Template customization

Answer: The internal audit checklist is based on the clauses of the standard, but you are free to include additional questions (e.g., questions that would cover controls not listed on ISO 27001 Annex A), or change the existing ones if you understand another text will make the checklist cover the requirements of the company own documentation.

This article will provide you further explanation about elaborating checklists:
- How to make an Internal Audit checklist for ISO 27001 / ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-make-an-internal-audit-checklist-for-iso-27001-iso-22301/

These materials will also help you regarding audit checklists:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/
- ISO 27001:2013 INTERNAL AUDITOR COURSE https://advisera.com/training/iso-27001-internal-auditor-course/