The audit plan is used to plan internal and external audits for the year. It is a record of the plan and of completion. It is used to manage resources, communicate the plan and record that audits happened. Audit’s are planned based on risk. You are going to want to schedule your audits based on risk but also based on resource availability. Also take into account when external audits will happen.

For the document contents see the description below. A document extract is in the images to the left.

You may also like the full ISO 27001 ISMS document template pack for all 26 ISO 27001 ISMS documents.