Internal Audit
Skill packages tagged with “Internal Audit”
ISMS Internal Audit Report (Clause 9.2)
Plan and execute ISO 27001 internal audits: create audit plans with sampling strategies, draft structured audit reports with findings mapped to clauses, validate finding completeness (severity, evidence, clause, CAPA), classify finding severity, and verify auditor impartiality.
ISO 17025 Internal Audit Program
Establish and manage an internal audit program per ISO/IEC 17025:2017 Clause 8.8. Produces audit procedure, annual plan with schedule, clause-by-clause checklist, and report template with finding classification. Audit plan validator checks scope coverage and auditor impartiality; finding completeness checker validates report structure and evidence requirements.
ISO 20000 Internal Audit (Clause 4.5.4.2)
Plan and execute SMS internal audits for ISO/IEC 20000-1:2011. Create annual audit programs, plan individual engagements, document findings with classifications (Major NC, Minor NC, Observation, OFI), and prepare corrective action plans.
ISO 27701 PIMS Internal Audit
Plan and document a PIMS-specific internal audit. Covers audit planning, execution checklist, findings, nonconformities, and corrective actions focused on privacy controls and PII processing compliance.
ISO 42001 Internal Audit
Draft internal audit procedure and audit report structure for the AIMS under ISO/IEC 42001:2023.
OHSMS Internal Audit (Clause 9.2)
Plan and execute ISO 45001 OHSMS internal audits: create audit plans with sampling strategies, draft structured audit reports with findings mapped to clauses, validate finding completeness (severity, evidence, clause, corrective action), and verify auditor impartiality.
SOC 2 Internal Audit
Conduct an internal readiness audit for SOC 2 certification. Tests controls per TSC criteria, classifies findings by AICPA severity (Material Weakness, Significant Deficiency, Deficiency, Observation), organizes evidence for auditor handoff, tracks management responses, and produces a readiness assessment. The capstone skill that determines whether the organization is ready to engage an external auditor.