Confirm the intended audit objective, scope, criteria, process owners and boundaries before scheduling interviews
FREE INTERNAL AUDIT STARTER · UAE
A practical ISO internal-audit checklist: what to check before an external audit.
An internal audit is not a hunt for perfect paperwork. It is a structured check of whether the management system works in normal operations, whether people understand their responsibilities and whether evidence supports the process. Start with the organisation's scope, risks, recent changes and previous findings; then test a sensible sample of real work.
WHEN THIS HELPS
Situations we can help you resolve.
- ✓An external, surveillance or recertification audit is approaching
- ✓The audit programme exists but the team is unsure what evidence to review
- ✓Previous findings have not been checked for effectiveness
- ✓Process owners believe an audit is only a document review
- ✓The organisation needs a practical starting point for ISO 9001, 14001 or 45001 internal audits
PRACTICAL DECISION SEQUENCE
Work through the question in a useful order.
Use this sequence to clarify the requirement and organise the next decision. Confirm standard-specific interpretations with the authorised standard and an independent certification body.
Use risk, process importance, change, incidents, complaints, objectives and previous findings to prioritise the audit programme
Sample actual work: orders, approvals, inspections, maintenance, training, incident records, suppliers, customer feedback or other evidence relevant to the process
Interview the people doing and owning the work rather than relying only on written procedures
Compare the stated process with what happens in practice and record evidence, not assumptions
Test whether actions from audits, incidents, complaints and reviews have a named owner, target date and effectiveness check
Report clear findings to relevant management, then track correction and corrective action to closure
Protect auditor objectivity: do not have a person audit their own work
BUSINESS OUTCOMES
Designed to improve the way the system works.
→A risk-based audit plan→Evidence-led findings→Clear action ownership→Stronger readiness for management review→Fewer surprises during an independent audit
DIRECT ANSWERS
Questions about this resource.
Is an ISO internal audit the same as the certification audit?+
No. An internal audit is part of the organisation's own management system. An independent certification body performs a separate certification audit and makes any certificate decision.
Do we need to audit every process every month?+
No responsible universal frequency applies. The audit programme should consider process importance, risks, changes and previous audit results, then provide enough coverage to evaluate the system.
Can an internal audit be remote?+
Interviews and digital evidence can often be reviewed remotely. Where physical operations, safety controls or conditions must be observed, targeted on-site audit activity may be more appropriate.
Can LETA perform our internal audit?+
LETA can provide outsourced internal-audit support. Objectivity and auditor competence must be protected, especially where LETA has also supported implementation.
PRIMARY SOURCES
Check the current information at source.
Reviewed by LETA Advisory on 19 August 2026. Standards and transition arrangements can change; confirm the edition and audit timetable applicable to your organisation.START WITH CLARITY
Tell us what triggered the requirement.
A tender, customer request, operational issue or audit date is enough to start the conversation.