ISO 9001:2026 internal audit checklist — what to check
The internal audit is mandatory in ISO 9001:2026 (clause 9.2) and is the tool that lets you verify, before the certification body does, whether your system actually works. A good clause-based checklist turns the audit from a vague conversation into a systematic, evidence-based verification.
How to use the checklist, step by step
- Plan the audit: process, criteria, auditor independent of the audited area;
- Work through the clause-based checklist: ask open questions, request evidence (records, direct observation), never settle for a plain "yes";
- Record the facts for each item: what you saw, where, which document;
- Classify the result: conforming / nonconformity (major or minor) / observation;
- Report and follow up: findings go into the action plan with owners and deadlines, and the effectiveness of the actions is verified later.
What to check at each clause
| Clause | Title | In short |
|---|---|---|
| 4 | Context of the organization | internal/external issues, interested parties, QMS scope, processes |
| 5 | Leadership | management commitment, quality policy, roles and responsibilities |
| 6 | Planning | risks and opportunities, measurable objectives, planning of changes |
| 7 | Support | resources, competence, awareness, communication, documented information |
| 8 | Operation | customer requirements, design, suppliers, controlled production, release, nonconformities |
| 9 | Performance evaluation | monitoring and KPIs, customer satisfaction, internal audit, management review |
| 10 | Improvement | nonconformities and corrective actions, continual improvement |
Frequent audit findings
- obsolete documents still in use at workstations;
- measuring equipment with expired calibration;
- objectives without achievement plans or monitoring;
- management review missing required inputs;
- corrective actions closed without effectiveness verification.
Frequently asked questions
Who can perform the internal audit?
Anyone trained as an internal auditor, provided they do not audit their own work. For small companies, a common solution is training 1–2 internal auditors or exchanging auditors with partner companies.
How often should internal audits run?
The standard requires "planned intervals" — common practice is auditing every process at least once a year, and critical processes more often.
Does the IMSToolkit checklist cover all clauses?
Yes — the Module 2 checklist covers clauses 4–10 with audit-style questions, evidence columns and C/NC/OBS rating, plus a results summary.
Complete ISO 9001:2026 documentation, ready to customize
The IMSToolkit package for ISO 9001:2026 includes the manual, policies, registers, the full clause-based audit checklist, the Excel KPI dashboard and the AI toolkit — in English, instant delivery.
See the package — from €50