Internal Audit Economic Prosperity step 17 · Social Value step 17 (HS 9.2)

In this step your company checks for itself whether its management system is operating as planned and as the standard requires. You receive an internal audit plan, checklists and an internal audit report.
When you designate a folder on your computer or upload files, the AI matches the requirements of the standard against your company's processes using that material (manual, procedures, organization chart, roles and responsibilities, risk assessment, Statement of Applicability, previous audit results), and helps your internal auditors by creating an internal audit plan (schedule, auditor assignment, independence check) and checklists by department, division, process and project.
After the audit, you enter the audit records to write the internal audit report (including nonconformity reports).
If you choose a mock audit, the AI acts as the auditor and asks one question at a time, your company answers, and you practice a real audit (judgments, how to respond, and a result report at the end).
For Annex A controls, the applicability declaration in your company's Statement of Applicability (SoA) takes priority. Files are read only inside the browser and only the text is sent (it is not stored on the server and is not used for AI training).
※ The number beside the title is the basis clause. HS is the Harmonized Structure (the common clause structure used across ISO standards).

Internal audit support: ① Upload material (folder or files) ② Enter the schedule and auditors ③ Choose what to write ④ Write with AI

When you select the standard to operate, a draft of the work for the selected steps is written to fit that standard's requirements. The requirements consist of the clauses and subclauses of the common chapter structure used by ISO standards (the harmonized structure, HS) and the requirements specific to each standard (for example, ISO 14001: environmental aspects and compliance evaluation; ISO 45001: risk assessment and worker participation).
If you select several standards, common requirements are written once, and standard-specific requirements are written separately with the standard name attached. Pass per standard: it is not sold by step and is not paid in advance.
If you click "Write with AI" for a standard without a pass, the cost is shown first, and if you agree, payment is made on the spot and writing continues.

Until AI writing is connected, please leave a message via "Contact staff".After entering your input, click "Write with AI". If you agree to the cost notice, the payment screen opens, and after payment you return to this page and continue with your input as it was.
The output appears after the document completeness check (80 points). On-screen payment (card, simple payment) is being prepared. Before then, or if you prefer a bank transfer, click "Contact staff". A staff member will explain the amount and the payment method, and will open access after confirming the deposit (eiso Pricing).

Operation track *
Economic Prosperity (based on ISO 9001) or Social Value (environmental protection and social justice): only the standards and 20 steps of the selected track are shown (if you turn on "Integrated management system" in the common steps, the standards of both tracks are selected together). If you select ICT (ISO/IEC 42001 and 27001), you are taken to ICT Management System Operation. The industry is passed on, and step results are carried over from one to the next in this browser.
Standard to operate *
Economic prosperity
Environmental protection
Social Justice

* Only standards typically associated with management system certification have been selected. We will keep improving the platform to help you establish and operate the selected standards.

Industry *

For 1 Context of the Organization, please enter your industry. The opportunities, threats and interested parties of the industry are researched on the web.

The selected standards and industry apply to every operation step. Each step reflects the processes, equipment, risks, legal requirements and interested-party characteristics of the industry.

Operation step *
1 Context of the Organization: first analyze interested parties (4.2), then analyze the context of the organization (4.1) with the selected methods
When you enter your industry, the AI researches on the web the external trends (opportunities and threats) of that industry and the needs and expectations of interested parties, and analyzes them together with the content and materials you provide (sources and reference dates are shown). From this it prepares a proposed decision on the requirements your company will address (adopt) in its management system, and links them to risks, objectives and legal requirements.
Legal requirements are adopted; other requirements are each marked as proposed for adoption, needs review or not addressed, with reasons (decisions and approval rest with your company). Internal strengths and weaknesses are drawn only from your materials and input. Where there is no basis, the AI asks under "Items to be confirmed".
Analysis method *

First choose the analysis method (more than one is possible): only the sections for the methods you choose are written.

