MCT Internal audit

1. The audit client can be:

• Top management
• A customer
• The certification body
• A process owner

2. The results of the process internal audit:

• Are management review outputs
• Are management review inputs
• Allow ISMS improvement opportunities to be found
• Are verifiable evidences

3. Internal audit can be of:

• A process
• A product
• A customer
• An external provider

4. Audit principles to be followed include:

• Factual approach
• Ethics
• Independence
• Professional integrity

5. Auditor principles to be followed, among other things, are:

• Factual approach
• Professional ethics
• Professional integrity
• Remaining available
• Confidentiality