Internal Audit Record
Updated 27.01.2026
A document forming part of the Immercial IMS.
16. Internal Audit Record
Document Name: Internal Audit Record
Version: 1.0
Approved by: Directors, Immercial Limited
Review Frequency: As required / Annual minimum
16.1 Purpose
This document provides a structured record of internal audits conducted to assess the effectiveness and conformity of Immercial Limited’s Integrated Management System (IMS).
It serves as formal evidence of internal audit activity in accordance with ISO 9001 and ISO 27001 requirements.
16.2 Audit Details
Each internal audit record includes, as a minimum:
-
Audit reference number
-
Audit date
-
Auditor
-
Scope of audit
-
Standards referenced (ISO 9001 / ISO 27001)
-
Documents and processes reviewed
16.3 Audit Checklist (Indicative Areas)
Audits may cover, where applicable:
-
IMS scope and policy alignment
-
Document and record control
-
Quality objectives and performance monitoring
-
Client feedback and corrective actions
-
Supplier controls
-
Information security controls
-
Risk assessment and treatment
-
Incident management
-
Business continuity arrangements
Not all areas must be audited at once; coverage may be phased based on risk.
16.4 Audit Findings
Findings are recorded as one or more of the following:
-
Conformity — requirements met
-
Observation — improvement opportunity
-
Non-conformity — requirement not met
Each finding includes:
-
Description
-
Evidence reviewed
-
Reference to applicable requirement (where relevant)
16.5 Actions & Follow-Up
-
Non-conformities and observations requiring action are logged in the Corrective & Preventive Action Log.
-
Responsibility and target dates are assigned.
-
Completion and effectiveness are reviewed and recorded.
16.6 Audit Conclusion
A summary conclusion is recorded confirming whether the IMS:
-
Is effectively implemented
-
Remains suitable for the organisation
-
Requires corrective or improvement actions
16.7 Records & Evidence
Completed audit records are retained as formal IMS evidence in accordance with the Document & Record Control Procedure.
