Internal Audits
How to plan, conduct and report internal audits: audit programmes, checklists, evidence, nonconformities and follow up, aligned to ISO 19011.
Internal audits are how an organisation checks its own management system before a certification body does. These articles walk through the full cycle: building a risk based audit programme, planning each audit, sampling and gathering evidence, and raising and closing nonconformities.
The guidance follows ISO 19011, the international standard for auditing management systems, and reflects how experienced auditors run internal audits that add real value rather than just tick boxes. It applies whether you audit quality, safety, environmental or information security systems.
Whether you are running your first internal audit or sharpening an established programme, you will find practical checklists, sampling techniques, guidance on audit evidence, and advice on writing findings that hold up and drive genuine improvement.
Browse other topics
301 articles in Internal Audits.
Evidence or Inference? Sharpening Your Judgement as an Internal Auditor
Evidence and inference are not the same thing. Learn how to keep them separate, build defensible findings, and develop the analytical judgement that defines effective internal auditing.
Setting OH&S Objectives: Clause 6.2.1 of ISO 45001 Explained
Clause 6.2.1 of ISO 45001 requires OH&S objectives that are measurable, monitored, communicated, and linked to your risks and policy. This guide explains every requirement and how to avoid common nonconformities.
Planning of Changes: Inside the New Clause 6.3 of ISO 14001:2026
ISO 14001:2026 introduces Clause 6.3 as a standalone change planning requirement. Learn what it covers, how it differs from 2015, and what auditors should look for.
How to Audit Competence in ISO 9001: Records, Matrices and Evaluation
Learn how to audit ISO 9001 Clause 7.2 competence properly. Covers records to request, how to read a competence matrix, evaluation evidence, and the most common nonconformities auditors find.
Auditing a Warehouse Quality Management System: Stock Accuracy, Picking and Despatch
Learn how to audit a warehouse quality management system effectively, covering stock accuracy, picking controls, despatch verification, traceability, and common findings under ISO 9001.
What Is an Audit Checklist? A Practical Guide for ISO Auditors
An audit checklist is a structured tool that guides auditors through ISO requirements. Learn what it contains, how to build one, and how to use it without becoming checklist dependent.
Interviewing Shop Floor Workers: Getting Honest Answers
Shop floor interviews reveal whether your management system actually works. Learn practical techniques to get honest, useful answers from workers during ISO audits.
Evaluating Monitoring, Internal Audit and Management Review in an AIMS
Learn how to audit Clause 9 of ISO 42001, covering monitoring and measurement, internal audit requirements, and management review in an AI Management System.
Checking the Statement of Applicability Against the Risk Treatment Plan: A Practical Audit Guide for ISO 27001
Learn how to audit the ISO 27001 Statement of Applicability against the risk treatment plan. Practical steps, interview questions, and how to classify what you find.
Gathering Audit Evidence: Sampling, Interviews and Document Review Done Well
Learn how to gather audit evidence that holds up. Practical guidance on sampling strategies, interview techniques, and document review for ISO auditors.
How to Audit Clause 6.1.4: From Risk to Planned Action
Learn how to audit Clause 6.1.4 effectively. This practical guide covers what the clause requires, common failure modes, interview questions, proportionality assessment, and how to document findings.
Auditing How Organisations Plan to Achieve Their Environmental Objectives
Clause 6.2.2 of ISO 14001 requires more than setting targets. Learn how to audit environmental objective planning, what evidence to gather, and the most common nonconformities auditors find.
ISO 9001 Clause 7.2 Competence Explained
ISO 9001 Clause 7.2 requires more than a training register. This guide explains what competence really means under the standard, what auditors check, and how to avoid common nonconformities.
Auditing Quality Management at an RTO: Training Records, Assessment and Compliance
Auditing quality management at an RTO means navigating ISO 9001 and ASQA compliance together. This guide covers training records, assessment practices, trainer competence, and common findings.
Audit Objectives Explained: What They Are, Why They Matter, and How to Set Them
Audit objectives define what an audit is trying to achieve. Learn what they are, how they differ from scope and criteria, and how to set them effectively for internal, certification, and supplier audits.
Building Rapport with Auditees Quickly: A Practical Guide for Auditors
Building rapport with auditees quickly is one of the most practical audit skills you can develop. Learn how to connect faster, reduce defensiveness, and gather better evidence in every interview.
Auditing Operational Controls and Impact Assessments Under ISO 42001 Clause 8
A practical guide to auditing ISO 42001 Clause 8, covering operational controls, AI risk assessments, risk treatment, and impact assessments with real audit questions and common nonconformities.
Auditing Improvement: Tracing Nonconformities Through to Closure
Raising a nonconformity is the easy part. This guide covers how to trace nonconformities through root cause analysis, corrective action, and effectiveness verification to genuine closure.
Running an Effective Opening Meeting: Guidance from ISO 19011
ISO 19011 sets clear expectations for the audit opening meeting. Learn what to cover, how to structure it, and the practical habits that set effective auditors apart.
Planning Action in ISO 45001: Making Sense of Clause 6.1.4
Clause 6.1.4 of ISO 45001 requires organisations to plan actions for identified risks, opportunities and legal requirements, and integrate them into the OH&S management system. Here is how to do it properly.
Planning Actions to Achieve Environmental Objectives: Clause 6.2.2 Explained
Clause 6.2.2 of ISO 14001 requires more than setting objectives. Learn what auditors check, the six required planning elements, and how to build action plans that actually work.
How to Audit Organisational Knowledge Under Clause 7.1.6
Clause 7.1.6 is harder to audit than it looks. This guide covers what the clause requires, common findings, practical interview questions, and how to write findings that drive real improvement.
Auditing a Software Company Quality Management System: Sprints, Releases and Defects
Auditing a software company QMS requires a different approach. Learn how to audit sprints, releases, defect management and design controls under ISO 9001.
Audit Criteria Explained: What They Are and How Auditors Use Them
Audit criteria are the reference requirements against which all audit evidence is measured. This guide explains what they are, where they come from, and how auditors apply them in practice.
Managing Interruptions and Distractions During Audits
Interruptions can derail even a well-planned audit. This guide covers how to prevent, manage, and recover from distractions while keeping your evidence gathering on track.
Gathering Evidence of Competence and Awareness in an AIMS Audit
Learn how to gather and test evidence of competence and awareness when auditing an AI Management System under ISO 42001 Clause 7, with practical interview and document review techniques.
How to Audit Performance Evaluation in an ISMS
Learn how to audit Clause 9 of ISO 27001 effectively. This guide covers monitoring and measurement, internal audit, and management review with practical evidence-gathering tips.
Planning Internal Audits Around Risk: Practical Lessons from Clause 5
Clause 5 of ISO 19011 puts risk at the centre of audit programme planning. Learn how to translate risk factors into practical audit scheduling decisions that add real value.
Auditing the Legal Register Under ISO 45001 Clause 6.1.3
A practical guide to auditing the legal register under ISO 45001 Clause 6.1.3, covering what to look for, interview questions, common nonconformities, and how to write findings that stand up.
How to Audit Environmental Objectives Under ISO 14001:2026
Learn how to audit environmental objectives under ISO 14001:2026. Practical guidance on evidence, interview questions, common nonconformities, and linking objectives to the broader EMS.
Organisational Knowledge: What ISO 9001 Clause 7.1.6 Actually Requires
Clause 7.1.6 is about more than a knowledge register. Learn what ISO 9001 actually requires, what auditors look for, and how to build a practical approach that works.
Auditing Laboratory Quality Systems: Calibration, Competence and Records
Auditing a laboratory quality system requires more than checking stickers and folders. Learn how to audit calibration, competence and records in a way that reveals whether the system is genuinely working.
Audit Scope Explained: What It Is, How It Works, and Why Getting It Wrong Costs You
Audit scope defines what an audit covers, where it reaches, and what sits outside it. Learn how to define it correctly and avoid the mistakes that undermine audit credibility.
Dealing with Evasive Answers During an Audit: Practical Techniques That Work
Evasive answers are one of the most common audit challenges. Learn practical, proven techniques to get honest, specific answers without turning the audit into a confrontation.
Auditing ISMS Operations: What to Sample Under Clause 8
Clause 8 is where ISO 27001 gets tested in practice. Learn what to sample under operational planning, risk assessment and risk treatment, and where the common gaps appear.
