Is internal audit mandatory for ISO 9001?

ISO 9001 requires the organization to conduct internal audits at planned intervals. Confirm exact requirements in the standard text you use.

Can consultants perform our internal audits?

Yes, as outsourced internal audit support. That remains first-party assurance, not third-party certification.

How often should we audit?

According to a risk-based internal audit programme covering the system within a planned cycle.

Do internal auditors need certificates?

They need competence. Formal training helps but is not the same as CB auditor qualification.

Where can we get help?

See /auditing/internal-audit and internal auditor training.

Internal Audit (Glossary)

Internal Audit

An internal audit is an audit conducted by, or on behalf of, the organization itself for management review and other internal purposes. It is a first-party audit. In ISO management systems, internal audits provide information on whether the system conforms to planned arrangements and the standard, and whether it is effectively implemented and maintained.

Practical implementation, documentation, training and audit readiness — without acting as the certification body.

ISO management-system consultancy

Practical implementation

Audit readiness

Clear role boundaries

Written by

Beyond Carbon Editorial Team

Reviewed by

Beyond Carbon Editorial Team

Last reviewed: 2026-09-07

Definition

An internal audit is an audit conducted by, or on behalf of, the organization itself for management review and other internal purposes. It is a first-party audit.

In ISO management systems, internal audits provide information on whether the system conforms to planned arrangements and the standard, and whether it is effectively implemented and maintained.

Independence

Auditors should be independent of the activities they audit to the extent practical. Small organizations may use cross-functional or outsourced internal auditors while keeping the audit first-party in purpose.

Outputs

Audit conclusions, nonconformities, and opportunities for improvement feed corrective action and management review. Internal audits do not issue ISO certificates.

Need help applying this?

Use the guide, then discuss your requirements when ready — without sales pressure.

Need help applying this?

Consultancy vs certification

Beyond Carbon provides ISO consultancy, implementation support, documentation assistance, and audit preparation support. Independent certification bodies issue certificates after successful certification audits. Beyond Carbon does not present itself as a certification body or accreditation body.

FAQs

What happens after you submit?

We do not promise minute-level response times unless operationally guaranteed.

We received your request
Your requirements are reviewed
A consultant contacts you
Scope is clarified
Next steps are recommended

Ready to strengthen your management system?

Tell us about your organization, scope, and requirements. We’ll help clarify the appropriate next step.

Request Consultation