Internal audit
The real finish line before the auditor arrives.
An internal audit is your rehearsal for certification. We test your documentation and your evidence the way an external auditor would, then hand you a clear corrective action plan while there is still time to act on it.
What’s included
Practical expertise, shaped around your business.
Documentation review
We examine your policies, procedures, standards and records against the requirements of the standard, clause by clause.
Field review and evidence assessment
We check that what is written down is actually happening, sampling evidence and observing your ISMS in operation.
Internal audit report
An executive summary and detailed findings, each with a recommended corrective action plan and a clear severity rating.
Management review
We prepare and facilitate your management review so leadership can confirm scope, performance and priorities with confidence.
How it works
A clear, structured engagement.
- Step 1
Plan
Agree scope, sampling approach, interviews and timing with minimal disruption to your team.
- Step 2
Review
Documentation analysis followed by field review. Typically one to two weeks end to end.
- Step 3
Report
Findings, nonconformities and opportunities for improvement, with recommended corrective actions.
- Step 4
Close out
Retest corrective actions and confirm you are ready for Stage 2 or your surveillance audit.
FAQ
Common questions.
When should we do an internal audit?
Once your program is around 80% ready. Early enough that findings can be fixed, late enough that there is real evidence to test.
Do you only audit programs you built?
No. Many clients come to us for an independent internal audit of a program they built themselves or with another partner.
Let’s get your compliance program right.
Tell us where you are and where you need to be. We will spend 30 minutes understanding your situation and give you an honest view of the fastest sensible path.