Process family
Internal audit process: five templates from audit program to management review
The internal audit cycle in five templates: risk-based program and fieldwork, checklist, corrective action follow-up, escalation of overdue actions and the management review that closes the loop, with ISO 9001 and laboratory variants.
Internal audit is how an organization checks its own management system against its own requirements before a certification body or a customer does. The family runs from the risk-based program and the audit itself, through the checklist the auditor works from, the follow-up of each finding's agreed action and the escalation ladder for actions that stall, to the management review where top management decides on changes and resources.
The internal audit process is the cycle: a program built from risk, audits by auditors independent of the area, recorded findings, agreed corrective actions and follow-up verification. Inside each audit the audit checklist workflow is the working document, scope and criteria turned into a reviewed set of questions, each line worked against sampled evidence and marked conforming, nonconforming or not applicable, then retained with the audit record. The audit process template is the same cycle in its ISO 19011 shape and also covers second-party and certification audits; the ISO 9001 variant maps the steps to clause 9.2 and ends in management review.
An audit is only as useful as what happens to its findings; three of the five steps come after the report. Corrective action follow-up tracks the due date, chases slippage, verifies the evidence and tests the action for effectiveness before closure. When an action stalls, the escalation process sets a final date, escalates to the process owner who holds the resource and then to management, which funds the action or formally accepts the risk. The management review runs on a defined input pack at a planned interval and records decisions on changes and resources.
The usual failures: findings written as observations so nobody owns them, a follow-up that verifies the action was done rather than that it worked, and a management review that receives the audit summary but records no decision. A major finding that needs a root cause raises a CAPA and moves into the nonconformance-to-CAPA family; a supplier audit is the same audit shape run on a supplier's site and belongs to supplier quality. The laboratory audit preparation and laboratory internal audit templates are the auditee's and the lab's versions of the cycle. There is no generic audit-preparation template, only the laboratory one.
The sequence
Step 1: Internal audit process flowchart template
Internal audit process flowchart template: risk-based audit programme, auditor independence check, fieldwork, nonconformities, corrective action and follow-up.
Step 2: Audit checklist workflow: flowchart from draft to record
Audit checklist workflow flowchart template: scope and criteria, questions drafted from the clauses, checklist review and approval, evidence sampled line by line, conforming or nonconforming or not applicable, and retention.
Step 3: Corrective action follow-up process flowchart (audit findings)
Corrective action follow-up flowchart template: owner and due date, progress updates, extensions, overdue escalation, evidence verification, an effectiveness check after a review period, then closure or reopening.
Step 4: Audit finding escalation process flowchart (overdue actions)
Audit finding escalation process flowchart template: finding grading, named owner and due date, disputed findings, overdue response, escalation to the process owner, management review, risk acceptance and closure.
Step 5: Management review process flowchart (ISO 9001 clause 9.3)
Management review process flowchart template: interval and quorum, the input pack, pre-read, the suitability decision, improvement and resource decisions, minuted actions and tracking to the next review.
Also part of this family
- ISO 9001 internal audit process (clause 9.2) — An ISO 9001 internal audit process flowchart aligned to clause 9.2. Documents audit programme planning, criteria definition, audit execution, finding routing, corrective action, and management review.
- Audit process flowchart — Audit process flowchart covering audit programme, planning, opening meeting, evidence sampling, finding classification, corrective actions and closure.
- Laboratory internal audit process flowchart — An editable laboratory internal audit workflow for planning an independent review, examining records and activities, documenting findings, agreeing response ownership and approving follow-up.
- Laboratory audit preparation process flowchart — An editable laboratory audit preparation workflow for confirming scope and criteria, collecting controlled evidence, addressing readiness gaps, reviewing the audit pack and briefing participants.
- Supplier audit process flowchart (second-party audit) — Supplier audit process flowchart template: risk-based audit programme, notification and agenda, pre-audit pack, opening meeting, evidence sampling, graded findings, corrective action plan and approved-list status.
Related guides
- How to create an internal audit process — How to design an internal audit process as a cycle rather than a project: a risk-based programme deciding what gets audited, an independence check on every assignment, and a close-out that re-samples.