MCT Internal audit

1. Internal audit can be of:

• A process
• A product
• A customer
• An external provider

2. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences

3. The audit client can be:

• Top management
• A customer
• The certification body
• A process owner

4. Auditor principles to be followed, among other things, are:

• Factual approach
• Professional ethics
• Professional integrity
• Remaining available
• Confidentiality

5. Auditee principles to follow include:

• Curiosity
• Confidentiality
• Remaining available
• Being benevolent and cooperative