ISO 9001 Internal Audit Checklist Template by clause

The internal audit checklist is the script that guarantees coverage: without it, the beginner auditor forgets whole clauses and the experienced one gets lost in the interesting deviations found along the way. But mind the correct role of the checklist: it is a safety net, not a script to be read out loud. A quality audit happens in the follow-up questions ("show me", "why like this?", "what happens when it fails?"), not in the bureaucratic reading of yes/no questions.

The effective structure organizes the checklist by clause or by process, with three essential columns: the question or requirement in plain language (do not copy the text of the standard — translate it into shop-floor language); the evidence to verify (which documents and records to ask for, what to observe on site); and the finding field, where the auditor records what was actually seen, with traceability (document numbers, batches, dates). A finding without traceability does not support a nonconformity.

The most productive technique to fill in the checklist is tracing: pick one real order and follow its path — from the commercial order review to the production order, from the inspection records to shipping. The checklist answers come out naturally and with concrete evidence, instead of rehearsed replies. Always sample more than one case: one perfect record may be a carefully prepared exception.

The extract below covers the clauses that generate the most findings. The complete PrismaBiz checklist covers 4.1 through 10.3, with a finding field for each item — download it using the button on this page.

Internal audit checklist (extract — clauses with the most findings)

Clause	Practical question	Evidence to verify	Finding (example)
4.1 / 4.2	Are the context and the interested parties determined and up to date, including whether climate change is a relevant issue?	Dated SWOT or equivalent; interested parties matrix; date of the last review	SWOT reviewed in June 2026 during the management review — ok
6.1	Do risks and opportunities have planned actions and are they evaluated?	Risk matrix; actions for the high risks; effectiveness evaluation	High risk "single supplier": 15-day safety stock planned in the action with no progress record — OBSERVATION
7.1.5	Is the measuring equipment calibrated and fit for purpose?	Equipment inventory; certificates; labels on the instruments in use	PAQ-003 and MIC-001 checked at the workstation — calibration valid, ok
7.2	Are people competent for the roles that affect quality?	Skills matrix; training records; effectiveness evaluation	New press brake operator with no qualification record — MINOR NC
8.2	Are customer requirements reviewed before the order is accepted?	Sample 3 orders: is the review recorded? Are lead times validated with production planning?	Orders 8874, 8891 and 8902 with the review recorded — ok
8.4	Are suppliers evaluated and their performance monitored?	Qualification criteria; SQI for the period; actions on critical suppliers	SQI calculated; Transportes Norte (84.1%, conditional) with no formal improvement plan — OBSERVATION
8.5 / 8.6	Does production follow the work instructions and is the product released against clear criteria?	Trace 1 production order: are the parameters recorded? Is the final inspection signed? Are the criteria clear?	Production order OP-2231 traced from intake to shipping — complete records, ok
9.1 / 9.3	Are the KPIs monitored and does the management review cover the required inputs?	KPI dashboard; last management review minutes against the list in 9.3.2	Minutes 2026-01 with no record of the input "opportunities for improvement" (9.3.2 f) — MINOR NC
10.2	Do nonconformities have the cause analysed and the effectiveness verified?	Sample 3 nonconformity reports: is the root cause analysis consistent? Is effectiveness backed by data?	RNC 2026-009 with effectiveness declared without evidence — OBSERVATION

The checklist is a safety net: the real audit happens in the "show me" and in the tracing of concrete cases.

Frequently asked questions

Is a checklist mandatory for an internal audit?

No — ISO 9001 requires planned audits with defined criteria and scope, and the checklist is the usual tool for that. Experienced auditors use lean versions as a coverage reminder; beginners benefit from more detailed checklists.

Should I use scores or points in the checklist?

For an ISO 9001 audit, classifying each finding (conforming, major NC, minor NC, observation) communicates better than numerical scores. Scoring makes sense in supplier assessments or 5S audits, where you compare progress between cycles.

How do I adapt the checklist to my company?

Add a column with the internal documents of each process (procedures, work instructions) and rewrite the questions using the vocabulary of the company. A generic checklist finds generic findings; a contextualized checklist finds the problems that matter.

ISO 9001 Internal Audit Checklist

Internal audit checklist (extract — clauses with the most findings)

Frequently asked questions

Is a checklist mandatory for an internal audit?

Should I use scores or points in the checklist?

How do I adapt the checklist to my company?

Manage this in PrismaBiz — free

Get your file

ISO 9001 Internal Audit Checklist

Internal audit checklist (extract — clauses with the most findings)

Frequently asked questions

Is a checklist mandatory for an internal audit?

Should I use scores or points in the checklist?

How do I adapt the checklist to my company?

Related content

Manage this in PrismaBiz — free

Get your file