Is having a documented internal audit procedure a requirement for management systems?

The focus of this question is on the necessity of having a documented internal audit procedure within management systems, particularly in the context of ISO 9001. While having an internal audit procedure is an essential component of a quality management system, the standard does not explicitly mandate that the procedure must be documented. Instead, ISO 9001 emphasizes the need for organizations to conduct internal audits to assess the effectiveness of their management systems and ensure compliance with established processes.

This flexibility allows organizations to determine the best approach that suits their operations and context. For instance, smaller organizations might conduct internal audits informally or without a formal written procedure, as long as they are effectively meeting the requirements of the standard and ensuring continuous improvement.

Therefore, the statement that it is a requirement to have a documented internal audit procedure is not true, making the correct answer to the question that it is not strictly necessary to have such documentation.