Skip to main content
All downloads

Template

Connect audit planning with actual results.

Use this template when existing audit records do not already contain the necessary information. The methodology stays in your ISMS handbook, with results kept in one place.

Cover of ISO 27001 audit programme and audit report templates
  • Plan frequency, methods and responsibilities in the audit programme.
  • Connect each audit plan with criteria, scope and objective auditors.
  • Record findings, management reporting and follow-up work.

Use this template in these measures

Implementation measure

Plan and conduct internal audits

Further framework mappings of this measure

  • ISO/IEC 27001 · 9.2.1

    ISO/IEC 27001:2022 + Amd 1:2024 · Supporting contribution

    The individual plan identifies the organisation's own ISMS requirements and ISO requirements. The report connects the actual scope, objective evidence and conclusion on conformity, effective implementation and maintenance. Competent auditors must actually conduct the audit; a prepared or completed file alone does not demonstrate this.

    Read the source ↗

  • ISO/IEC 27001 · 9.2.2

    ISO/IEC 27001:2022 + Amd 1:2024 · Supporting contribution

    Programme fields prepare frequency, methods, responsibilities, planning and reporting and take account of process importance and earlier results. Individual plans record criteria, scope and the selection of objective impartial auditors. The report and programme status can evidence execution and reporting. The user must implement the plan, ensure impartiality, actually inform relevant management and retain the result records.

    Read the source ↗