Outsourced ISO internal audits

ISO internal audit services for UK businesses.

Risk-based internal audits for organisations that need additional audit capacity or an objective review of their management system. Huddersfield-based support for single-standard and integrated ISO systems across the UK.

Discuss ISO support

Who this helps

Built around a buying situation.

Management-system owners
SMEs needing outsourced internal audit capacity
Organisations preparing for certification, surveillance or recertification audits

Useful when

The trigger is already visible.

Your internal audit programme needs additional capacity
A separate perspective is needed on system effectiveness
Previous findings or corrective actions need evidence-based follow-up

The position

Audit the process and the evidence.

Pegasus scopes internal audits around the standards, sites and processes that matter to your organisation. The audit considers previous findings, operational change and process risk, then follows evidence through records, interviews and observation where appropriate. The report explains what was reviewed, the findings and the action needed. Independence and objectivity are considered before work starts, including any earlier implementation work by Pegasus.

An audit scope and sampling plan tied to process risk

Clear findings supported by traceable evidence

Actions that can be assigned, reviewed and verified

Scope

What the work includes.

Every engagement is scoped around authority, operating context, available evidence and the decision that must be made.

Audit scope and programme

Agree the audit objectives, applicable standards, sites, processes, sampling, evidence access and reporting needs. Review previous audits and any potential conflicts before confirming the plan.

Management-system audit

Follow process trails through records, interviews and, where appropriate, observation. Compare the evidence with the agreed criteria and distinguish nonconformities from improvement opportunities.

Findings and corrective-action review

Provide clear findings and an action record. Agree responsibilities and follow-up requirements, with closure verification included only where it forms part of the commissioned scope.

Method

A controlled route from exposure to evidence.

Decision points, responsibilities and verification stay visible from the start.

Discover

Define the exposure, context, evidence, owners and decision that matters.

Design

Select proportionate controls and make responsibilities and hold points visible.

Implement

Embed the agreed system into the real operating workflow.

Verify

Test whether controls work and whether the evidence supports the conclusion.

Improve

Close actions, learn from exceptions and strengthen the system over time.

Outputs

Evidence designed for use.

Agreed audit objectives, criteria, scope and plan

Evidence-based report distinguishing nonconformities and improvement opportunities

Corrective-action register with responsibilities and follow-up requirements

Closure review or follow-up audit where included in the agreed scope

Professional boundaries

Precision includes saying what the work does not claim.

Internal audits support management-system assurance and readiness; they are not accredited certification audits.
Objectivity and conflicts arising from previous consultancy are reviewed before the audit scope and personnel are agreed.

Questions answered

Before you scope the work.

Which ISO standards can Pegasus support?

Pegasus provides lead-auditor expertise across ISO 9001, ISO 14001, ISO 45001, ISO/IEC 42001, ISO/IEC 27001, ISO/IEC 20000, ISO 22000 and ISO 13485. The relevant competence, applicable requirements and audit scope are confirmed before each engagement.

Can one internal audit cover several ISO standards?

An integrated audit can review shared processes across several standards, provided the scope and evidence also address each standard's distinct requirements. The programme is agreed around your system and risks.

Can the same consultant implement and audit the system?

Independence and objectivity must be considered. Where prior consultancy creates a conflict, audit scope or personnel should be adjusted and the limitation made explicit.

Are internal audits carried out remotely or on site?

The method is agreed around the processes, risks and evidence that need to be assessed. Some records and interviews may be reviewed remotely; work that requires observation of site activities needs an appropriate on-site approach.

Is an internal audit the same as a certification audit?

No. An internal audit evaluates your management system against agreed requirements and supports improvement or readiness. Certification, surveillance and recertification decisions belong to an independent certification body.

What should we have ready for scoping?

Identify the standards, sites and processes, any planned external audit date, the current audit programme and previous findings. Describe what is available first; a suitable route for sharing confidential records can then be agreed.

Start the conversation

Scope your next internal audit.

Tell us the standards, sites and processes in scope, your audit deadline and any existing programme. We will agree the evidence, access, independence arrangements and reporting required.