The problem it solves
Client audits arrive at short notice and find exactly what the organisation already knew was missing. Internal audit exists so that this does not happen twice.
Who it is for
- Certified organisations, or those seeking certification;
- Suppliers audited by their clients;
- Public entities subject to oversight.
Deliverables
- Audit programme and scope;
- Report with classified findings;
- Corrective plan with owners and deadlines;
- Mock external audit.
Method
- 01
Plan
Scope and criteria.
- 02
Audit
Evidence and interviews.
- 03
Report
Findings and risks.
- 04
Correct
Actions and verification.
Regulatory basis
- ISO/IEC 27001:2022 and ISO/IEC 27002:2022;
- ISO 19011, on auditing management systems.
Expected results
- Gaps found before the client finds them;
- External audits without surprises;
- An improvement cycle that actually runs.