MCT Beginning

1. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences

2. The records related to the audits, among other things, contain the:

• Audit plan
• Audit report
• Audit procedure
• Evaluation of auditor competence
• Audit team members

3. An internal audit is initiated, for example:

• When it is scheduled in the audit program
• Following the request of a department manager
• After a dysfunction in an activity
• Following a major evolution of a process

4. Improving the audit program takes into account the:

• Rate of implementation of the audit plan
• Percentage of trained persons as internal auditors
• Trends of audits
• Proper application of procedures

5. The extent of the audit program, among other things, depends on:

• Process complexity
• Risks identified
• Follow-up of previous audits
• Commercial policy
• Essential characteristics of products