Internal Auditing
At twoSB we know that conducting ISO internal audits is probably not anyone’s favourite activity. Internal audits, if done poorly can range from an ineffective sink of time, to a daunting experience for team members who may feel internally policed.
A Gift for Business Improvement
We strongly believe that internal audits should be seen as a gift, and if done effectively can enhance how you operate. Businesses rarely get the opportunity to step back and look at how operations are being run – but this is exactly the point of internal audits. We work with our clients to create and deliver value adding ISO 9001, ISO 14001, ISO 27001 and ISO 45001 internal audit programmes, that give actionable insights into how operations are working.
Our Process
Uncover Process Strengths & Weaknesses
Perform comprehensive internal audits to gain deep insights into each process’s performance
Drive Continuous Improvement
Identify value-adding findings to foster continual improvement
Fresh Eyes on Your Systems
Offer an independent and fresh perspective to enhance your ISO and business management systems
External Audit Confidence
Prepare your business to feel confident in entering annual external audits
Our Methodology
Determining the Audit Programme
We will tailor our audit programme to your unique business needs. Factors such as your company’s size, complexity, number of sites, number of ISO standards and your desired depth of audit are all taken into consideration to determine the annual audit cycle. Some companies may want a more intense cluster of audits each year, whilst others may want audits evenly distributed. Some may want a deep dive into certain processes, whilst others want an overview of how their ISO management system is performing.
We will collaborate with you to prepare an audit schedule that identifies the key stakeholders involved in each audit and set dates and topics for the audit to be conducted.
The Audit Day
We are flexible in the way we structure the audit day, however a typical structured could include:

Preparation & Planning
30 minutes of audit preparation

Information Gathering
4 hours of auditing to sample processes and gather information

Finding Analysis
2.5 hours of write-up to ensure audit findings are documented, classified, and summarised

Debriefing & Discussion
15-minute debrief via call or email to discuss findings
Addressing internal audit findings
It is positive for internal audits to uncover areas for improvement, however it isn’t useful to have a long list of actions and suggestions that you will never have the resource to action. We take a collaborative approach as we work through the audits, discussing with you which findings will add most value and need formally documenting, and which are quick wins which can be addressed through a less formal route. We find this approach prevents improvement fatigue and allows you to focus on the areas that matter most.
For those findings which are to be formally documented in your improvement register, we can help you define the root cause and corrective actions; and even help you address the finding.
It is important to acknowledge that although findings are an important part of internal audit, we don’t believe they aren’t the only outcome. Audits can be used as a positive tool to:
- Build strong relationships and support through constructive interactions with auditees
- Instil a sense of anticipation through collaborative efforts to drive the management system forward
- Present the system to senior management and obtain buy in for system improvements