What is IAF MD5 and how are audit days calculated?

What it is

IAF MD5 is a mandatory document that tells certification bodies how much time an audit must take. It converts your effective number of personnel into a minimum number of auditor days, and accredited bodies have to follow it.

The initial audit figures, covering Stage 1 and Stage 2 together:

Surveillance audits run at roughly one third of the initial time each year. Recertification runs at roughly two thirds. On-site time may not drop below 80 percent of the calculated total.

Effective personnel is not the same as your payroll count. It accounts for shifts doing identical work, part-time staff, and people outside the certified scope, and a repetitive single-process operation can qualify for a reduction into a lower band.

When you will hear it

Inside a registrar's quote, as the number of days it is built from. Bodies do not usually publish a day rate, but recent figures in the trade cluster around $1,350 to $1,600 per auditor day.

When comparing quotes, where it is the single most useful check you have. Two bodies auditing the same company should arrive at similar day counts, because the same table governs both.

When someone offers to certify you unusually fast. The arithmetic is where that claim falls apart.

What the auditor expects to see

An accurate headcount, disclosed honestly, including contractors performing work inside your scope. Understating it to reduce the quote produces a bad surprise when the auditor arrives and finds three shifts where the file said one.

Multi-site operations have their own rules, including sampling across sites rather than auditing each in full. If you have more than one location, raise it early: the calculation changes materially.

Common mistakes

Shopping for the lowest day count. A body offering markedly fewer days than the table indicates is either misunderstanding your scope or cutting a corner its accreditation body will eventually find.

Forgetting the recurring years. Surveillance at a third and recertification at two thirds means the three-year cost is well above the initial audit alone.

Ignoring travel. Auditor travel is billed at cost on top of the days, and a remote plant costs more to audit than one near a major airport.

FAQ

Can audit days be reduced?

Yes, within rules. Shift work performing identical processes, a high proportion of repetitive work, and small site size can each support a reduction, capped so that on-site time stays at or above 80 percent of the calculated figure.

Does MD5 apply to internal audits?

It does not govern them, but several providers size their outsourced internal audit offerings using the same brackets, which makes quotes easier to compare.

Who counts as effective personnel?

Everyone whose work affects conformity of product or service within your certified scope, including part-time and contract staff, adjusted for shifts doing the same work.

Does a smaller scope mean fewer days?

Yes, and this is the legitimate lever. Certifying one product line or one building rather than the whole company lowers the headcount inside the scope. Check first that the narrower scope still satisfies your customer.