Skip to main content

Audit and Certification

Internal audit

The independent check, required by clause 9.2 of both ISO/IEC 27001 and ISO/IEC 42001, that the management system conforms and is effective. It must happen before Stage 2 and cannot be back-dated.

Why it matters: the auditor must be independent of the work being audited, which is why an implementer should not audit their own build.

Questions about how this applies to you? Book a free 45 minute diagnostic.

Back to the glossary

We use cookies and similar technologies to measure how this site is used, to see which organisations visit, and to measure our advertising. If you accept, we load Plausible, Google Analytics and Google Ads, Microsoft Clarity, which records session replays, and Apollo. Nothing loads until you accept. Read our Cookies policy.