MCT Beginning

1. An internal audit is initiated, for example:

• When it is scheduled in the audit program
• Following the request of a department manager
• After a dysfunction in an activity
• Following a major evolution of a process

2. The audit procedure contains, at minimum, instructions on how to:

• Plan the audits
• Conduct the audits
• Ensure auditor competence
• Assign the responsibility for managing the audit programme to a qualified person

3. Traps to be avoided by an auditor:

• Sharing advice or opinions
• Careful listening
• Keeping people waiting for you
• Discretion
• Reading the audit questionnaire spep by step
• Neglecting the work place at the expense of the documentation

4. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences

5. The records related to the audits, among other things, contain the:

• Audit plan
• Audit report
• Audit procedure
• Evaluation of auditor competence
• Audit team members