Skip to content

Glossary · Foundations

Internal Audit

A planned, independent review that checks whether a management system conforms to its own requirements and to the relevant standard, and whether it is effective.

Put the term into practice: Risk management software

An internal audit is a structured examination, carried out by people independent of the area being audited, that tests whether the management system meets the standard's requirements and works as intended. It is a mandatory part of every ISO management system.

Findings are classified, typically as nonconformities or opportunities for improvement, and feed corrective action. Internal audit results are a required input to the management review.

In KaitoSec everyone works with the same terms.

Security, IT and leadership share terms, data and evidence in one system. We show you in thirty minutes.