Risk-informed audit programme and criteria
Define the boundary and intended outcome for this part of the engagement.
SUPPORT SERVICE / MANAGEMENT SYSTEMS
Internal Auditing for practical progress.
Support for planning and conducting impartial internal audits to evaluate whether management-system arrangements conform to defined criteria and are effectively implemented.
01 / Service overview
Understand the need. Shape the support.
Interviews, observation and record sampling
Connect the activity to the organisation's actual processes and applicable requirements.
Objective findings and corrective-action follow-up
Turn observations into practical actions that can be owned and reviewed.
Support for planning and conducting impartial internal audits to evaluate whether management-system arrangements conform to defined criteria and are effectively implemented. The exact scope, deliverables, responsibilities and timing should be agreed after understanding the organisation’s context and intended outcomes.
The engagement should be proportionate to the organisation's context, selected framework, activities and available resources. Scope, deliverables and responsibilities are agreed before work begins.
02 / What this support can address
Focused on practical outcomes.
The areas below help frame the engagement. Exact activities depend on the agreed scope, organisational context and evidence available.
Objective evaluation
Assess selected processes against defined audit criteria.
Evidence-based findings
Record observations supported by relevant evidence and sampling.
Improvement insight
Identify conformity, nonconformity and opportunities for improvement.
Follow-up clarity
Support action ownership and review of corrective-action effectiveness.
03 / Typical engagement
A clear, proportionate process.
A typical sequence is outlined here. Activities, timing and deliverables are tailored and confirmed for each engagement.
Confirm scope and objectives
Define audit criteria, scope, frequency, methods and responsibilities using a risk-informed programme.
Review current arrangements
Prepare audit plans and checklists that follow processes and relevant requirements rather than only document titles.
Plan and carry out the work
Gather objective evidence through interviews, observation and review of records.
Evaluate results and actions
Record findings clearly, communicate results and support appropriate corrective-action follow-up.
Maintain and improve
Review closure evidence and effectiveness as appropriate, maintaining auditor impartiality.
04 / Scope and responsibilities
Keep roles clear.
What this service does — and does not do.
Internal audits are part of the organisation's own system evaluation. Audit objectivity, competence, impartiality and independence from the activity being audited should be considered. Consultancy support does not replace independent certification audits.
Any applicable certification, accreditation, validation or verification decision remains with the relevant independent body. The organisation remains accountable for its own management system and operational decisions.
05 / Frequently asked questions
Internal Auditing, explained.
Answers to common questions about the scope and practical use of this support service.
Are internal audits required?
Many management-system standards include internal-audit requirements. Check the applicable standard and scope.
Can people audit their own work?
Audit arrangements should protect objectivity and impartiality. Auditing one's own work may compromise this.
What does a report include?
It commonly records scope, criteria, methods, evidence, findings and conclusions.
Does an internal audit assure certification?
No. It is one part of system evaluation and does not replace an independent certification audit.
DISCUSS THE SCOPE
Start with the work your organisation needs.
Review the standards catalogue or discuss the support required for your management system.