MCT Internal audit

1. The scope of the ISO 19011 standard, among other things, contains the:

• Audit program
• Audit requirements
• Auditor competence
• Audit activities

2. Internal audit can be of:

• A process
• A product
• A customer
• An external provider

3. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences

4. Auditor principles to be followed, among other things, are:

• Factual approach
• Professional ethics
• Professional integrity
• Remaining available
• Confidentiality

5. The audit client can be:

• Top management
• A customer
• The certification body
• A process owner