How to Build an Internal Audit Programme Using ISO 19011:2026
Learn how to build a risk-based internal audit programme using ISO 19011:2026, covering objectives, scheduling, auditor selection, reporting, and programme review.
Legal Requirements and Other Requirements: Clause 6.1.3 of ISO 45001 Explained
Clause 6.1.3 of ISO 45001 requires more than a list of laws. Learn what legal and other requirements you must capture, how to build a register that works, and what auditors check.
Environmental Objectives Under ISO 14001:2026: Meeting the Six Criteria of Clause 6.2.1
ISO 14001:2026 Clause 6.2.1 sets six criteria every environmental objective must meet. This guide explains each criterion with practical examples and common audit nonconformities.
Auditing Resources Under ISO 9001 Clause 7.1: From People to Calibration
Learn how to audit ISO 9001 Clause 7.1 properly, from people and infrastructure to calibration and organisational knowledge, with practical questions and evidence tips.
Auditing a Civil Works Quality Management System: ITPs, Lot Records and Hold Points
Learn how to audit a civil works QMS by examining ITPs, lot records, hold points and witness points. Practical guidance for internal and external auditors on site.
What Is an Audit Programme? A Plain English Guide for Auditors and Quality Managers
An audit programme is the planned arrangement of audits over a defined period. Learn what it must contain, how to design it using risk based thinking, and how to manage it effectively.
Handling Defensive Auditees Calmly and Professionally
Defensive auditees are one of the biggest challenges in practice. Learn how to recognise the triggers, stay in control, and keep the audit on track without escalating tension.
How to Audit Leadership Commitment and the AI Policy Under ISO 42001
Learn how to audit leadership commitment and the AI policy under ISO 42001 Clause 5. Practical evidence to gather, interview questions, common nonconformities, and a checklist for auditors.
Audit Techniques for Clause 7: Verifying Competence, Awareness and Documents
Practical audit techniques for Clause 7 of ISO standards. How to verify competence, test awareness, audit communication, and review document control without missing real nonconformities.
How Auditors Evaluate OH&S Opportunity Assessment in Clause 6.1.2.3
Learn how to audit Clause 6.1.2.3 of ISO 45001 effectively. Practical guidance on evaluating OH&S opportunity assessment, common gaps, audit questions, and how to grade findings.
Auditing Planning Actions Under Clause 6.1.5 of ISO 14001:2026
Clause 6.1.5 of ISO 14001:2026 requires planned actions for every significant aspect, compliance obligation, and risk identified. Here is what auditors check and where organisations fall short.
ISO 9001 Clause 7.1 Resources Explained: People, Infrastructure and Environment
ISO 9001 Clause 7.1 covers people, infrastructure, and work environment resources. Learn what each sub-clause requires, what auditors look for, and how to avoid common nonconformities.
Auditing Quality Management in Food Manufacturing: Sampling, Traceability and Recall
Learn how to audit quality management in food manufacturing, covering product sampling programmes, traceability system testing, mock recall exercises, and nonconforming product control.
What Is an Audit Plan? A Practical Guide for ISO Auditors
An audit plan defines the objectives, scope, criteria, timing and logistics for a specific audit event. Learn what it must contain and how to write one that works.
Time Management During Audits: Staying on Schedule Without Cutting Corners
Audit time management separates good auditors from great ones. Learn practical techniques to stay on schedule without cutting corners, from planning through to the closing meeting.
Auditing Organisational Context and AI Roles in an ISO 42001 Audit
Learn how to audit Clause 4 of ISO 42001, including organisational context, interested parties, scope, and the critical step of identifying whether an organisation acts as an AI provider, producer or customer.
Auditing the Risk Assessment: Is It Repeatable, Owned and Documented?
Audit the ISMS risk assessment against three questions: Is it repeatable, owned and documented? A practical guide to Clauses 6.1.2 and 8.2 of ISO 27001.
OH&S Opportunities Explained: Clause 6.1.2.3 of ISO 45001
Clause 6.1.2.3 of ISO 45001 requires organisations to assess OH&S opportunities, not just risks. This practical guide explains what the clause requires, common audit gaps, and how to build a process that actually drives improvement.
Planning Action in ISO 14001:2026: Clause 6.1.5 Explained
Clause 6.1.5 is new in ISO 14001:2026. It consolidates action planning across the entire planning section. Here is what it requires and how auditors assess it.
Common ISO 9001 Clause 6 Nonconformities: Risks, Objectives and Change Planning
Clause 6 of ISO 9001 generates some of the most consistent audit findings. Learn where organisations fail on risk based thinking, quality objectives and change planning, and how to fix the gaps.
Auditing an NDIS Provider Quality Management System
A practical guide to auditing an NDIS provider QMS. Covers worker screening, incident management, participant interviews, and common nonconformities auditors find in disability services.
What Is a Special Audit and When Does One Get Triggered?
A special audit is triggered by a specific event outside the normal audit cycle. Learn what causes one, how it works, and what to do when one is called.
How to Audit Risk Based Thinking in an ISO Management System
Learn how to audit risk based thinking in ISO management systems. Practical guidance on evidence, audit questions, common nonconformities, and how to write up findings.
Nonconformity and Corrective Action Under ISO 42001 Clause 10.2
ISO 42001 Clause 10.2 requires organisations to react, investigate root causes, and verify corrective actions for AI system nonconformities. Here is what auditors look for and where organisations fall short.
Auditing Leadership: Evidence That Top Management Owns the ISMS
Clause 5.1 of ISO 27001 puts ISMS ownership on top management. This guide shows auditors exactly what evidence to gather, what questions to ask, and how to write a defensible finding when leadership is absent in practice.
Audit Questions for OH&S Risk Assessment Under Clause 6.1.2.2
Practical audit questions and evidence to gather when auditing OH&S risk assessment under ISO 45001 Clause 6.1.2.2, including common nonconformities and how to grade findings.
How to Audit Risks and Opportunities Under ISO 14001:2026
Learn how to audit risks and opportunities under ISO 14001:2026, covering Clause 6.1.4, evidence gathering, common nonconformities, and practical interview questions.
How to Audit Planning of Changes in ISO 9001
Clause 6.3 is short but consistently mishandled. Learn how to audit planning of changes in ISO 9001, what evidence to gather, and where nonconformities typically hide.
Auditing Quality Management in Aged Care: A Guide for Internal Auditors
A practical guide for internal auditors working in Australian aged care, covering the Aged Care Quality Standards, ISO 9001 alignment, key processes to audit, common nonconformities, and how to write findings that drive real improvement.
Auditing Leadership: How to Test Clause 5 Commitment in Any ISO Standard
Learn how to properly audit Clause 5 leadership commitment across ISO standards. Practical techniques for interviewing top management, testing policy integration, and gathering objective evidence.
The Hazard Analysis Process in ISO 22000: A Step by Step Walkthrough
A practical step by step walkthrough of the ISO 22000 hazard analysis process, covering team assembly, product descriptions, flow diagrams, hazard assessment, CCPs, and validation.
Continual Improvement in ISO 42001: Making Clause 10.1 Real
Clause 10.1 of ISO 42001 requires genuine, ongoing improvement of your AI Management System. This article explains what that means in practice, what auditors look for, and how to make improvement real.
How to Audit Context and Scope in an ISO 27001 Audit
Learn how to audit Clause 4.1 and 4.3 of ISO 27001 effectively. Practical guidance on testing context analysis, verifying ISMS scope, and tracing findings through the system.
Assessing OH&S Risks: A Guide to Clause 6.1.2.2 of ISO 45001
Clause 6.1.2.2 of ISO 45001 requires a defined process for assessing OH&S risks. This guide explains what the clause demands, common audit findings, and how to build a risk assessment process that actually works.
Clause 6.1.4 Risks and Opportunities: The New Subclause in ISO 14001:2026
ISO 14001:2026 introduces Clause 6.1.4 as a standalone subclause for risks and opportunities. Learn what changed, what auditors will check, and how to implement the new requirements including climate change.
Planning of Changes: A Guide to ISO 9001 Clause 6.3
ISO 9001 Clause 6.3 requires changes to the QMS to be planned and controlled. This guide explains the four key considerations, common nonconformities, and how to build a practical approach.
Auditing a Healthcare Quality Management System Without Getting Lost in Clinical Detail
Learn how to audit a healthcare QMS effectively without overstepping into clinical territory. Practical guidance on key clauses, common findings, and audit techniques for ISO 9001 in healthcare.
