ISO & StandardsChecklist

ISO 9001 Internal Audit Checklist

Use this internal audit checklist to review your quality management system, sample the evidence and record objective findings against ISO 9001. Capture what you saw, not just a tick against each question.

Prepared by Morgan Compliance Group · Published 23 October 2026 · Updated 23 October 2026

Who it's for

Quality managers, competent internal auditors and organisations preparing for surveillance, transition or certification audits.

ISO 9001 internal audit questions

Review each question, mark Conforms, Nonconformity, Observation or N/A and record what evidence you saw. The blank PDF provides fields for evidence and the completed download captures your notes. Your entries stay in your browser.

Checklist details (optional)

These details and your answers are added to the PDF in your browser. They are not submitted to us.

Conforms 0Nonconformity 0Observation 0N/A 0Not answered 22
Context

Have internal and external issues been reviewed recently, and is there evidence?

Are interested parties and their requirements recorded and current?

Does the documented scope match what the organisation actually does?

Leadership

Can top management explain the quality policy and objectives and their own role?

Is there evidence leadership promotes a quality culture and ethical behaviour?

Do people know their responsibilities and authorities?

Planning

Are risks and opportunities identified separately, with actions and evidence of follow-up?

Are quality objectives measurable, monitored and up to date?

Were recent changes to the system planned and reviewed?

Support

Do competence records match the competence each role needs?

Are people aware of the quality policy and how their work affects quality?

Are documents current, approved and available where needed?

Is measuring equipment calibrated or verified where required?

Operation

Are customer requirements confirmed and recorded before commitment?

Are suppliers evaluated and monitored, with records?

Is work carried out to defined methods, with checks before release?

Are nonconforming outputs identified, recorded and controlled?

Performance

Is customer satisfaction monitored and acted on?

Has the internal audit programme been followed?

Did the last management review cover all required inputs, with decisions recorded?

Improvement

Are complaints and nonconformities investigated to root cause, with corrective actions closed and checked for effectiveness?

Is there evidence of continual improvement?

How to run an internal audit

  1. Plan the scope, audit criteria and the activities to be sampled.
  2. Review the previous audit findings and check whether agreed actions worked.
  3. Interview relevant people, observe the work and inspect procedures and records.
  4. Record specific evidence supporting every finding, including any gaps or good practice observed.
  5. Agree corrective actions, responsible people and realistic completion dates.
  6. Report the findings to management and follow up outstanding actions.

Auditor independence

Auditors should not audit their own work. Choose someone with the competence and independence to make objective findings. A competent external auditor can help when suitable internal independence or experience is not available.

Free download

iso-9001-internal-audit-checklist-morgan-compliance-group.pdf

PDF

Download free

No sign-up needed.

This resource is general guidance. Adapt it to your own business, activities and risks.

Want an independent internal audit?

Internal audits work best when the auditor is independent of the work. We carry out internal audits against ISO 9001, ISO 14001 and ISO 45001 and give you clear, evidence-based findings.

Book an internal audit

RELATED RESOURCES

Keep exploring

Back to the Resource Centre