Internal audit and management review
Check, review, improve. Based on what is already in the system.
Internal audits and the management review are where your management system checks itself. In Trustbird you plan the audits and keep track of findings and corrective actions, and Trustbird prepares the management review from the risks, controls and results you already recorded.
- Audit programme across all standards
- Every nonconformity followed up to closure
- Export for your external auditor
From audit plan to management decision
An internal audit only helps when findings are followed up and management sees the results. Trustbird connects those steps, so nothing gets lost between the audit and the next review.
Audit programme
Plan which parts of your management system are audited when and by whom. One programme covers every standard you carry.
Findings
Record findings during the audit and link them to the controls, processes or documents they concern.
Nonconformities
Mark a finding as a nonconformity, record the cause and decide who is responsible for resolving it.
Corrective actions
Assign corrective actions with an owner and a due date, and record whether they had the intended effect.
Management review
Trustbird gathers much of the input for the management review from the system: audit results, nonconformities and corrective actions, the state of your risks, progress on objectives and actions from the previous review. Management records its decisions in the same place.
Export for the auditor
Hand your certification body the audit reports, corrective actions and management review, together with the audit trail.
How it works
-
01
Plan the programme
Decide what is audited in the coming period and who carries out each audit.
-
02
Carry out the audit
Record findings as you go and link them to the parts of the management system they concern.
-
03
Follow up
Turn nonconformities into corrective actions and check that they worked before closing them.
-
04
Review with management
Prepare the management review from the system data and record the decisions and actions that follow.
Frequently asked questions
- Who carries out the internal audit?
- Someone you designate, from inside or outside your organization, who does not audit their own work. Trustbird records who did which audit and what they found.
- Does Trustbird draw audit conclusions?
- No. The auditor draws the conclusions. Trustbird records the findings, the follow-up and the decisions, and the AI never draws an audit conclusion on its own.
- Does the export replace the external audit?
- No. The export gives your certification body a clear file to work from. The external audit and the certification decision remain with the certification body.
Related
- Policy and documents Versioned policy with a named owner
- Risk management A risk register that stays current
- Controls and evidence Supply evidence once, use it everywhere
- Supplier management Know who processes which data
- Trustbird AI An assistant that proposes, not decides
- Trust center Show customers how you work securely
See what Trustbird does for your organization
Trustbird is being built with two certified design partners, and we are looking for more companies to join them at co-founder pricing. Apply as a design partner, or mail us with a question.