What Is a Desktop Audit and How Does It Work in Practice?
A desktop audit is a structured review of documented information conducted off-site. Learn what auditors look for, when it applies, and how to prepare effectively.
Auditing Context of the Organisation: Clause 4 Made Practical
Learn how to audit Clause 4 of ISO management system standards practically. Covers context, interested parties, scope, and processes with real audit questions and common nonconformities.
Auditing Food Safety Culture: What Auditors Should Look For
Food safety culture is now a frontline audit requirement. Learn what auditors should look for in leadership commitment, worker behaviour, reporting systems, and training effectiveness.
Management Review of an AIMS: What Clause 9.3 of ISO 42001 Covers
ISO 42001 Clause 9.3 requires top management to review the AI management system at planned intervals. This article covers every mandatory input, required output, and what auditors will check.
Nonconformity and Corrective Action: How Clause 10.2 Works
Clause 10.2 appears in every major ISO standard. Learn what nonconformity and corrective action actually require, how root cause analysis works in practice, and what auditors check.
Undue Influence and Other New Audit Programme Risks in ISO 19011:2026
ISO 19011:2026 explicitly names undue influence as a risk to audit integrity. Learn what this means for audit programme managers, internal auditors, and lead auditors in practice.
Auditing Hazard Identification: Is the Process Ongoing and Proactive?
Learn how to audit ISO 45001 hazard identification to verify the process is genuinely ongoing and proactive, not just a static register reviewed once a year.
Auditing Compliance Obligations: Verifying the Legal Register Is Current
Learn how to audit a legal register under ISO 14001, what to look for during document review and on-site testing, common nonconformities, and how the 2026 revision changes the approach.
Auditing Quality Objectives: Evidence to Look for Under Clause 6.2
Auditing Clause 6.2 goes beyond checking a list. Learn exactly what evidence to look for when auditing quality objectives under ISO 9001, from measurability to monitoring and planning.
Auditing Quality Management in Transport and Logistics: Key Processes and Evidence
Auditing transport and logistics QMS requires process-based thinking across subcontractors, vehicle maintenance, delivery records and chain of responsibility. Here is what to look for and what evidence to gather.
Vertical and Horizontal Audits Explained: How to Choose the Right Approach
Vertical audits follow a process end to end. Horizontal audits check one requirement across departments. Learn when to use each and how to combine them effectively.
How to Audit Top Management Without Losing the Room
Auditing top management is one of the hardest interviews an auditor conducts. Learn how to prepare, ask the right questions, handle pushback, and gather real evidence of leadership commitment.
PRPs and CCPs Explained: The Building Blocks of Food Safety Control
PRPs and CCPs are the foundation of food safety control. This guide explains what each one is, how they differ, and what auditors check when reviewing a food safety management system.
Internal Audit Requirements in ISO 42001: Clause 9.2 Explained
ISO 42001 Clause 9.2 explained: what internal audit requirements apply to AI management systems, how to plan your audit programme, and what certification auditors look for.
Continual Improvement in ISO 27001: Clause 10.1 Explained
Clause 10.1 of ISO 27001 requires continual improvement of your ISMS. Learn what suitability, adequacy and effectiveness mean in practice and what auditors look for.
Grading Nonconformities Under ISO 19011:2026: New Expectations Explained
ISO 19011:2026 tightens expectations around grading nonconformities. Learn what changed, how to classify major and minor findings with evidence, and what to explain at the closing meeting.
Hazard Identification Under Clause 6.1.2.1: What ISO 45001 Requires
Clause 6.1.2.1 of ISO 45001 requires proactive, ongoing hazard identification covering routine tasks, non-routine activities, psychosocial hazards, and contractors. This guide explains what the clause demands and where organisations fall short.
Compliance Obligations in ISO 14001:2026: What Clause 6.1.3 Covers
Clause 6.1.3 of ISO 14001:2026 requires organisations to identify, document, and maintain their compliance obligations. Learn what changed, what auditors look for, and how to build a register that holds up.
ISO 9001 Clause 6.2 Quality Objectives Explained
ISO 9001 Clause 6.2 requires measurable, monitored quality objectives linked to your quality policy. Learn what the clause demands, common audit failures, and how to build objectives that actually work.
Auditing a Manufacturing Quality Management System: From Goods Inwards to Dispatch
Learn how to audit a manufacturing QMS from goods inwards to dispatch. Practical guidance on what to check at each stage, common nonconformities, and how to follow the product audit trail.
What Is a Compliance Audit? A Plain English Guide for Quality and Safety Professionals
A compliance audit checks whether an organisation meets defined requirements from laws, ISO standards, contracts, or internal policies. Learn what they involve and how to prepare.
Following the Audit Trail from Order to Delivery
Learn how to trace a customer order from receipt through to delivery, connecting ISO 9001 clauses to real operational evidence and surfacing systemic gaps a checklist will miss.
Running Effective Food Safety Internal Audits: A Practical Guide
A practical guide to planning and conducting food safety internal audits, covering CCPs, PRPs, allergen controls, traceability, and how to write findings that drive real corrective action.
Monitoring and Measuring AIMS Performance Under ISO 42001 Clause 9.1
Clause 9.1 of ISO 42001 requires systematic monitoring of your AI management system. Learn what to measure, how to build a practical framework, and what auditors look for.
Management Review of an ISMS: What Clause 9.3 Expects
Clause 9.3 of ISO 27001 requires more than an annual meeting. Learn what inputs are mandatory, what auditors check, and how to make your ISMS management review genuinely effective.
Climate Change and Digital Tools: New Considerations for Audit Programmes
Climate change is now embedded in ISO 14001:2026, and digital tools are reshaping how audits run. Here is what both developments mean for your audit programme in practice.
How to Audit Clause 6.1.1: Planning for Risks and Opportunities
Learn how to audit Clause 6.1.1 effectively. This guide covers what the clause requires, how to gather evidence, common weaknesses, and practical audit questions for ISO 9001, 14001 and 45001.
How to Audit Environmental Aspects Under ISO 14001:2026
Learn how to audit environmental aspects and impacts under ISO 14001:2026. Practical guidance on testing Clause 6.1.2 coverage, significance evaluation, lifecycle thinking, and common nonconformities.
How to Audit Risk Based Thinking Under ISO 9001 Clause 6.1
Learn how to audit risk based thinking under ISO 9001 Clause 6.1 with practical questions, common nonconformities, and audit techniques that go beyond the risk register.
Auditing a Construction Company Quality Management System: What to Look For
Auditing a construction QMS requires site visits, ITP reviews, and subcontractor checks. Learn what experienced auditors look for across every key clause.
What Is a System Audit? A Plain English Guide for Auditors and Quality Managers
A system audit evaluates a management system as a whole against ISO standard requirements. Learn what it covers, how it differs from process audits, and what auditors look for.
Turtle Diagrams: How to Use Them in Process Audits
Learn how to use turtle diagrams in process audits. This practical guide covers all six elements, real audit examples, ISO clause connections, and common mistakes to avoid.
ISMS Internal Audits Under Clause 9.2: Requirements and Common Pitfalls
Clause 9.2 of ISO 27001 requires more than a document review. This guide covers the full requirements, how to design a risk-based audit programme, and the most common pitfalls that generate nonconformities.
Risks and Opportunities in ISO 45001: Clause 6.1.1 Explained
Clause 6.1.1 of ISO 45001 sets the foundation for OH&S planning. This guide explains what risks and opportunities mean at the system level, how auditors assess them, and how to build a process that actually works.
Environmental Aspects and Impacts: A Complete Guide to Clause 6.1.2
Clause 6.1.2 is the foundation of ISO 14001. This guide explains aspects, impacts, significance determination, lifecycle perspective, and what auditors check.
Risk Based Thinking in ISO 9001: Clause 6.1 Explained
Clause 6.1 of ISO 9001 requires risk based thinking across your QMS. This guide explains what the standard actually requires, what auditors look for, and how to build genuine risk thinking into your organisation.
What Is a Product Audit? A Plain English Guide for Quality Professionals
A product audit examines a finished or in-process product against defined requirements, independent of routine inspection. Learn what it covers, when to use it, and how to conduct one.
