Audit management covers the planning, execution, finding-recording, and remediation tracking for internal compliance audits, external regulatory audits, management reviews, and certification audits (ISO 45003, ISO 45001).
(Confirm internally: the exact UI location for audit management has not been validated. The capability pack describes the feature; the in-product surface is pending confirmation.)
Supports internal and external audits
Each audit has planning, execution, findings, and remediation phases
Findings link to the relevant controls so corrective actions feed back into the compliance system
Audit types include internal compliance, external regulatory, management reviews, ISO 45003, ISO 45001
Findings drive review cadence on the affected controls
Audit types
Type | Use it for |
Internal compliance audit | Self-audit of your own compliance posture |
External regulatory audit | Audit conducted by a regulator (for example, SafeWork) |
Management review | Periodic management-led review of the compliance programme |
Certification audit | Audits against ISO 45003 (psychosocial) or ISO 45001 (occupational health and safety) for certification |
The audit lifecycle
Each audit moves through:
Planning: scope, dates, auditor, in-scope controls and frameworks
Execution: walkthroughs, evidence review, interviews, observation
Findings: each finding is recorded with severity, affected controls, and required corrective actions
Remediation: corrective actions are assigned as tasks; status tracked until each finding is closed
Findings link directly to the relevant controls so that the resulting reviews and tasks are visible from each control's detail page.
How findings drive the system
When an audit finding is logged against a control:
A review is automatically requested on the control (visible on the Reviews page)
The control's effectiveness rating may be flagged for re-evaluation
Tasks are created for the control owner and any other responsible party
The Recent Reviews tab on the Reviews page surfaces audit-triggered work
This linkage means audit findings do not sit in a parallel system; they integrate into the same compliance flow as everything else.
Related articles
Conducting a control effectiveness review (4.5)
Compliance snapshots (6.8)
The Quarterly Board Report (6.6)
Compiling an evidence pack for a regulator inspection (6.10)