Type of provider
Outsourcing the internal audit? Compare for free
Almost every ISO standard requires an internal audit in clause 9.2, and your certification body reviews it every year. Nobody may audit their own work, and your own certification body may not do it either. An external auditor solves that: compare proposals in one request.
All internal auditors
Who may carry out your internal audit?
- An employee
Allowed, as long as nobody audits their own work. An employee knows your company best.
- An external auditor
Also allowed, on your behalf. An external auditor looks with fresh eyes, and at a small company that is sometimes the only option.
- Your own certification body
Not allowed. ISO/IEC 17021-1 calls that a major threat to the certification body's impartiality.
How an internal audit works
-
Audit programme
You list which processes you audit, when and by whom. A process with a lot of risk or many errors you choose more often. -
Objective and scope
For each audit you write down what you want to know, what you assess against and what you look at. -
Internal auditor
You appoint someone who does not carry out the process themselves and knows the standard and the process well enough. -
Interviews, walk-round and records
The auditor talks to the people doing the work, observes and samples your records. -
Report and follow-up
The findings go to the manager. You correct nonconformities and look for the cause, and the results go to the management review.
What your certification body wants to see
| Moment | What the auditor looks at |
|---|---|
| Stage 1 | Whether your internal audit and management review are planned and under way |
| Stage 2 | Whether they have been carried out and deliver results |
| Every surveillance audit | Your internal audits and management review again |
Never done an internal audit? That can lead to a major nonconformity.
Why compare quotes through CertificeerWijzer?
For the same standard, the price can differ by up to 75%, depending on the providers you choose. That difference can be explained, because paths differ more than you think: in how much you do yourself and how much you hand over, in the quality of the tooling, in the specialisation of the certification body, in how soon a party can support you and in the certifications of the providers themselves.
So when comparing, do not look at price alone, but also at these factors:
- Price of the whole path Compare the costs over the full three-year cycle, not just the first quote.
- Specialisation in your sector A partner who knows your industry asks the right questions and understands your processes.
- Norms and values Pragmatic or thorough, on site or remote: a partner that fits the way you work.
- Capacity A partner with time when you need it, so your deadline or tender is not at risk.
- International recognition Working with clients abroad? Then the name and reputation of your partners matter.
- Qualifications An accredited certification body, a qualified auditor and a consultant with proven experience, so the result is recognised.
We know the providers personally. We are in direct contact with every connected provider, so we have the most up-to-date information on their prices, specialisations, approach, certifications and availability.
How to get the best partner at a good price
You enter your details once and receive several quotes. Then you choose which party may support your company.
-
“As a start-up founder you already have enough on your plate. Quickly finding the right partner so you can keep building your company is worth its weight in gold. Happy with our certification body and auditor”
Founder, Dufond B.V. -
“Thanks to CertificeerWijzer we switched to a certification body that fits our organisation much better. We save €1,500 a year and the audits are at least as good.”
Director, FleGo B.V. -
“The switching process went smoothly and professionally. Within 3 weeks we had switched, and the new certification body understands our process approach much better.”
Managing Director, Zeno Zorg B.V.
Looking for a provider and not sure where to start?
Get in touch with Nathan, we are happy to help you on your way.
Frequently asked questions
Is an internal audit mandatory?
Yes. Almost every ISO management system standard requires an internal audit in clause 9.2. There is no fixed interval, but the certification body reviews your internal audits at every surveillance audit.
Who may carry out an internal audit?
One of your own employees, or an external party doing it on your behalf. The requirement is that the audit is objective and impartial: nobody audits their own work. Your own certification body may not carry out the internal audit.
How often do you need an internal audit?
The standard does not set a fixed interval. You decide when, based on how important your processes are. The certification body does review your internal audits at every annual surveillance audit, so you need something to show every year.
What does the certification body want to see of your internal audit?
In stage 1 the auditor checks whether your internal audit and management review are planned and under way. In stage 2 they assess whether they have been carried out and deliver results, and at every surveillance audit they look at them again. If you have never done an internal audit, that can lead to a major nonconformity.
Am I committed to anything?
No, nothing at all. You are free to decline quotations, choose another certification body, or decide not to certify at all. No obligations, no small print.