Guest user Created: Jan 09, 2019 Last commented: Jan 09, 2019

Internal audit and certification

Just a quick question, we are just in process of getting certified and are in the latter stages of the project, I want to know do we need to perform an internal audit and corrective actions before applying for certification or is the procedure document sufficient in the first stage?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Jan 09, 2019

Answer:

You need to perform an internal audit and corrective actions for identified nonconformities before applying for certification so you can provide evidences of audits results required by the standard (e.g., audit report, nonconformities action plans, etc.). Additionally, the results of internal audit are required for the management review, another mandatory requirement for certification.

These articles will provide you further explanation about what expect from certification audit:
- Becoming ISO 27001 certified – How to prepare for certification audit https://advisera.com/27001academy/iso-27001-certification/
- Infographic: The brain of an ISO auditor – What to expect at a certification audit https://advisera.com/articles/infographic-the-brain-of-an-iso-auditor-what-to-expect-at-a-certification-audit/

These materials will also help you regarding internal audit:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/
- ISO 27001:2013 Internal Auditor course https://advisera.com/training/iso-27001-internal-auditor-course/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 09, 2019

Expert Advice Community