Internal Audit Report - numbering non-conformities
One first question. Wouldn’t it make sense to number the non-conformities in the Internal Audit Report so we can track it?
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Please note that the non-conformity information that can be used for traceability in the Internal Audit Report template is the information included in the “Cross-reference to the Corrective Action Form” column, which is suggested to be a number in the comment’s template, which is sufficient to provide the necessary traceability.
Including numbering, or other form of identification besides the one included in the Cross-reference to the Corrective Action Form, would only make the document unnecessarily complex.
This article will provide you a further explanation about records management:
- Records management in ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/11/24/records-management-in-iso-27001-and-iso-22301/
These materials will also help you regarding internal audit:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/
- Free online training ISO 27001:2013 Internal Auditor Course https://advisera.com/training/iso-27001-internal-auditor-course/
Comment as guest or Sign in
Feb 18, 2021