Within your ISMS Cluster, you’ll find a Project called Audit Programme. This provides a ready-made template for planning, conducting, and recording audits. The Audit Programme is organised into three sections:

  • Pre-Certification Audits
  • Internal Audit Programme (covering your three-year certification cycle)
  • External Audits

You can also create a dedicated team for the Audit Programme by clicking the Team button in the top right and allocating users as team members.

Accessing the Audit Programme

To open the Audit Programme:

  1. Hover over Work in the navigation bar.
  2. Hover over your ISMS Cluster.
  3. Select Audit Programme.

You’ll then see the three sections: Pre-Certification Audits, Internal Audit Programme, and External Audits. Click into the section you want to work with.

To access the contents of a section, hover over its name, then select the activity you want to open.






What’s Inside

  • Pre-Certification Audits
    • ISMS Documentation Review
    • ISMS Process/Focus Area Audit
    • An activity to record your agreed three-year audit plan once certified
  • Internal Audit Programme
    • Document and manage the internal audits you’ll conduct during your certification cycle
  • External Audits
    • Certification Stage 1 Audit
    • Certification Stage 2 Audit
    • Two Surveillance Audits
    • Recertification Audit

Making Amendments

  • Edit existing activities: Click into the text box within an audit activity, make your changes, then select Update note.

Add new activities: Hover over the relevant phase (section) and select Add Activity. Name your activity, then use the drop-down menu above Create Activity to choose where it should be stored.

 



Storing Certificates

Where you keep your certification documents is up to you. Two common options are:

  • Uploading it into the Certification Stage 2 Audit activity
  • Storing it in the Documents section of your ISMS Cluster

Recording External Audit Results

When your auditor shares results (usually by email or post), upload them directly into the relevant audit activity template within your Audit Programme.

Linking to Corrective Actions

If your audits identify nonconformities or opportunities for improvement (OFIs), you can link them to your Corrective Actions and Improvements Track. Use the Linked Work section, found at the bottom of the left-hand column within the relevant audit activity.