Process Mapping for Auditors: How to Read, Build and Use Process Maps on Every Audit
Learn how to read, build and use process maps as an active audit tool. Practical guidance for ISO auditors on tracing audit trails, identifying control gaps and auditing Clause 4.4.
Monitoring, Measurement, Analysis and Evaluation: A Clause 9.1 Walkthrough for ISO 27001
A practical walkthrough of ISO 27001 Clause 9.1, covering what to monitor, how to document results, what auditors check, and how to avoid the most common nonconformities.
Frequent Nonconformities in Clause 5 of ISO 45001 and How to Avoid Them
Clause 5 of ISO 45001 generates more nonconformities than most auditors expect. This article covers the most common findings against leadership, policy, roles, and worker participation, with practical advice on how to close the gaps.
Auditing General Planning Under Clause 6.1.1 of ISO 14001:2026
A practical guide to auditing general planning under Clause 6.1.1 of ISO 14001:2026, covering what to look for, common nonconformities, and how to write findings that stand up.
The Most Common ISO 9001 Clause 5 Nonconformities
Clause 5 nonconformities signal genuine leadership gaps, not paperwork errors. Learn the most common ISO 9001 Clause 5 findings and how to avoid them.
What Is a Process Audit? A Practical Guide for Auditors and Quality Managers
A process audit examines how work actually happens, not just whether documents exist. Learn what a process audit is, how it differs from a system audit, and how to conduct one effectively.
Audit Sample Sizes: How Many Records Are Enough
There is no fixed formula for audit sample sizes. Learn how experienced auditors decide how many records to pull, what factors drive the decision, and how to avoid the most common sampling mistakes.
Operational Planning and Control in ISO 42001: Clause 8.1 in Practice
Clause 8.1 of ISO 42001 requires organisations to plan, implement, and control AI management system processes. This guide covers what it demands, how to audit it, and where organisations typically fall short.
Implementing the Risk Treatment Plan: Clause 8.3 of ISO 27001 in Practice
Clause 8.3 of ISO 27001 requires you to implement your risk treatment plan, not just document it. Learn what auditors check, common nonconformities, and how to build solid implementation evidence.
Auditing Worker Consultation: Proving Clause 5.4 Is Genuine
Auditing Clause 5.4 of ISO 45001 means testing whether worker consultation is genuine, not just documented. Learn how to gather evidence, interview workers, and write defensible findings.
Clause 6.1.1 of ISO 14001:2026: General Planning Requirements Explained
Clause 6.1.1 of ISO 14001:2026 sets the foundation for all EMS planning. This plain English guide explains what it requires, what changed from 2015, and what auditors look for.
Auditing Roles, Responsibilities and Authorities in ISO 9001
Auditing Clause 5.3 of ISO 9001 reveals how seriously an organisation takes quality. Learn what to look for, what evidence to gather, and the most common nonconformities auditors find.
ISO 9001 for Cleaning Services: Winning Commercial Contracts with Certification
ISO 9001 certification helps cleaning companies win commercial contracts in healthcare, government, and corporate sectors by demonstrating consistent, auditable service quality systems.
What Is a Gap Analysis? A Plain English Guide for Quality and Safety Managers
A gap analysis compares your current practices against ISO requirements to identify what is in place, what is partial, and what is missing. Learn how it works and how to use the results.
Audit Sampling Strategies: Choosing What to Look At
Audit sampling strategies determine whether your findings are credible. Learn how to choose what to examine, which approaches work best, and how to avoid the mistakes that undermine audit conclusions.
Why ISO 27001 Clause 8.2 Makes You Repeat the Risk Assessment
ISO 27001 Clause 8.2 requires you to repeat the risk assessment at planned intervals and after significant changes. Here is why that repetition matters and what auditors check.
Consultation and Participation of Workers: Clause 5.4 Demystified
Clause 5.4 of ISO 45001 requires genuine worker consultation and participation, not just safety meetings. This guide breaks down what the clause demands, where organisations fail, and what auditors check.
Frequent Nonconformities in Clause 5 of ISO 14001:2026 and How to Avoid Them
Clause 5 of ISO 14001:2026 produces more nonconformities than most clauses. This article explains the most common findings against leadership, policy, and roles, and how to close them before your next audit.
ISO 9001 Clause 5.3: Roles, Responsibilities and Authorities Explained
ISO 9001 Clause 5.3 requires top management to assign, communicate and ensure understanding of QMS roles. Learn what auditors check and how to meet the requirements in practice.
ISO 9001 for Education and Training Providers: From RTOs to Universities
ISO 9001 applies to education and training providers just as it does to any other sector. This guide covers how to implement and audit the standard across RTOs, universities, and training organisations.
What Is a Follow Up Audit and Why It Matters in ISO Auditing
A follow up audit verifies that corrective actions from a previous audit have been implemented and are effective. Learn when to conduct one and how to do it properly.
Observation Skills for Auditors on the Floor: What to Look For and How to Read a Workplace
Observation is one of the most underused audit skills. Learn what to look for on the floor, how to read a workplace, and how to turn what you see into solid audit evidence.
Operational Planning and Control: Making Sense of Clause 8.1 in ISO 27001
Clause 8.1 of ISO 27001 is where plans become practice. Learn what operational planning and control requires, how auditors test it, and where organisations most often fall short.
Thinking in Risks and Opportunities: The Seventh Principle of Auditing
The seventh auditing principle, the risk-based approach, separates competent auditors from checklist followers. Learn how to apply it throughout planning, sampling, and on-site audit conduct.
Audit Evidence for Clause 5.3: Who Owns What in the OH&S System
Clause 5.3 of ISO 45001 is about more than org charts. Learn what audit evidence to gather, which interview questions reveal real accountability, and how to write defensible findings.
How to Audit Roles and Responsibilities in an EMS
Learn how to audit EMS roles and responsibilities under ISO 14001 Clause 5.3. Practical guidance on evidence gathering, common nonconformities, and writing findings.
How to Audit the Quality Policy Against ISO 9001 Clause 5.2
Learn how to audit the quality policy against ISO 9001 Clause 5.2. Covers what to review, interview questions, common nonconformities, and how to grade and write up your findings.
ISO 9001 for Professional Services Firms: A Practical Guide to Quality Certification
ISO 9001 for professional services firms explained. How law, consulting, and accounting firms can implement a QMS that satisfies auditors and delivers real business value.
Triangulating Audit Evidence: Documents, People and Observation
Learn how to triangulate audit evidence using documents, interviews and observation. A practical guide for internal auditors and lead auditors conducting ISO audits.
Documented Information in an ISMS: What Clause 7.5 Requires
Clause 7.5 of ISO 27001 sets out what documented information your ISMS must contain, how to create and update it, and how to control it. Here is what auditors actually check.
Why Audit Conclusions Must Rest on Evidence: A Core Principle Explained
Every audit conclusion must rest on verifiable evidence, not impressions or inference. This article explains why evidence based auditing matters and how to build that discipline into your practice.
Roles, Responsibilities and Authorities: Clause 5.3 of ISO 45001 Explained
Clause 5.3 of ISO 45001 requires top management to assign and communicate OH&S roles and authorities. This guide explains what auditors check, common nonconformities, and how to build a system that works.
Roles, Responsibilities and Authorities: Clause 5.3 of ISO 14001:2026 Explained
Clause 5.3 of ISO 14001:2026 requires top management to assign and communicate responsibilities for EMS conformance and performance reporting. Here is what auditors check and how to get it right.
How to Write a Quality Policy That Meets ISO 9001 Clause 5.2
Learn exactly what ISO 9001 Clause 5.2 requires from your quality policy, what auditors look for, and how to write one that holds up under certification scrutiny.
ISO 9001 for Software Companies: Quality Management in Agile Environments
ISO 9001 works in Agile software environments. Learn how sprint cycles, CI/CD pipelines, and DevOps practices map to the standard's requirements and what auditors look for.
What Is an Integrated Audit? A Plain English Guide for Auditors
An integrated audit covers two or more ISO management systems in one exercise. Learn how it differs from a combined audit, when to use it, and how to plan one effectively.
Gathering Audit Evidence: What Counts and What Does Not
Learn what counts as valid audit evidence and what does not. Practical guidance on documents, interviews, observation, and common evidence gathering mistakes auditors make.
Planning Changes to Your AIMS: Clause 6.3 of ISO 42001 Explained
Clause 6.3 of ISO 42001 requires changes to your AI Management System to be planned carefully. This guide explains the four key considerations, common pitfalls, and what auditors look for.
