7Assure

ISO 42001Audit Programme

Audit Programme

Purpose

Planned internal audit of the AIMS: scope, cadence, auditor independence, schedule and follow-up.

Role

ISO/IEC 42001 Clause 9.2 requires an internal audit programme. Gemara Audit Log records an audit that happened; this artefact is the programme that plans, staffs and follows those audits. The ISO/IEC 27001 analysis treated the same gap as extra fields on Audit Log rather than a separate type.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• AIMS Scope
• Competence Record
• Applicability Profile

Links downstream

• Audit Log
• Corrective Action
• Management Review

Related factors

• Evidence by Default
• Continuous Governance
• Governance Has Owners

References

• ISO/IEC 42001 Analysis — Clause 9.2