ISO Internal Audits Australia

Independent ISO 9001 and ISO 27001 internal audits for businesses across Australia and New Zealand. UMISUS audits your management system the way a Certification Body will, so problems are found by you, not at your surveillance or recertification audit. Delivered remotely by Jack Yumulu, with a clear report and practical next steps.

Is this you?

  • Your surveillance or recertification audit is coming up and you need an internal audit first.

  • Nobody in your team is independent of the areas being audited.

  • Your last external audit raised findings and you want a fresh, objective check.

  • You built your system yourself, or with another provider, and want an expert second opinion.

How an internal audit works

  1. Scope and plan: we agree the standard, the scope, the dates and who needs to be involved, and you receive a fixed fee proposal.

  2. Document and evidence review: your policies, procedures, records, previous audit reports and corrective actions, reviewed before any interviews.

  3. Interviews and sampling: short online sessions with the people who do the work, following real records from start to finish.

  4. Clear report: nonconformities, partial conformances and opportunities for improvement, written in plain English with the evidence behind each one.

  5. Close out support: help prioritising and closing findings before your Certification Body arrives.

Why businesses choose UMISUS

  • Independent and objective: an external auditor meets the impartiality expected of internal audits, without pulling your own people off their work.

  • Both standards: ISO 9001 quality and ISO 27001 information security, including integrated systems.

  • Experience you can rely on: Jack Yumulu has more than twenty years of experience with quality and information security management systems.

  • Fast turnaround: remote delivery means no travel time and no waiting for a site visit.

  • Fixed fee, quoted on request: highly competitive because UMISUS has no office overheads.

Recent internal audits

ISO 27001: Redactive Operations (Quarterzip AI), an AI and data security SaaS business in Melbourne, and Send Payments, a regulated international payments business in Sydney.

"Had a great experience with Jack. Process was easy and the turn around was fast. Would use again." Robert Koch, Google review

ISO 9001: internal audits for EPDM, a Victorian manufacturer UMISUS has supported since 2019.

Frequently asked questions

Is an internal audit mandatory?

Yes. Both ISO 9001 and ISO 27001 require planned internal audits, and your Certification Body will ask to see the results.

Can our internal auditor be external?

Yes. Many small and medium businesses use an external auditor because it is the simplest way to show the audit is objective and impartial.

How long does an internal audit take?

It depends on your scope, size and the standard. Smaller systems can often be audited over a few days, including the report. We confirm the timing in your proposal.

Can you audit a system another consultant built?

Yes. UMISUS regularly audits systems built in house or by other providers.

Do you also implement ISO 9001 and ISO 27001?

Yes. See ISO 9001 consulting and ISO 27001 consulting.