Internal audits
Plan audits and close every finding
Plan each internal audit with its scope and lead auditor, record findings as nonconformities or observations, and follow every corrective action until it is done. Findings can link to the control they concern.
How it works
Plan the audit
Enter the title, scope and criteria, the lead auditor and the planned date. Audits are numbered AUD-1, AUD-2 and so on.
Record findings
Choose major or minor nonconformity, observation or improvement, describe the corrective action, who is responsible and the due date.
Follow up
Open findings appear in Tasks, overdue ones get a reminder, and the person responsible reports progress.
What changes for you
An audit trail auditors accept
Plans, findings, actions and conclusions in one place, with the full history of every change.
Nothing left open
Corrective actions with due dates come back in Tasks until they are closed.
Linked to your controls
A finding names the control it concerns, so weaknesses and measures stay connected.
What it covers
- NIS2 21(2)(f)
- ISO 27001 9.2
- ISO 27001 10.2
Works together with
Questions
Can people outside the owners help?
Yes. A member who is given a finding can report progress on it; everything else needs an owner or admin.
Are findings limited?
No. Your package may limit the number of audits, but findings are never limited.
Run your next internal audit here
Plan it, record what it finds and close every action on time.