Identify and control risks
Review situations creating conflicts of interest, mitigation arrangements and their implementation in real assignments.
INTERNAL AUDIT
Internal audit ISO/IEC 17020 & ISO/IEC 17029.
An independent review of your system to identify gaps, test how it actually works and prepare for external assessments.
KEY POINTS
Audit the system as it actually operates.
Internal audit should not be limited to a document review. EXPO’STAT examines the effective implementation of arrangements: governance, impartiality, competence, methods, records, decisions and management-system control.
WHY CHOOSE EXPO’STAT?
Identify gaps, strengthen practices and improve.
PREPARATION
Preparation
Prepare for an accreditation assessment, surveillance or scope extension.
EFFECTIVENESS
Effectiveness
Check that procedures reflect actual practices and are properly controlled.
RISKS
Risks
Identify weak points before they become external findings.
IMPROVEMENT
Improvement
Give teams an independent and actionable view of their system.
SCOPE OF THE ASSIGNMENT
What we can examine.
ISO/IEC 17020Impartiality, independence, organisation, resources, competence, inspection processes and management system.
ISO/IEC 17029Principles, impartiality, competence, validation/verification process, review, decision and programme requirements.
Technical filesSampling of files to verify the practical application of procedures.
Support functionsDocument control, complaints and appeals, corrective actions, internal audits and management review.
KEY AUDIT RISKSIMPARTIALITY COMPETENCE TRACEABILITY
The sensitive areas of an inspection or verification management system.
Beyond reviewing documented requirements, the audit seeks real-world gaps between written arrangements and actual practices.
Link authorization to actual work
Check that competence assessment and monitoring match the activities assigned to staff.
Follow a technical file end to end
Sample assignments from acceptance through review and decision to identify breaks in the process.
PROCESS
A clear process from start to finish.
01
Document preparation
Definition of the audit programme, scope, criteria, roles to interview and files to sample.
02
Interviews and sampling
Interviews, review of records and sampling of practices to assess how the management system works in practice.
03
Findings and classification of deviations
Documented, classified findings identifying deviations, points of attention and the requirements to which they relate.
04
Report and closing meeting
Delivery of the audit report and closing meeting to present findings and discuss next steps.
USING THE AUDIT FINDINGS
An audit that supports meaningful internal follow-up.
The audit report should help the organization understand which practices were reviewed, which requirements apply and what the findings mean, without taking over management responsibilities.
Findings linked to specific requirementsAny nonconformities are explained in terms of the relevant standard and the facts observed.
Observations put in contextThe results distinguish isolated issues from wider weaknesses in the management system.
A closing discussion with relevant teamsThe meeting clarifies the findings, areas of concern and outstanding questions.
Corrective action owned by the organizationManagement remains responsible for identifying root causes, taking action and checking effectiveness.
FREQUENTLY ASKED QUESTIONS
What you need to know before getting started.
Can the audit cover only part of the standard?
Yes. The scope may be complete or targeted at selected processes, functions or requirements.
Can you audit several sites or activities?
Yes, with sampling and an audit programme adapted to the organisation’s actual operations.
Does an internal audit guarantee there will be no findings during an external assessment?
No. It identifies weaknesses and findings observed at a given point in time but does not replace the accreditation body’s assessment.
LET'S TALK
Build your next internal audit programme.
We can define the assignment scope, applicable criteria, timetable and required information with you.
Talk to EXPO’STATAUDIT EXAMPLE
Contact usActionable findings for system improvement
An internal audit may address impartiality, competence, documentation, traceability of decisions and independent review. Findings are reported with supporting evidence and possible follow-up actions, without replacing the audited organisation’s own responsibilities.