Overview
What this service does
Every certified management system needs an independent internal audit, and most organisations find it hard to do well with internal staff. We audit against the standard the way an external auditor would, report findings clearly, and help you close them before the certification body arrives.
Where an organisation runs more than one standard, an integrated management system (IMS) removes duplicated policies, audits and reviews and gives management one view of risk and performance.
What's included
Scope of the engagement
- Internal audits for ISO/IEC 27001, ISO 9001, ISO 14001 and ISO 45001
- Audit programme design and auditor training
- Findings, corrective actions and management review preparation
- Integrated Management System design and implementation
- Pre-certification and pre-surveillance health checks
Who it's for
Right for you if
- Certified organisations that need an independent internal auditor
- Organisations running two or more ISO standards with duplicated effort
- Businesses preparing for first certification who want a dress rehearsal
FAQ
Internal audit and integrated management systems: common questions
Why not use our own staff for internal audits?
You can, as long as the auditor is independent of the area audited and trained for the job. Many organisations use us because an external auditor is more objective, faster and brings experience from other audits.
Can one audit cover several standards?
Yes. An integrated audit covers the shared requirements once and the standard-specific requirements separately, which saves time and disruption.
Related
Often combined with
Virtual and fractional CISO
A senior security leader on retainer, scaled to the size of your business.
Learn more
Virtual and fractional CTO
Technology direction without an executive hire: architecture, cloud, roadmap and suppliers.
Learn more
ISO/IEC 27001 certification
From gap assessment to certificate, with an ISMS that fits your business.
Learn more
Surveillance audit coming up?
Book an independent internal audit first, so the certification body finds what you already fixed.