Internal Audit Report Review
I have your documents for the internal audit report and the checklist, on the internal report is it acceptable to state that everything was implemented correctly and there was no finding for improvement?
Assign topic to the user
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now 
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now
Although it is acceptable, it is highly unusual that the results of an internal audit point out that everything was implemented correctly AND there are no opportunities for improvement (a certification auditor would certainly check a such report in more detail).
If everything is consistently being performed as planned, then the next step in maturity could be an opportunity to be considered. For example:
- Efficiency could be increased
- Productivity could be increased
- Rework could be decreased
- Costs could be decreased
This article will provide you with further explanation about improving processes maturity:
- Achieving continual improvement through the use of maturity models https://advisera.com/27001academy/blog/2015/04/13/achieving-continual-improvement-through-the-use-of-maturity-models/
Comment as guest or Sign in
Sep 13, 2022