ISO 27001 clause 9.2 requires planned internal audits by someone objective and impartial. Small teams rarely have that person. We run your internal audit programme as an independent provider, using lead auditors who also audit on behalf of certification bodies, so findings surface before Stage 2 or surveillance, not during it.
The same rigour a certification body applies, delivered early enough for you to act on it.
A risk-based plan covering clauses 4 to 10 and your applicable Annex A controls across the certification cycle.
Remote or on-site interviews, sampling and evidence review, scheduled around your team.
Graded nonconformities, observations and opportunities, each tied to the requirement and the evidence.
We check that root causes are addressed and actions are effective before your next external audit.
A full readiness audit before Stage 1 or Stage 2, so there are no surprises on the day.
One audit across ISO 27001, ISO 27701, ISO 42001 and ISO 9001 where you run an integrated system.
Agree scope, risks and the audit programme, then book fieldwork dates.
Interview owners, sample records and test controls against the standard.
Receive a clear report with graded findings and a summary for management review.
Verify corrective actions so findings are closed before the external audit.
Yes, if they are competent and objective. Auditors must not audit their own work, and small organisations often cannot guarantee that independence, which is why many outsource the internal audit.
At planned intervals. Most organisations run an annual programme so that every clause and applicable Annex A control is covered within the three-year certification cycle.
Yes, provided the audit is planned, carried out by competent and impartial auditors, documented, and its results reported to management. That is exactly how we deliver it.
We never act as your internal auditor and your certification body auditor. Impartiality rules are strict and we follow them to the letter.
Yes. Where you run an integrated management system, one combined audit saves time and gives management a single view of conformity.
Book a short call and we will scope your internal audit programme.