Skip to main content

Using audit records for certification audits and management review

How to use Audit365 to show an external auditor, or your management team, that internal auditing is working.

Written by Caim Hermoso

Who this is for: Quality, health and safety and environmental managers preparing for a certification audit or a management review.

ISO 9001, 14001 and 45001 ask you to keep evidence that the audit programme is in place and that audit results are acted on (clause 9.2), and to review audit results at management review (clause 9.3). Audit365 already holds this evidence.

What an external auditor usually asks for

They ask for

Where to find it in Audit365

Your audit programme or plan

Audit Records, filtered by date, showing scheduled and completed audits

Completed audit reports

Published reports, opened from Audit Records

Auditor competence and independence

The Auditor Register, and the conflict of interest declarations made before each audit

Nonconformities and how they were handled

Audit Findings, with each finding's root cause analysis and corrective actions

Evidence that actions were effective

Closure verification on each closed finding

Preparing for a certification audit

  1. Export the year's audits and findings.

  2. Check that every planned audit was carried out, or that the reason it moved is recorded.

  3. Filter findings by status and chase any that are still open, especially those with no root cause or corrective action.

  4. Check that auditor competence records are up to date.

  5. Have one or two published reports ready to walk through as examples.

Inputs for management review

  • The number of audits completed against the plan

  • Findings by type (nonconformity, observation, opportunity for improvement) and by area

  • Repeat findings: the same clause or area raised in more than one audit. These point to a corrective action that didn't work.

  • Open and overdue corrective actions

  • Proposed changes to next year's programme

The reporting page and dashboard widgets give most of these figures. Use exports for anything you want to chart or present.

If this doesn't work

  • An external audit report also needs to be on record — upload it and add its findings so they are tracked alongside your internal ones.

  • You can't see some sites' audits — your location access limits what you see. Ask an Audit Administrator.

Related articles

Did this answer your question?