Internal audit
I have a question related to BC/ISMS certification.
To accomplish clause 9.2 Internal Audit, is it acceptable to conduct internal audits at planned intervals with an External Audit compañy or it MUST be internal?
Assign topic to the user
For ISO Management System standards the internal audit can be performed either by own organization's employees or by an external company on the organization's behalf.
Please note that this internal audit performed by an external organisation should not be mixed with certification audit, which is performed by a certification body..
This article will provide you further explanation about internal audit:
- How to prepare for an ISO 27001 internal audit https://advisera.com/27001academy/blog/2016/07/11/how-to-prepare-for-an-iso-27001-internal-audit/
Comment as guest or Sign in
Oct 11, 2019