Clause 7 of ISO 27001: Resources, Competence, Awareness and Communication
Clause 7 of ISO 27001 covers resources, competence, awareness and communication. Learn what auditors look for, common nonconformities, and how to get it right.
Auditor Independence: Staying Impartial and Objective in Practice
Auditor independence is what makes an audit worth conducting. Learn how to protect your objectivity in real audit situations, from colleague pressure to supplier relationships.
How to Audit an OH&S Policy Against Clause 5.2 of ISO 45001
Learn how to audit an OH&S policy against ISO 45001 Clause 5.2, from document review to floor-level evidence. Practical guidance for internal and lead auditors.
Auditing the Environmental Policy: Evidence to Gather Under Clause 5.2
Auditing Clause 5.2 goes beyond reading a document. Learn what evidence to gather, what questions to ask, and what gaps auditors commonly find in the environmental policy.
Auditing Customer Focus Under Clause 5.1.2: Questions for Top Management
A practical guide to auditing Clause 5.1.2 of ISO 9001, with interview questions for top management, evidence to gather, and common nonconformities to look for.
ISO 9001 for Laboratories: How It Differs from ISO 17025
ISO 9001 and ISO 17025 serve different purposes in laboratory settings. Learn how they differ, where they overlap, and which standard your laboratory actually needs.
What Is a Combined Audit? A Practical Guide for Auditors and Quality Managers
A combined audit covers two or more ISO management systems in a single audit event. Learn what it is, how it differs from an integrated audit, and how to plan one effectively.
Audit Note Taking: Capture Evidence Without Killing the Conversation
Audit note taking is a craft most auditors learn by trial and error. This guide covers what to record, how to stay present in the conversation, and how to build notes that support defensible findings.
Clause 6.3 Planning of Changes: The New ISO 27001 Requirement Explained
ISO 27001:2022 introduced Clause 6.3, requiring ISMS changes to be planned deliberately. This article explains what the clause requires, how it connects to risk assessment and operations, and what auditors look for.
What the OH&S Policy Must Contain: ISO 45001 Clause 5.2 Explained
ISO 45001 Clause 5.2 sets out exactly what an OH&S policy must contain. This guide covers every required commitment, common audit nonconformities, and how to write a policy that actually works.
The Environmental Policy Under ISO 14001:2026: What Clause 5.2 Requires
Clause 5.2 of ISO 14001:2026 sets out what your environmental policy must contain and how it must function. Learn what auditors check and how to get it right.
Customer Focus in ISO 9001: What Clause 5.1.2 Asks of Top Management
Clause 5.1.2 places customer focus squarely on top management. Learn what the three requirements mean in practice, what evidence auditors look for, and how to prepare your leaders for the conversation.
ISO 9001 for Civil Works Contractors: A Practical Guide to Quality Management on Site
ISO 9001 for civil works contractors explained practically, covering ITPs, hold points, subcontractor control, competence, and what auditors look for in a civil QMS.
Active Listening Skills for Auditors: How to Hear What Is Really Being Said
Active listening is one of auditing's most underrated skills. Learn how to hear what auditees are really saying, catch the signals others miss, and gather better evidence.
Setting Measurable Information Security Objectives Under Clause 6.2
Clause 6.2 of ISO 27001 requires measurable information security objectives linked to your risk assessment. Learn what auditors check and how to set objectives that hold up under scrutiny.
Auditing Leadership Commitment Under Clause 5.1 of ISO 45001
Learn how to audit leadership commitment under Clause 5.1 of ISO 45001, including what evidence to gather, interview questions for top management, and common nonconformities.
How to Audit Top Management Commitment Under ISO 14001:2026
Learn how to audit top management commitment under ISO 14001:2026 Clause 5.1. Practical interview questions, evidence to gather, and common nonconformities explained.
How to Audit Leadership and Commitment in ISO 9001
Auditing Clause 5.1 of ISO 9001 means assessing real leadership behaviour, not just documents. Learn how to interview top management, gather evidence, and write defensible findings.
ISO 9001 for Mining Services Contractors: A Practical Guide to Certification
A practical guide to ISO 9001 certification for mining services contractors in Australia, covering QMS requirements, common challenges, integration with safety standards, and audit preparation.
What Is a Remote Audit? How They Work, When to Use Them, and What to Expect
A remote audit is conducted without the auditor being on-site, using video conferencing and digital document sharing. Learn how they work, when to use them, and what auditors need to know.
Using Silence as an Audit Technique: How Pausing Strategically Gets You Better Evidence
Silence is one of the most underused audit techniques. Learn how a deliberate pause after an auditee responds gets you richer evidence, more honest answers, and better audit outcomes.
Risk Treatment and the Statement of Applicability: Clause 6.1.3 Demystified
Clause 6.1.3 of ISO 27001 requires risk treatment decisions, Annex A comparison, and a Statement of Applicability. This guide explains exactly what is required and how auditors assess it.
Fair Presentation: Reporting Audit Findings Truthfully and Accurately
Fair presentation requires auditors to report findings truthfully, accurately, and completely. Learn where it breaks down, what a fairly presented report looks like, and how to protect your integrity under pressure.
Top Management Leadership in ISO 45001: Clause 5.1 Explained
ISO 45001 Clause 5.1 requires top management to personally lead the OH&S system. This guide explains every requirement and what auditors actually look for when assessing genuine leadership commitment.
Leadership and Commitment in ISO 14001:2026: A Plain English Guide to Clause 5.1
Clause 5.1 of ISO 14001:2026 requires top management to lead the EMS, not just permit it. This plain English guide explains every requirement and what auditors look for as evidence.
ISO 9001 Clause 5.1 Leadership and Commitment Explained
ISO 9001 Clause 5.1 explained: what top management must demonstrate, what auditors look for, common nonconformities, and how to prepare for a leadership audit interview.
ISO 9001 for Food Manufacturers: Where Quality Management Meets Food Safety
ISO 9001 for food manufacturers explained. How quality management connects to food safety, what auditors look for, and how to build a QMS that works on the production floor.
First Party Audits Explained: What They Are, Why They Matter, and How to Run Them Well
First party audits are internal audits an organisation conducts on itself. Learn what they require, how to plan and conduct them effectively, and the common mistakes that undermine their value.
When to Use Closed Questions in an Audit: A Practical Guide for Auditors
Closed questions are a precise audit tool, not a shortcut. Learn when to use them, how to embed them in your interview flow, and what mistakes to avoid.
Information Security Risk Assessment: Clause 6.1.2 Step by Step
A step by step walkthrough of ISO 27001 Clause 6.1.2, covering risk criteria, asset identification, threat and vulnerability analysis, scoring, evaluation, and what auditors check.
Common Nonconformities Against Clause 4 of ISO 45001
Clause 4 of ISO 45001 consistently produces nonconformities in both internal and certification audits. This article covers the most common findings under each subclause with practical advice on how to avoid them.
Common Nonconformities Against Clause 4 of ISO 14001:2026
Clause 4 of ISO 14001:2026 generates more nonconformities than most organisations expect. This guide covers the most common findings under each subclause and how to fix them.
Common ISO 9001 Clause 4 Nonconformities and How to Avoid Them
Clause 4 nonconformities are among the most common in ISO 9001 audits. Learn what auditors find in context, scope, interested parties, and process requirements, and how to fix them.
ISO 9001 for NDIS Providers: How It Complements the NDIS Practice Standards
ISO 9001 complements the NDIS Practice Standards by building the quality management infrastructure that makes sustained compliance achievable. Learn how the two frameworks align and where they differ.
The Funnel Questioning Technique Explained for ISO Auditors
The funnel questioning technique moves audit interviews from broad open questions to specific closed ones. Learn how to apply it across ISO 9001, 14001 and 45001 audits to surface better evidence.
Risks and Opportunities Under Clause 6.1.1: Where ISMS Planning Begins
Clause 6.1.1 is where ISMS planning begins. Learn what risks and opportunities mean in ISO 27001, how auditors assess this clause, and how to get it right in practice.
How Auditors Assess Clause 4.4: System Processes and Their Interactions
Learn how to audit Clause 4.4 of ISO 45001 in practice. Covers process identification, interactions, performance criteria, common nonconformities, and audit techniques that reveal real system gaps.
