Independent assessment | Internal audits
ISO internal auditing in Perth
An internal audit should provide management with a defensible picture of conformity, implementation and system effectiveness—not a checklist completed for the file.
What a useful internal audit should deliver
Internal auditing tests whether the management system conforms to planned arrangements and the applicable ISO standard, and whether the arrangements are effectively implemented and maintained.
Risk-based audit programme
Plan scope, frequency, methods, competence and independence around your operations and significant risks.
Objective evidence and findings
Use interviews, observation and sampled records to reach traceable, evidence-based conclusions.
Actionable reporting
Identify conformities, nonconformities and improvement opportunities, with clear follow-up of corrective actions.
How Tenbray can assist
Tenbray provides internal audits and audit programme support for ISO 9001, ISO 14001, ISO 45001 and ISO/IEC 27001. Audits can also support upcoming surveillance or recertification events.
Frequently asked questions
Can the internal audit be outsourced?
Yes. Organisations can engage competent external auditors, provided the arrangements maintain objectivity and impartiality.
Is an internal audit the same as certification?
No. An internal audit evaluates the management system; certification decisions are made by an independent certification body.
Internal audits should identify what actually works
A worthwhile ISO internal audit does more than confirm that controlled documents exist. It examines whether processes achieve their intended results, whether work follows the documented arrangements and whether evidence meets applicable requirements. Audit programmes should consider process importance, changes, previous audit results and the risk profile—not simply repeat the same checklist each year.
What an internal audit engagement can deliver
- A risk-based audit plan identifying scope, criteria, processes and personnel to interview.
- Sampling of project, service delivery, site or information-security records.
- Evidence-based findings referenced to the appropriate standard or internal requirements.
- Clear reporting that distinguishes conformity, opportunities for improvement and nonconformity.
- Action tracking guidance and verification of corrective-action effectiveness.
Common internal audit weaknesses
- The auditor checks only the presence of procedures, not their operation.
- Audits omit outsourced activities or critical site processes.
- Findings are too vague to enable effective correction.
- Corrective actions address symptoms without considering causes.
- The audit programme is disconnected from management review and performance trends.
Independent internal audits versus certification audits
Internal audits are commissioned by the organisation to assess its management system; certification audits are undertaken by an independent certification body. Tenbray provides internal audit and readiness support, not certification decisions. Auditor objectivity and any potential conflicts of interest need to be considered when defining an engagement.
Internal audit support is available for ISO 9001, ISO 14001, ISO 45001 and ISO/IEC 27001, with work scoped to the particular standard, business context and certification status.
Prepare with an auditor's perspective
Tell Tenbray what standard applies to your organisation, whether you are building a new system or preparing for your next independent audit, and what support you need.
Contact Tenbray