The internal audit is one of the most powerful tools in ISO 9001 — when done well, it identifies real improvement opportunities before the CB auditor does. Done poorly, it becomes a paper exercise that creates more audit findings. This guide gives you a practical checklist and process for conducting effective ISO 9001 internal audits in India.
Annual
Minimum internal audit frequency
Clause 9.2
ISO 9001 requirement
4-8 hrs
Typical duration for SME
EA
Conducts audit for you
ISO 9001 Internal Audit Checklist — Key Areas
| ISO Clause | What to Audit | Evidence to Look For |
|---|---|---|
| 4.1-4.4 Context and QMS | Scope, process map, context analysis | QMS scope document, process descriptions |
| 5.1-5.3 Leadership | Quality Policy display, communication, objectives | Signed policy, notice board, staff awareness |
| 6.1-6.2 Planning | Risk register, quality objectives, action plans | Risk log, objectives with owners and status |
| 7.1 Resources | Infrastructure, environment, calibration | Asset list, calibration certificates (current) |
| 7.2-7.3 Competence | Training records, skills assessment | Training register, induction records |
| 8.1-8.5 Operations | Process controls, customer requirements, output quality | Work orders, inspection records, customer briefs |
| 8.7 Nonconforming output | Non-conformance handling | NCR log, rework/rejection records |
| 9.1 Monitoring | KPI measurement, customer feedback | Performance data, CSAT surveys |
| 9.2 Internal audit | Previous internal audit records | Audit plan, reports, findings, closure |
| 9.3 Management review | Management review conducted and recorded | Management review minutes |
| 10.2 Corrective action | CAPA log, root cause, effectiveness | CAPA register with all fields completed |
Sample Internal Audit Questions
For Shop Floor/Operations:
- "Can you show me the procedure for this process?"
- "What do you do when you find a defect/error?"
- "When was this measuring instrument last calibrated?" (Check label)
- "Can you show me a recent quality inspection record?"
- "What are the quality objectives for your department?"
For Management:
- "What is your Quality Policy and what does it mean for your business?"
- "Can you show me the management review minutes from this year?"
- "What quality objectives did you set this year and how are you tracking them?"
- "What corrective actions were raised since last audit and are they all closed?"
Internal Audit Report Format
Your internal audit report must include:
- Audit date and auditor name(s)
- Areas/processes audited
- Audit findings — conformities, non-conformities, observations
- Evidence reviewed for each finding
- Corrective action requirements for NCs
- Auditor signature and date
FAQs
ISO 9001 requires internal audits to be conducted by auditors who are independent of the activities being audited. A QMS manager can audit other departments but should not audit their own work. For small companies where this is difficult, Elite Assured conducts internal audits independently — ensuring objectivity and audit-ready reports.
Ideally 6-8 weeks before Stage 2 or surveillance audit. This gives sufficient time to close any corrective actions from internal audit findings before the CB auditor arrives. Elite Assured recommends scheduling internal audit as soon as Stage 1 is passed, allowing maximum time for corrective action implementation.