What Auditors Look For When Reviewing the EMS Under Clause 4.4
Clause 4.4 is the architectural clause of ISO 14001. Learn what auditors actually look for when reviewing the EMS, from process interactions to implementation evidence and continual improvement.
Auditing the Process Approach: ISO 9001 Clause 4.4 in Practice
Learn how to audit ISO 9001 Clause 4.4 effectively, from verifying process inputs and outputs to identifying common gaps in the process approach.
ISO 9001 for Aged Care Providers: Aligning with the Aged Care Quality Standards
ISO 9001 gives aged care providers the management framework to meet the Aged Care Quality Standards consistently. Learn how the two frameworks align and what certification involves in practice.
Probing Questions: Digging Deeper Without Interrogating
Probing questions are how auditors move from surface answers to real evidence. Learn the four types of probes, how to use them naturally, and how to dig deeper without making auditees defensive.
Roles, Responsibilities and Authorities: Getting Clause 5.3 Right in ISO 27001
Clause 5.3 of ISO 27001 requires top management to assign and communicate ISMS roles. Learn what auditors look for, common nonconformities, and how to get it right in practice.
ISO 45001 Clause 4.4: Building the OH&S Management System and Its Processes
ISO 45001 Clause 4.4 requires you to establish, implement, maintain and improve your OH&S management system. This article explains what that means in practice and what auditors look for.
Clause 4.4 of ISO 14001:2026: Building the Environmental Management System
Clause 4.4 of ISO 14001:2026 requires you to establish, implement, maintain and continually improve your EMS. This guide explains what that means in practice and what auditors look for.
What ISO 9001 Clause 4.4 Requires: The QMS and Its Processes
Clause 4.4 is the foundation of ISO 9001. This practical guide explains every requirement, what auditors look for, common nonconformities, and how to implement the process approach properly.
ISO 9001 for Healthcare Providers: Quality Management Beyond Clinical Governance
ISO 9001 for healthcare providers goes beyond clinical governance. Learn how it applies to support processes, supplier management, internal audit, and quality objectives in clinical settings.
Open Questions in Auditing: Getting People Talking
Open questions are the auditor's most powerful interview tool. Learn how to construct and use them to draw out genuine evidence, uncover gaps, and conduct more effective ISO audits.
Writing an Information Security Policy That Meets Clause 5.2 of ISO 27001
Clause 5.2 of ISO 27001 requires more than a signed template. Learn what an information security policy must contain, how auditors test it, and what causes nonconformities.
Audit Tips for ISO 45001 Clause 4.3: Verifying Scope
Clause 4.3 scope verification is more than a document check. Learn how to audit ISO 45001 scope boundaries with practical techniques, interview questions, and common nonconformities.
How to Audit EMS Scope and the Lifecycle Approach Under ISO 14001:2026
Learn how to audit EMS scope and the lifecycle approach under ISO 14001:2026, including what evidence to gather, common nonconformities, and practical audit questions.
How to Audit QMS Scope and Exclusions in ISO 9001
Learn how to audit ISO 9001 Clause 4.3 QMS scope and exclusions, including how to assess boundaries, evaluate claimed exclusions, and write defensible findings.
ISO 9001 for Warehousing and Distribution Businesses
ISO 9001 for warehousing and distribution: how to apply the standard to receiving, storage, picking, dispatch, and supplier management for real operational results.
Audit Interviewing Techniques Every Auditor Should Master
Master the audit interviewing techniques that get honest answers: open and probing questions, active listening, silence, and how to handle nervous or defensive auditees.
Leadership and Commitment in ISO 27001: Inside Clause 5.1
Clause 5.1 of ISO 27001 requires top management to demonstrate real commitment to the ISMS. Learn what auditors look for and how to evidence genuine leadership.
Managing an Audit Programme Under Clause 5 of ISO 19011:2026
Clause 5 of ISO 19011:2026 governs how audit programmes are planned, managed, and improved. This guide covers objectives, risk based scheduling, resources, monitoring, and review in practical terms.
Defining the Scope of Your OH&S Management System: Clause 4.3 of ISO 45001 Explained
Clause 4.3 of ISO 45001 defines the boundaries of your OH&S management system. Learn how to determine scope, avoid common mistakes, and what auditors check.
Defining Your EMS Scope: Clause 4.3 of ISO 14001:2026 Explained
Clause 4.3 of ISO 14001:2026 defines your EMS boundary. Learn what the clause requires, how to write a defensible scope statement, and what auditors check.
ISO 9001 Clause 4.3: Determining the Scope of Your QMS
Clause 4.3 determines what your QMS actually covers. Get the scope wrong and your entire system is built on a shaky foundation. Here is how to get it right.
ISO 9001 for Transport and Logistics Operators
ISO 9001 for transport and logistics operators: how to implement a QMS that works on the road, manage subcontractors, meet chain of responsibility obligations, and prepare for certification.
How to Run an Opening Meeting That Sets the Tone
Learn how to run an audit opening meeting that builds credibility, sets clear expectations, and prepares both auditor and auditee for a productive day. Practical guidance for all audit types.
Leadership and Commitment in ISO 42001: What Clause 5.1 Requires
ISO 42001 Clause 5.1 sets binding leadership and commitment requirements for AI management systems. Learn what top management must do and what auditors look for.
Auditing Clause 4.2: Are Workers Treated as the Primary Interested Party?
Learn how to audit Clause 4.2 with workers as the focus. Covers what to look for, common findings, and how to test whether worker engagement is genuine or performative.
Auditing Interested Party Needs and Expectations in ISO 14001:2026
Learn how to audit Clause 4.2 of ISO 14001:2026 with practical guidance on evidence gathering, common nonconformities, and tracing interested party requirements through the EMS.
Auditing Interested Parties: A Practical Approach to Clause 4.2
A practical guide to auditing clause 4.2 across ISO 9001, 14001, and 45001. Learn how to test interested party registers, identify common nonconformities, and write findings that stand up.
Risk Based Audit Scheduling: Deciding What to Audit First
Learn how to prioritise your audit schedule using risk based thinking. This practical guide covers scoring processes, allocating audit time, and building a defensible programme that satisfies ISO 9001, 14001, and 45001.
Defining Your ISMS Scope: A Practical Guide to Clause 4.3 of ISO 27001
Clause 4.3 of ISO 27001 requires you to define the boundaries of your ISMS. This practical guide explains how to get the scope right, what auditors look for, and common mistakes to avoid.
Workers and Interested Parties: ISO 45001 Clause 4.2 Explained
ISO 45001 Clause 4.2 requires organisations to identify interested parties and their needs. Workers come first. Here is what the clause requires and how auditors assess it.
Interested Parties in ISO 14001:2026: What Clause 4.2 Asks of You
ISO 14001:2026 strengthens Clause 4.2 with clearer requirements for identifying interested parties, documenting their needs, and connecting those needs to compliance obligations and EMS planning.
A Plain English Guide to ISO 9001 Clause 4.2 Interested Parties
Clause 4.2 of ISO 9001 requires you to identify relevant interested parties and their requirements. This plain English guide explains who qualifies, what to document, and what auditors check.
ISO 9001 for Manufacturers: Building a Quality System That Works on the Factory Floor
A practical guide to ISO 9001 for manufacturers. Covers the clauses that matter most on the factory floor, common nonconformities, supplier control, calibration, and how to build a quality system that actually works in production.
Building an Audit Programme That Actually Works
Learn how to build an internal audit programme that is risk based, properly resourced, and connected to what matters. Practical guidance for quality and HSE managers.
ISO 17100 Clause 3 Resources: Competence Records and Infrastructure Requirements
ISO 17100 Clause 3 covers human and technical resources. This guide explains competence records, infrastructure requirements, common nonconformities, and what auditors look for in practice.
Interested Parties in ISO 27001: What Clause 4.2 Really Asks For
Clause 4.2 of ISO 27001 is more than a stakeholder list. Learn what interested parties, their requirements, and ISMS compliance obligations really mean in practice.
How to Audit Organisational Context Under ISO 45001 Clause 4.1
Learn how to audit ISO 45001 Clause 4.1 with practical techniques, interview questions, and common nonconformities that experienced auditors look for.
How to Audit Organisational Context Under ISO 14001:2026
Learn how to audit organisational context under ISO 14001:2026 clause 4.1, including climate change considerations, internal and external issues, and how to trace context through to EMS planning.
