Understanding audits
Internal audit vs ISO certification audit: what is the difference?
An internal audit is organised by the business to assess its own management system. A certification audit is performed by an external body as part of certification. An internal report is not a certificate, and external assessment does not take over the business’s responsibility for its system.
Two roles within the same system
Internal audits inform management about how the system works and where improvement is needed. The ISO 9001 Auditing Practices Group paper on internal audit explains this purpose.
Certification involves external assessment. ISO explains the roles of audits and certification in management systems. Plan and follow up the two activities separately.
Questions to clarify when planning
| Topic | Internal audit | Certification audit |
|---|---|---|
| Scope | Which processes and requirements will we assess? | Which scope and standards have been agreed? |
| People | Who audits, and who owns the processes? | Who hosts the team and provides evidence? |
| Follow-up | Who handles findings and checks actions? | How will we submit responses required by the report? |
An example evidence trail
Illustrative example for a service business: select a completed order and follow the customer requirement, its acceptance, the assigned owner, delivery evidence and any complaints. If a confirmation is missing, record exactly what you checked and where the gap appears.
For the next internal discussion, prepare three questions: who decides, where is the record kept, and how do we know the result was satisfactory? This is a working example, not a complete audit template or universal document list.
Connect findings with actions
Before meeting auditors, gather the internal programme, relevant reports, resulting actions and available evidence. A working table can connect each finding to an owner, deadline, record and outcome. Consider whether the people involved can explain what changed.
Separate completed work from actions still in progress. Our audit preparation guide covers logistics and starting information.
What to discuss with the certification body
Explain your scope, readiness and preferred schedule. Ask for the plan and stages without treating a booking as certification approval. See the full InterConformity certification process.
Frequently asked questions
Can an internal audit report replace a certificate?
No. It records an assessment organised by the business; certification involves the external body’s process.
Should we hide internal findings?
Prepare an accurate account of findings, actions and their current status. Do not present unfinished actions as complete.
Sources and updates
Prepared by InterConformity using the sources below. Examples and working lists are illustrative. Confirm the scope and applicable arrangements with the team for your organisation.
Your next step
How does this apply to your business?
Tell us about your activities, team and target standard. Let’s clarify the steps and proposal.