What a witness audit is and how often it runs

Of all the ways a certification body can monitor its auditors, only one shows what actually happens in the room. A witness audit is an observation of an auditor performing a real audit at a real client, by someone qualified to judge how they do it. Everything else — reviewing reports, checking training records, collecting client feedback — tells you about the output. The witness tells you about the judgment.

What the observer is actually looking at

Not whether the checklist was completed. Whether the auditor asked the question that opened the process instead of the one that closed it. Whether they followed a thread when the answer did not add up, or accepted it and moved on. Whether the sample they took was representative or convenient. Whether the finding they wrote reflects what they saw, and whether they kept the client on the standard when the conversation drifted into consulting.

None of that is visible in a report. A weak audit and a strong audit can produce identical paperwork, and the difference only shows up years later as a certified client that should not have been. This is why 17021-1 treats on-site observation as a required part of monitoring rather than one option among several.

How often, and why the schedule is what fails

The standard does not give you a single number. It requires monitoring to be planned, to cover every auditor over a defined period, and to include witnessing — with the frequency set by risk. In practice most bodies land on witnessing each auditor at least once per accreditation cycle, more often for new auditors, for someone recently qualified in a new scheme, or where a review raised a doubt.

The part that fails is never the intention, it is the calendar. A witness needs a real audit, a client who agrees, an observer who is free and qualified in that scheme, and a date all three share. Miss one cycle and the gap is invisible until an assessor asks for the coverage across all auditors and all schemes — and by then it cannot be fixed retroactively. Keeping that schedule alive against the audit programme, rather than rebuilding it before the visit, is the whole job of the Auditor Competence Agent.