How to Audit Organisational Context Under ISO 9001 Clause 4.1
Learn how to audit ISO 9001 Clause 4.1 effectively. Practical guidance on evidence to gather, questions to ask, common nonconformities, and what good looks like.
ISO 9001 for Construction Companies: A Practical Guide for Australian Builders
A practical guide to ISO 9001 for Australian construction companies, covering ITPs, subcontractor control, nonconformances, internal audits, and what certification auditors actually look for on site.
What Is an Internal Audit? A Plain English Guide for Quality and Safety Professionals
An internal audit is a systematic check of your own management system. Learn what it covers, how it works, and why it matters for ISO certification.
How to Plan an ISO Audit Step by Step
Learn how to plan an ISO audit step by step, from defining scope and reviewing documents to writing the audit plan, preparing checklists, and managing logistics.
Clause 4.1 of ISO 27001: Understanding Your Organisation and Its Context
Clause 4.1 of ISO 27001 requires organisations to identify external and internal issues that affect their ISMS. This guide explains what good context analysis looks like, how auditors assess it, and the common mistakes to avoid.
Clause 4.1 of ISO 45001: Understanding Organisational Context
Clause 4.1 of ISO 45001 requires organisations to determine the external and internal issues affecting their OH&S system. This guide explains what the clause requires, how to approach it practically, and what auditors look for.
Understanding Clause 4.1 of ISO 14001:2026: Context of the Organisation
Clause 4.1 of ISO 14001:2026 requires organisations to understand their external and internal context before designing an effective EMS. This guide explains what the clause requires, what changed in 2026, and what auditors look for.
ISO 9001 Clause 4.1 Understanding the Organisation and Its Context Explained
ISO 9001 Clause 4.1 requires organisations to identify external and internal issues affecting their QMS. Learn what it means, how to do it properly, and what auditors look for.
Why Implement a Quality Management System: The Real Business Case
A practical look at why implementing a quality management system delivers real business value, from winning tenders to reducing errors and building customer confidence.
Auditing an IMS: How to Audit ISO 9001, ISO 14001 and ISO 45001 Together
Learn how to plan and conduct an IMS audit covering ISO 9001, ISO 14001 and ISO 45001 together. Practical guidance on structure, common clauses, discipline specific requirements and typical findings.
Integrated Management Systems in Australia: A Practical Guide for Quality, Safety and Environmental Managers
A practical guide to integrated management systems in Australia, covering ISO 9001, 14001 and 45001, how to structure an IMS, industry applications, certification, and auditor training.
How to Integrate Management Systems: A Practical Guide to Combining ISO 9001, ISO 14001 and ISO 45001
Learn how to integrate ISO 9001, ISO 14001 and ISO 45001 into one practical management system. Covers the integration model, common pitfalls, audit programmes and certification.
What Is an Integrated Management System? A Plain English Guide
An integrated management system combines ISO 9001, 14001, and 45001 into one framework. Learn what an IMS is, how it works, and what changes when you audit one.
Audit Report Writing That People Read: How to Communicate Findings That Drive Action
Most audit reports get ignored. Learn how to write findings that are specific, evidence-based, and clear enough that busy managers actually read and act on them.
Handling Difficult Auditees: A Practical Guide for ISO Auditors
Handling difficult auditees is one of the most underrated skills in ISO auditing. This guide covers why people resist, the common behaviour types, and the practical techniques that keep your audit on track.
Classifying Findings: NC, OFI and Observation Explained
Learn how to classify audit findings as nonconformity, OFI or observation with confidence. Practical examples, common mistakes, and guidance for ISO 9001, 14001 and 45001 auditors.
Process Based vs Clause Based Auditing: Which Approach Gets Better Results?
Process based vs clause based auditing: understand the key differences, when to use each approach, and why following the process finds more meaningful audit findings.
What Is an Audit Trail: A Plain English Guide for Auditors and Quality Managers
An audit trail is the connected sequence of evidence that lets an auditor trace any process from start to finish. Learn what it is, why it matters, and how to build one that holds up.
Interview Techniques for Auditors: How to Get Honest, Useful Answers Every Time
Learn practical interview techniques for auditors: how to open conversations, ask open and probing questions, handle defensive auditees, and gather evidence that stands up to scrutiny.
Audit Evidence: Types and How to Record It
Learn the three main types of audit evidence, how to record them properly, and avoid the common mistakes that weaken findings. Practical guidance for internal and lead auditors.
On Site Audit Reports: What Goes In and Why It Matters
Learn what belongs in an on site audit report, from scope and findings to conclusions and corrective action requirements, with practical examples from real audit practice.
Audit Process Steps: From Planning to Follow Up
A practical walkthrough of every audit process step, from initiation and planning through evidence gathering, findings, reporting, and corrective action follow up.
Auditor, Auditee and Auditability: Key Terms Every Auditor Must Know
Auditor, auditee and auditability are three foundational audit terms. This guide explains each role clearly and shows how they interact in real ISO audit situations.
The Main Goal of an Audit: What Auditors Are Actually Trying to Achieve
The main goal of an audit is not finding problems. It is producing objective, evidence-based information that organisations can act on. This article explains what audits are really for.
Internal Audit Classes Online vs In Person: Which Format Actually Works?
Online or in person for internal audit training? This honest comparison covers flexibility, practical skill development, cost, and who gets the most from each format.
First Internal Audit Mistakes to Avoid: A Practical Guide for New Auditors
Avoid the most common first internal audit mistakes. Practical advice on checklists, evidence gathering, nonconformity writing, and keeping control of the audit room.
Building an Internal Audit Programme: A Practical Guide for Quality and HSE Managers
Learn how to build an internal audit programme that meets ISO 9001, 14001, and 45001 requirements. Practical guidance on scheduling, risk, auditor competence, and programme review.
Root Cause Analysis for Corrective Actions: A Practical Guide for ISO Auditors
Root cause analysis for corrective actions explained for ISO auditors. Learn the 5 Whys, fishbone diagrams, and how to evaluate whether corrective actions actually prevent recurrence.
Running Remote Internal Audits: A Practical Guide for ISO Auditors
A practical guide to running remote internal audits under ISO 9001, 14001, and 45001. Covers planning, technology, interviewing, evidence sampling, and reporting.
Audit Sampling Techniques Explained: How Auditors Decide What to Look At
Learn how auditors choose what to look at using judgement, random, systematic, and stratified sampling. Practical guidance on sample sizes, documentation, and avoiding common mistakes.
How to Write Nonconformities That Hold Up: A Practical Guide for ISO Auditors
Learn how to write ISO nonconformities that hold up to challenge. Covers the four essential elements, evidence standards, common writing mistakes, and a practical template with worked examples.
Opening and Closing Meeting Scripts for Auditors: What to Say and When
Practical opening and closing meeting scripts for ISO auditors. Covers internal and external audits, handling disputes, presenting findings, and what to say at every stage.
Auditor Independence: Can You Audit Your Own Work?
Can you audit your own work under ISO 9001, 14001 or 45001? This article explains what auditor independence actually requires, where the line sits, and how organisations of all sizes can meet it.
Internal Auditor Competence: What ISO Expects and How to Demonstrate It
ISO expects internal auditors to demonstrate genuine competence, not just training. Learn what knowledge, skills, and behaviours are required, and how to evaluate and document auditor competence.
How Often Should Internal Audits Happen? A Practical Guide for ISO-Certified Organisations
ISO standards don't set a fixed audit frequency. Learn how to determine the right internal audit schedule for your organisation using risk-based thinking and practical planning.
How to Write an Audit Plan for an Internal Audit (With Template)
Learn how to write an audit plan for an internal audit, including all core elements, a practical template structure, and common mistakes to avoid for ISO 9001, 14001, and 45001.
How to Build an Internal Audit Checklist That Actually Works
Learn how to build an internal audit checklist that drives real findings, not just box-ticking. Practical steps for ISO 9001, 14001, and 45001 auditors.
Internal Audit Report Format With Example: A Practical Guide for ISO Auditors
A practical guide to the internal audit report format used across ISO 9001, 14001, and 45001, with a worked example, section by section breakdown, and common mistakes to avoid.
How to Do an Internal Audit From Start to Finish
A practical step-by-step guide to conducting an internal audit from planning through to corrective action follow-up, written for quality, safety, and environmental professionals.