Interested party analysis (4.2) comes before the analysis of the context of the organization, so it is selected by default together with SWOT. If you select nothing, interested party analysis + SWOT is used.

Upload materials

When you upload a folder or several files, each file is placed in a field according to its file name. Business plan → current-year business plan; management review, performance, analysis, KPI → previous-year management analysis materials; strengths, weaknesses, SWOT, audit, survey → strengths and weaknesses analysis materials; everything else → summary of situation and materials. After placing, you can edit or delete them in the field.

Names to mask

DOCX, XLSX, PPTX, HWPX, PDF and TXT. Files are read only within your browser and only the text is used (not stored, not used for AI training).

Business plan for the current year
Management analysis materials for the previous year
Strengths and weaknesses analysis materials
Basic information
Company website
17 Internal Audit: from your materials, an audit plan → checklists per audit unit → an internal audit report after the audit
When you specify a folder or upload files (manuals, procedures, organization chart, roles and responsibilities, risk assessment, objectives, statement of applicability, previous audit results), the AI matches the requirements of the standard against your processes and documents, and prepares an audit plan and checklists to support the internal auditors.
After the audit, enter the audit records and write the internal audit report on the same screen (findings not in the records are not written). For Annex A controls, the applicability declarations in your statement of applicability (SoA) take priority.
Upload materials

Each file is placed in a field according to its file name. Forms and templates (audit plan, checklist, audit report) → customer forms; statement of applicability, SoA → statement of applicability; previous audits, nonconformities, corrective actions, NCR → previous audit results; audit records, checklist results (when “Internal audit report” is selected) → audit records; everything else (manuals, procedures, organization chart, roles and responsibilities, etc.) → audit materials.

To be prepared
Audit type
Audit unit

What to divide the checklist by: for departments and divisions, clauses are assigned using the organization chart and roles and responsibilities; for processes, using the process map; for projects, using the life cycle.

Audit subjects and number of items
Audit schedule

For the “Internal audit plan”, the schedule and auditor information are required. Auditors are assigned so that they do not audit their own work or department.

Auditor information
Audit materials
Customer forms (audit plan, checklist, audit report)
Statement of Applicability (SoA)
Previous audit results
Audit records (for the report)
Specify the basic data on your computer: specify the folder or files for this step
When you specify the basic data accumulated on your computer for this step (records, results, current forms, documents), eiso organizes, aggregates and analyzes it, and synthesizes the result. Files are read only inside your browser, and only the text is placed in the fields below. Nothing is sent to a server or stored.
Designate materials
Materials on your computer
Department or process
Summary of situation and materials *

For 1 Context of the Organization, this may be left blank if basic information or the materials below are provided.

Requests
Company Workspace Company Workspace
When you select a Company Workspace, the AI carries over the results of previous steps you have saved (for example, issues from context of the organization → risk assessment; risks → process control, audit checklists and management review input). The Company Workspace is being prepared. When it opens, we will announce it in the Announcements.

* AI-generated output is a reference draft and does not guarantee certification.: AGENT eiso.co.kr

Internal audit step guide Expand

Output

  • Annual internal audit program and audit plan (scope, criteria, auditors, schedule)
  • Checklists by clause and process
  • Audit report and nonconformity reports

Next steps

Economic Prosperity: Steps this step builds on: Context of the Organization (Operation) · Roles and Responsibilities · Legal Requirements Identification · Risk Assessment · Process Control · Nonconformity and Corrective Action
Steps that continue from this step's results: Management Review · Nonconformity and Corrective Action · Improvement

Social Value: Steps this step builds on: Context of the Organization (Operation) · Roles and Responsibilities · Legal Requirements Identification · Risk Assessment · Participation, Consultation and Communication · Process Control · Compliance Evaluation · Nonconformity and Corrective Action
Steps that continue from this step's results: Management Review · Nonconformity and Corrective Action · Improvement

Management System Operation Guide