How do internal audits contribute to continual improvement?
- A.By finding problems for the certification body, and by producing the nonconformity list the external auditor uses to schedule the surveillance visit
- B.By confirming compliance against Annex A, and by issuing the conformity statement that the certification body accepts in place of its own audit
- C.By pausing improvement work during the audit window, and by freezing the corrective-action register until the audit report is issued to management
- D.By identifying nonconformities, gaps, and improvement opportunities that feed into the corrective action and improvement process
Why D is correct
Internal audits identify nonconformities, gaps, and improvement opportunities that drive corrective actions and enhancement of the ISMS.
Know someone studying for ISO 27001? Send them this one.