How often should you do internal audits in compliance with the ISO management system?
For those conversant with ISO management systems such as ISO 45001, ISO 9001 and ISO 14001, you will know that the standard requires you to have a schedule for your internal audit.
The internal audit has to be done at planned intervals though the standard does not give the frequency of the internal audit, and it doesn’t mention that all processes should undergo an annual internal audit.
However, the Iso management systems allow businesses and organisations to establish the frequency of internal audits in their manner. It’s up to that business to decide what they want for themselves.
Now, the question is, how often should you do an internal audit in compliance with the ISO management system?
You can perform an audit monthly, quarterly, twice a year, or even once a year. The audit criteria will always determine or help determine the frequency of the internal audits.
Businesses have different processes in their domain, and it’s advised not to consider those processes in your business for an internal audit on the same timeline.
Below are things to consider when deciding the internal audit frequency in your business.
The complexity of the processes
Complexity is a state of being complicated- Whenever a process is complex or too difficult or has a high risk of causing problems, perform an internal audit on it frequently, maybe twice a year or quarterly. You can audit a low-risk process once a year or every other year.
Moreover, find out how you can determine the complexity of your process to know what to look out for when making your decisions on internal audit frequency.
History of non-conformities or incidents.
If your process has a history of frequent deficiencies and non-conformities, you can audit it frequently.
Others are processes in which you have a problem meeting your targets and objectives, do subject them to frequent audits quarterly or twice a year.
How mature is your process?
If you answer the above question correctly, it will help you to know if your process has maturity. The maturity of your process determines how well-established your process is, and when you have a well-established process that runs efficiently, you can audit it once a year or every other year.
Company budget.
Some companies or businesses have a budget for internal audits, and they will not go outside their budget to do more audits that will attract extra costs for them. The internal audit requires resources.
Requirements of the customer or regulatory requirement
Customers or regulatory bodies can decide what they want from their clients, and it can influence the frequency of internal audits.
Final thoughts
Internal audit is one activity you need compliance in when looking at the ISO management system standards. The standard does not state clearly the frequency of such audits, but the above factors can help your company to plan better and maintain compliance with the requirements of the ISO system standard.
Read also:
- A demolition firm and director were prosecuted after a 20-year-old labourer crushed
- What is the difference between ISO 45001 and OHSAS 18001?
- What is the context of the organisation according to the ISO management system?
- Engineering company fined after worker fell through station canopy
- A company was fined £800,000 after a worker suffers injuries at a chocolate factory
Onyeka Emma is a QHSE Professional with more than 10 years of experience in occupational health and safety, which spans many industries such as construction, beverage, oil and gas, etc. He has many health and safety certifications, including NEBOSH IGC, ISO 9001:2015, ISO 14001:2015, and ISO 45001:2018 Lead auditor certificate. A member of IOSH, ISPON, and Nigeria Red Cross Society. He is interested in business, entrepreneurship, Speaking, and motivating people to do better for themselves. He enjoys leisure with a good motivational book.
Thank you for sharing such a essential knowledge on importance for performing internal audit. I would also like to add some points acknowledging from a content on ISO Lead Auditor Training. This has helped me much.