
Independent internal audits and assessments.
ISO/IEC 42001, ISO/IEC 27001 and ISO 9001, following ISO 19011 by someone who knows the systems and processes underneath.
The question we hear
“Our audit programme needs an auditor who is independent of the system and understands what it covers.”
What we do
Of ISO/IEC 42001, ISO/IEC 27001 and ISO 9001 management systems, singly or integrated.
Before a certification or surveillance audit, so the gaps are known and closed first.
Of a management system, a process or a control set: whether it does its job, beyond conforming.
For ISO 9001 holders: a clearly scoped assessment of an existing system against the 2026 edition.
How it runs
The standards ask for internal audits at planned intervals, with a programme that weighs the importance of the processes, the changes affecting the organization and the results of previous audits; ISO 19011 adds a risk-based view of where to look.
We agree the scope, criteria and schedule with you, following ISO 19011:2026, sample evidence in interviews, records and the systems themselves, grade the findings, and close with a meeting.
The timetable depends on scope, criteria, the people and evidence available, and the number of sites and systems. It is agreed in the audit plan, not promised in advance.
What you get
- The agreed audit plan
- Evidence-based findings: nonconformities, observations and opportunities for improvement, each traceable to its evidence
- A clear report
- A closing meeting
- A defined schedule
- For ISO 9001 transitions, the list of gaps against the 2026 edition
What you provide
- The system's documents
- Time with the people who run the processes
- A contact person
Three things, kept apart
| Who | What it gives you | |
|---|---|---|
| Internal audit | Valment, as your independent internal auditor | Evidence for your audit programme and an honest view of conformity and effectiveness |
| Independent assessment | Valment | A read on a system, process or control set outside the audit programme |
| Certification audit | An accredited certification body, under its own authority | The certificate |
Valment is not an accredited certification body and does not issue ISO management system certificates.
We don't audit a system we designed or implemented, and we keep a register of the organizations we have consulted for. Where there is a conflict, we say so and point you to another auditor.
What we offer is the list above. What we hold is on the About page, in the exact wording PECB uses for each grade. What each assignment needs, we confirm before we accept it: before we take an audit, we confirm that the auditor's qualifications, sector experience and independence fit the standard, the scope and the sites. If they don't, we say so.
No certification-body approval is needed to offer internal audits, and none is implied.
Send us the standard, the scope and the date of your next external audit. We'll come back with an audit plan and a fixed scope.
Start a conversation
The standard, the scope and the date of your next external audit are enough to begin. We'll come back with an audit plan and a fixed scope.