ISO Internal Audit Checklist

Structure an internal (first-party) management-system audit: confirm objectives, scope, and criteria; plan evidence methods; record findings clearly; follow up on actions.

It does not replace auditor competence, sampling judgment, or independent certification audits.

□ Audit objectives confirmed with the audit programme □ Scope and boundaries clear (sites, processes, exclusions) □ Criteria identified (e.g. internal requirements, applicable standard themes) □ Team competence and independence considered □ Plan communicated to auditees where appropriate

□ Interviews planned with process owners and operators □ Observation of activities included where useful □ Records sampled proportionately to risk □ Notes capture requirement, evidence, and gap for findings □ Opening / closing communication handled per your procedure

□ Findings classified consistently with your definitions □ Correction vs corrective action distinguished where needed □ Owners and due dates assigned □ Verification of effectiveness planned □ Report issued and retained as required by your programme

Requirement / expectation: … Evidence observed: … Gap: … Risk / significance: … Immediate correction (if any): … Corrective action needed?: Yes / No / To be determined

Use interactive mode on this page to track planning items locally in your browser.

This does not replace auditor judgment. It does not guarantee audit success or certification. Not legal advice. Beyond Carbon may support internal audit programmes as consultancy — we are not your certification body.

Beyond Carbon provides ISO consultancy, implementation support, documentation assistance, and audit preparation support. Independent certification bodies issue certificates after successful certification audits. Beyond Carbon does not present itself as a certification body or accreditation body.