolutions, a financial institution, is seeking to certify its AIMS.

Sarah cannot audit because auditors who have contributed to the design, implementation, or maintenance of a management system must not audit that same system to avoid conflict of interest.

ISO/IEC 17021-1:2015 Clause 5.2.5 clearly states: “Personnel who have provided management system consultancy, including those acting in a managerial capacity, shall not be used to conduct audits.”

The Lead Auditor Guide explains: “Maintaining impartiality requires that individuals with consultancy roles be excluded from auditing the systems they helped create.”