Audit services cover internal review of a company's financial, operational and management systems. The purpose is to identify gaps and nonconformities early, so they can be corrected before an external audit, a client assessment or a tender evaluation exposes them.
What an internal audit is for.
An external audit arrives with consequences attached. An internal audit exists to find the same problems earlier, when they are still fixable and nobody is scoring you.
We review what is documented against what actually happens. The gap between those two is almost always where the risk sits — a procedure written for certification that nobody follows in practice.
Management system review.
Where a company holds ISO certification, internal audit is a requirement of the standard itself, not an optional extra. We audit against the standard's clauses, record findings, and check that corrective actions were actually completed rather than just noted.
This is the work that keeps a certificate valid at surveillance. Certificates lapse when the system was built for the audit and then abandoned.
Financial and compliance review.
We review financial records and statutory obligations for completeness and consistency — VAT treatment, documentation supporting declared figures, and whether records would withstand scrutiny.
This is a review service, not a statutory audit opinion. Where a regulated audit opinion is required, that must be issued by a licensed audit firm, and we will say so plainly.
How findings are reported.
Every finding is written as an observation, the evidence, the risk it creates, and a recommended action with an owner. A report that lists problems without owners and dates does not get acted on.
What's included.
- Scope definition and audit planning
- Documented review of processes and records
- Interviews with process owners
- Nonconformity and observation register
- Risk rating per finding
- Corrective action plan with owners and dates
- Follow-up verification of completed actions
- Written audit report
How we work.
- Scoping We agree what is being audited, against which standard or requirement, and why.
- Planning Audit schedule, documents to be reviewed and people to be interviewed.
- Fieldwork Records reviewed and process owners interviewed.
- Reporting Findings written up with evidence, risk and recommended action.
- Follow-up Verification that agreed actions were completed.
Worth knowing.
- Findings are written with evidence and a named owner, so they can be acted on rather than filed.
- We distinguish between a nonconformity against a standard and an observation about practice — they carry different weight and should not be presented as the same thing.
- Statutory audit opinions are issued only by licensed audit firms. We review and prepare; we do not issue opinions.
Frequently asked questions
Do you issue audit opinions?
No. A statutory audit opinion can only be issued by a licensed audit firm. We provide internal audit and management system review, which is a different service with a different purpose.
Is internal audit required for ISO certification?
Yes. Internal audit and management review are requirements of the ISO management system standards, not optional additions.
How often should an internal audit happen?
At least once a year to satisfy most standards, and more frequently for higher-risk areas. The schedule is agreed during scoping.
What do we receive at the end?
A written report with findings, evidence, risk ratings and a corrective action plan listing owners and target dates.
Can you audit a system you did not build?
Yes, and it is often more useful that way. An independent review of an existing system finds things the original implementer stopped noticing.
Does this replace an external audit?
No. It reduces the likelihood of an external audit finding problems, which is the point.