What is the ISO 27001 internal audit process?

The process of conducting an audit typically involves the ‘check’ element of the Plan-Do-Check-Act continuous improvement cycle, though additional guidance is contained in a supporting guidance Standard, ISO 19011.  This Standard provides guidance on planning the audit programme, the preparatory activities, the conduct of the audit, subsequent reporting and follow-up actions, and the closure of the audit.  Guidance is also provided within ISO 19011 on the principles of auditing and the competence of auditors.  (URM has delivered a number of webinars covering all stages of the audit process and recordings can be found here)