How often do internal audits have to take place?

The standards do not set a fixed rhythm but “planned intervals”, depending on the importance of the processes and previous results. It is common to cover all areas and requirements within a year or the certification cycle.

Can I audit my own area?

Better not: auditors must be objective and impartial. Whoever is responsible for an area should not audit it themselves.

What is the difference from an external audit?

The organisation conducts the internal audit itself or commissions it. External audits are supplier audits (second party) or certification audits by an accredited body (third party).

Deutsche Version

Internal audit – plan, conduct, improve

The internal audit is mandatory in every ISO management system (clause 9.2) – and the most important tool to find weaknesses before the certification audit.

Start the free maturity check Explore IMScheck PRO

BETALaunch phase: IMScheck PRO is free until Jan 1, 2027 – full version, full security.

How IMScheck supports your internal audits

The internal audit is a task in the catalogue – shared across all active standards.
Each audit is a collection with checklist, documents, findings and actions.
Rate audit items and record deviations as findings with one click.
Track corrective actions through to the effectiveness check.
Results ready as input for the management review.

What the standards require

Internal audits take place at planned intervals and check whether the management system conforms to the organisation’s own requirements and those of the standard, and whether it is effectively implemented.

Required are an audit programme (frequency, methods, responsibilities, reporting), defined audit criteria and scope, objective and impartial auditors, and reporting to relevant management. Results are retained as evidence.

How it works in practice

1. Define the annual audit programme.

2. Prepare the audit: scope, criteria, checklist.

3. Conduct it: interviews, site walk, sampling – record results per item.

4. Classify and report findings.

5. Implement corrective actions and check their effectiveness.

Internal audits with IMScheck

Each audit as a collection with checklist, findings, actions and linked documents.

Findings become actions with owner, due date and effectiveness review.

Results feed into the management review (clause 9.3) – all recorded in the audit trail.

Frequently asked questions

How often do internal audits have to take place?: The standards do not set a fixed rhythm but “planned intervals”, depending on the importance of the processes and previous results. It is common to cover all areas and requirements within a year or the certification cycle.
Can I audit my own area?: Better not: auditors must be objective and impartial. Whoever is responsible for an area should not audit it themselves.
What is the difference from an external audit?: The organisation conducts the internal audit itself or commissions it. External audits are supplier audits (second party) or certification audits by an accredited body (third party).