ISO 9001 Internal Audit Checklist

The ISO 9001 internal audit is one of the most valuable activities in any Quality Management System — and a mandatory requirement of the standard. Done well, it finds and fixes problems before your certification body does. This guide explains what an internal audit is, why it is required, and gives you a practical checklist to run one.

For the wider context, see our complete ISO 9001 guide.

What is an ISO 9001 internal audit?

An internal audit is a systematic, independent check of your QMS against the requirements of ISO 9001 and your own procedures. Carried out by your own people (or an appointed party), it verifies that your processes are documented, followed, and effective — and surfaces nonconformities and opportunities for improvement. It is effectively a rehearsal for your certification audit, giving you time to fix issues first.

Why internal audits are required

Clause 9.2 of ISO 9001 requires organizations to conduct internal audits at planned intervals. They are a core part of the “Check” in Plan-Do-Check-Act, providing the evidence leadership needs at management review and demonstrating that the QMS is genuinely working. A well-run internal audit programme is one of the clearest signs of a mature, effective quality system.

The ISO 9001 internal audit checklist

A thorough internal audit covers the requirements in clauses 4 to 10. Key things to check include:

• Is the QMS scope defined, and are interested parties and their requirements identified?
• Is there a quality policy, and are measurable quality objectives set and tracked?
• Have risks and opportunities been identified and addressed?
• Are people competent, and is documented information controlled and current?
• Are operational processes planned, controlled, and delivering conforming outputs?
• Is customer satisfaction monitored, and are results analysed?
• Are nonconformities recorded and corrective actions effective?
• Have previous audit findings and management-review actions been closed?

How to run an effective internal audit

Plan an audit programme covering all processes over time, select competent and impartial auditors, and prepare with a checklist based on the standard and your procedures. During the audit, gather objective evidence through interviews, observation, and document review. Afterwards, report findings clearly, agree corrective actions with owners and deadlines, and verify they are closed. Feeding the results into management review completes the loop — and a structured checklist makes the whole process faster and more consistent.

Frequently asked questions

Is an internal audit required for ISO 9001?

Yes. Clause 9.2 of ISO 9001 requires organizations to conduct internal audits at planned intervals to verify that the QMS conforms to the standard and is effectively implemented.

Who can conduct an ISO 9001 internal audit?

Competent and impartial people from within your organization, or an appointed third party. Auditors should not audit their own work to preserve objectivity.

How often should you run ISO 9001 internal audits?

At planned intervals that cover all processes over time — many organizations audit across an annual programme, with frequency reflecting the importance and performance of each process.