Internal Audit Training: How to Choose a Course That Actually Prepares You
Not all internal audit courses deliver real skills. This guide shows you how to evaluate training providers, choose the right level, and find a course that prepares you for actual audits.
Common ISO 45001 Nonconformities and How to Avoid Them
The most common ISO 45001 nonconformities found in Australian audits, clause by clause. Practical guidance for quality and HSE managers preparing for certification or running internal audits.
ISO 45001 Internal Audit Checklist: A Clause by Clause Guide for OHS Auditors
A practical clause by clause ISO 45001 internal audit checklist for OHS auditors. Covers all key clauses from hazard identification to corrective action with real audit questions.
OHS Risk Matrix: How to Build and Use One
Learn how to build and use an OHS risk matrix that works in practice, with step by step guidance on likelihood and consequence scales, residual risk, and what ISO 45001 auditors check.
ISO 45001 Incident Investigation Requirements: What the Standard Actually Demands
ISO 45001 Clause 10.2 requires thorough incident investigation, root cause analysis, worker involvement, and effective corrective action. Here is what auditors check and where organisations fall short.
Hazard Identification Methods That Auditors Trust
Hazard identification is one of the most scrutinised areas in an ISO 45001 audit. This guide covers the methods auditors trust, what good looks like, and the gaps that generate nonconformities.
Worker Participation and Consultation in ISO 45001: What the Standard Actually Requires
ISO 45001 Clause 5.4 requires genuine worker consultation and participation, not just a safety committee. Learn what the standard demands, how auditors assess it, and what real participation looks like in practice.
Hierarchy of Controls With Workplace Examples
Understand the hierarchy of controls with real workplace examples. Learn how ISO 45001 requires it, where organisations fail, and what good practice looks like across industries.
Common ISO 14001 Nonconformities and How to Avoid Them
The most common ISO 14001 nonconformities explained with real audit examples, practical prevention advice, and what auditors look for across aspects, compliance, objectives, and internal audit.
Compliance Obligations in ISO 14001: What They Are and How to Manage Them
Compliance obligations in ISO 14001 cover legal and voluntary requirements. Learn how to build a current legal register, evaluate compliance, and avoid common audit nonconformities.
Environmental Aspects and Impacts Assessment: A Practical Guide for ISO 14001
Learn how to build an environmental aspects and impacts register that satisfies ISO 14001, survives a certification audit, and drives real environmental performance in your organisation.
How to Run an Environmental Management System Audit
A practical step-by-step guide to planning and running an ISO 14001 environmental management system audit, from document review and opening meeting to findings and closing.
ISO 14001 Shall Statements Checklist: Every Requirement in Plain English
A clause by clause breakdown of every mandatory shall statement in ISO 14001:2015. Plain English explanations, audit questions, and common gaps to help internal auditors and environmental managers prepare.
ISO 14001 Requirements Clause by Clause: A Practical Guide for Environmental Managers and Auditors
A plain English clause by clause guide to ISO 14001 requirements, covering every section from Clause 4 context through to Clause 10 improvement, with practical commentary for environmental managers and auditors.
ISO 14001 Compliance Requirements Summary: What Your Organisation Actually Needs to Do
A plain English summary of ISO 14001 compliance requirements, covering every clause from context and planning through to improvement, with practical guidance on what auditors actually check.
ISO 14001 Internal Audit Requirements and Checklist
A practical guide to ISO 14001 internal audit requirements under Clause 9.2, including a clause-by-clause checklist, common nonconformities, and advice on planning and reporting.
The Process Approach Explained With Examples
The process approach explained with real examples from ISO 9001, 14001, and 45001. Learn what it means in practice, how auditors assess it, and how to get it right.
Risk Based Thinking in ISO Standards: A Practical Guide With Real Examples
Risk based thinking is core to ISO 9001, 14001 and 45001. This guide explains what it actually means in practice, with real examples from quality, environmental and safety management systems.
ISO 9001 for Small Business: A Practical Guide to Getting Certified Without the Overwhelm
ISO 9001 for small business does not have to be overwhelming. This practical guide covers what the standard requires, what to keep simple, common mistakes to avoid, and how to prepare for certification.
Internal Quality Audit Checklist for ISO 9001: A Clause by Clause Guide
A practical clause by clause internal quality audit checklist for ISO 9001, covering what to ask, what evidence to look for, and how to use it effectively.
Common ISO 9001 Nonconformities and How to Avoid Them
Discover the most common ISO 9001 nonconformities auditors raise across Clauses 4 to 10, why they keep appearing, and practical steps to prevent them in your QMS.
Example Quality Objectives That Pass an Audit
Real examples of ISO 9001 quality objectives that pass an audit, with practical guidance on what makes them measurable, owned, and audit ready.
Clause 9.3.3 Management Review Outputs: What Auditors Expect
Clause 9.3.3 requires specific outputs from management review. Learn what auditors look for, common nonconformities, and how to document decisions that satisfy certification requirements.
ISO 9001 Document Control Requirements Done Right
ISO 9001 document control requirements explained in plain terms. Learn what Clause 7.5 actually requires, common audit failures, and how to build a system that works in practice.
ISO 9001 Clause 8.7 Control of Nonconforming Outputs Explained
Clause 8.7 of ISO 9001 requires organisations to identify, control, and disposition nonconforming outputs. This article explains the four dispositions, required records, common audit findings, and how auditors assess conformity in practice.
Clause 7.5.3 Control of Documented Information: What It Really Requires
Clause 7.5.3 controls how documented information is distributed, stored, versioned, and disposed of. Learn what auditors actually check and where organisations most commonly fall short.
Clause 7.5.2 Creating and Updating Documented Information: What It Actually Requires
Clause 7.5.2 requires appropriate identification, format, and approval for all documented information. Here is what auditors check and where organisations consistently fall short.
ISO 9001 Clauses Explained in Plain English
A plain English breakdown of every ISO 9001 clause from 4 to 10, explaining what each requirement means, why it matters, and what auditors look for in practice.
ISO 9001 Internal Audit Plan With a Worked Example
Learn how to write an ISO 9001 internal audit plan that actually directs your audit. Includes a full worked example for a manufacturing business with objectives, scope, schedule, and auditor notes.
ISO 9001 Internal Audit: A Step by Step Guide
A practical step by step guide to planning, conducting, and closing out an ISO 9001 internal audit, from defining scope and gathering evidence to writing findings and following up corrective actions.
What Happens When an Internal Audit Finds a Major Nonconformity?
A major NC from an internal audit is not a crisis. Here is the correct response and why finding it internally is far better than a certification body finding it first.
How to Audit a Process You Have Never Seen Before
Unfamiliar processes are not a barrier to effective auditing. Here is how to approach one you have never seen and still produce a credible audit.
How Often Should You Run Internal Audits Under ISO 9001?
ISO 9001 does not specify a minimum frequency. What it does require is more useful. Here is how to determine the right frequency for your organisation.
How to Prepare Your Team for an Internal Audit
Audit preparation is not about coaching staff on what to say. It is about ensuring your system is genuinely working so that staff can speak to it naturally.
Internal Audit vs Certification Audit: Key Differences Explained
They both assess your management system but they serve completely different purposes. Understanding the difference shapes how you prepare for each.
What Does an Internal Audit Actually Cover?
Most people have a rough idea of what an internal audit involves. Here is what it actually covers and what auditors are looking for.
How to Plan an ISO 9001 Internal Audit Schedule for the Year
An annual internal audit schedule is more than a calendar exercise. Here is how to build one that satisfies ISO 9001 and actually adds value.
ISO 9001 Clause 9.2: What Internal Audit Actually Requires
Clause 9.2 of ISO 9001 sets out the internal audit requirement. This guide covers exactly what the clause requires, what it means in practice, and where organisations most often fall short.
Writing Nonconformance Reports That Actually Drive Change
A nonconformance report is only worth writing if it is specific enough to act on. This guide shows what good looks like and how to move beyond vague findings that get closed without real improvement.
How to Plan an Internal Audit Programme
A well designed internal audit programme is what makes clause 9.2 work in practice. This guide covers how to plan one that is risk based, practical, and actually improves the system.
Ready to Get ISO Certified?
Join practitioners training with ISO auditors who've conducted 500+ external certification audits.
Quality Management Systems (QMS)
Occupational Health and Safety Management Systems (OHSMS)
Environmental Management Systems (EMS)
