Free resource

Internal Audit Plan & Report Template

A template for a defensible internal audit (clause 9.2), with an independence statement, a findings table and a conclusion - the audit that must happen before Stage 2.

.docx - Word documentEditable template with worked findingsEditable, not a static PDF

What's inside

Scope, criteria and method sections
An independence statement (the conflict that fails Stage 2)
A findings table with two worked examples (an NC and an OFI)
The common internal-audit failures, plus conclusion and sign-off

Preview

The actual structure of the file, straight from the template we use on live engagements.

A template for a defensible internal audit (clause 9.2). Independence is the point: the person who ran the controls cannot audit them. The worked findings are examples - replace them with yours.

1. Scope and objectives
2. Criteria and method
3. Schedule
4. Findings
5. Common failures this audit exists to catch
6. Conclusion
7. Sign-off

Preview only. The download is a fully editable .docx file with the guidance and tables filled in for you to complete.

Go deeper

See how this template fits the wider readiness work, and where we pick it up on a live engagement.

Explore the related service

More resources

Other templates teams pair with this one.

.xlsx

ISO 27001 Readiness Checklist

View resource .xlsx

ISO 27001 Evidence Map Template

View resource .xlsx

Surveillance Audit Prep Checklist

View resource