iso-9001-internal-audit

ISO 9001:2015 Internal Audit

Goal

Plan, conduct, and document an ISO 9001:2015 internal audit using objective evidence, correct finding classification, and clear audit reporting. Use this skill for planning an audit programme, conducting process-based or clause-based audits, preparing for third-party certification, or training internal auditors.

---

When to use

• Planning an internal audit programme
• Conducting an internal audit (process-based or clause-based approach)
• Preparing for a third-party surveillance or recertification audit
• Training an internal auditor

---

Required Internal Audit Checklist

☐ Define audit scope, criteria, and objectives before starting ☐ Verify auditor competence and independence (not auditing own work) ☐ Audit the process flow first — map evidence to ISO clauses afterwards ☐ Use open questions throughout — no leading questions, no yes/no questions ☐ Verify every answer with objective evidence ("show me", "let me see") ☐ Use sampling: interview multiple people, review multiple records, different time periods ☐ Classify findings correctly (Major / Minor / OFI) — do not downgrade under pressure ☐ Record objective evidence clearly and traceably for every finding ☐ Check effectiveness of previous corrective actions from prior audit cycles ☐ Confirm process performance against KPIs ☐ Issue a balanced audit report (findings + strengths) ☐ Track all Major and Minor NCs to closure with owner, due date, and effectiveness verification

---

Audit approach — process-based first

Preferred audit method: audit the process flow first, then map evidence to ISO clauses.

Follow the process: inputs → activities → outputs → performance indicators. Find where requirements are addressed in practice. Only then link findings to specific clauses. This avoids "checklist auditing" and produces more useful, systemic findings.

Use sampling throughout: interview at least 2–3 people, review at least 2–3 records, and cover different time periods. One record is not enough to confirm systemic conformity.