Internal management system audit

When you need this form

Certified management systems need internal audits on a planned cycle, run by someone independent of the area being audited. Quality, safety, environment or all three. The audit checks that the documented process is the process people actually follow, and that gaps get corrective actions. External auditors examine the internal audit programme itself, so a thin record costs you at the next external review.

Internal audits usually fail on traceability, not on rigour. The finding was raised but the evidence was not kept, or the corrective action closed with nothing verifying it. A live audit ties each finding to the criterion, the evidence photo and the action owner, then holds it open until the close-out check is signed. That trail is what external auditors follow.

What good looks like

• Audit scope, criteria and the processes covered stated before fieldwork starts.
• Auditor named, with independence from the audited area confirmed.
• Each finding classified: conformity, minor, major or opportunity for improvement.
• Objective evidence attached per finding: photo, record reference, interview note.
• Corrective actions with owners, due dates and a verified close-out.