IAaaS - Internal Audit as a Service
What is IAaaS?
Internal audit is a key component of any ISO programme. Internal audits can be undertaken by your own staff - be it specialist dedicated auditors, or trained staff who audit part time. Alternately internal audit can be outsourced to a competent 3rd party via an outsourcing arrangement.
Spritzmonkey will provide Internal Audit as a Service (IAaaS) to clients who wish to use our experience to fulfil their internal audit programmes. This can be undertaken as a full outsource or as a partial outsource to augment resourcing for an established internal team. We provide internal audit services for all of the ISO certifications that we provide consultancy services for.
Need help?
Please contact us to arrange a telephone or face-to-face appointment to discuss your needs.
Why outsource internal audit?
Undertaking comprehensive internal audits can be time consuming. For all but the largest companies, it is often not cost effective to maintain a dedicated internal audit team. Internal auditors are expensive to hire and difficult to retain. Unless your audit programme is extensive, this may not fill all of their time. Training up other staff members is one solution, but often their day to day duties will get in the way. Part time auditors may only undertake a handful of audits from time to time so they may not develop the deep skills and knowledge required to audit to the highest standards compromising the effectiveness of the audit programme. If you only have one or two auditors, audit questions can get very repetitive focussing on the same things every time as auditors tend to have an audit style.
Outsourcing your internal audits means:
Highly experienced, talented auditors
Pool of resource - different skills mix and potential for a different pair of eyes each time
Better quality audits
Avoid expensive training fees
Lower cost
Audit resource available when you need it
Why Spritzmonkey
Spritzmonkey are specialists in implementing and managing ISO programmes. Our staff have extensive experience of auditing across many different standards in different settings.
From the outset we aim to build open and honest relationships with clients. By listening to you and adopting a flexible straightforward approach, we work with you to understand your business, how it works and it’s culture. That way, no matter what industry you are in, we can tailor our services to suit your needs and fit in with how you and your team works.
Spritzmonkey are recognised by many of the leading audit bodies in the UK including BSI and Lloyds Register.
What we can do
Spritzmonkey can undertake all, or some, of the internal audit processes for you. Our flexible delivery approach means that we tailor each service to your specific needs.
This can include:
Internal Audits
We undertake all the internal audits as per your schedule. This will include:
Pre-audit planning and preparation including reviewing relevant policies, clauses and controls and past audit findings.
Scheduling the audit sessions at a convenient time for the auditees.
Completing the individual audit sessions with the auditee - asking questions and reviewing evidence.
Finalising the audit report and agreeing findings, corrections, and corrective actions, one report for each audit topic.
Adding audit findings to your continuous improvement process.
An audit topic is either a functional area of the business or a part of the ISO 27001 standard.
Audits can be completed remotely (via Zoom or MS Teams or your preferred tool) or onsite as required.
Audit Manager
The audit manager will work with you to maintain your audit schedule and manage improvement. This may include:
Creating and maintaining an effective audit schedule.
Maintaining the Improvement Log with any findings, corrections, and corrective actions from each audit.
Manage corrective actions through to closure, liaising with and providing advice to the auditee and other relevant staff.
Scheduling audits to verify effectiveness of corrective actions for each finding.
Reporting the status of internal audit to management.