Can the audit report serve as the obligatory documentation of audit program and audit result?
Assign topic to the user
I’m assuming this question refers to ISO 27001, but the answer is applicable to any other standard like ISO 9001, 14001, etc. (respected the respective internal audit clause of each standard).
The Internal Audit Report is an example of a mandatory record related to audit results to fulfill clause ISO 27001 9.2 Internal audit, but please note that it is a different document from the Internal Audit Program.
The Internal Audit Program is a mandatory document that plans all audits that must be performed in a period of time, while the Internal Audit Report refers to the results of a single performed Internal Audit.
See this article for further information about ISO 27001 mandatory documents.
Comment as guest or Sign in
Oct 31, 2023