Plan the audit. Run the report. Lock the record.
Internal and external audits against ISO® 27001 and TISAX® on the same form - with audit-lock and a versioned history from the first entry. 98.7% pass on first attempt.
Three phases. One record. One trail.
Click a phase to see what happens on the screen and what the audit carries forward to the next one.
- PlanScope, criteria, team, period.
- RunReport, references, evidence.
- LockStatus: completed. Record frozen.
Phase 01 - Plan
Open the audit.
Set what this audit covers, against which standard, who runs it, when. Internal or external, same form.
In Valiido
Create an audit. Fill in title, period, type, scope, criteria, method, team, budget. The audit lands on the timeline alongside last year's.
- Internal or external, one form
- Period and team named on the record
- Lives next to every past and planned audit
Phase 01 - Plan
Open the audit.
Set what this audit covers, against which standard, who runs it, when. Internal or external, same form.
In Valiido
Create an audit. Fill in title, period, type, scope, criteria, method, team, budget. The audit lands on the timeline alongside last year's.
- Internal or external, one form
- Period and team named on the record
- Lives next to every past and planned audit
Phase 02 - Run
Write the report on the record.
Walk the scope, capture what you saw, link the records you sampled. The report and the references sit on the audit itself.
In Valiido
Write the audit report in the rich-text content field. Reference any policy, control, risk, asset, incident, or task - the links stay live and the auditor clicks straight through.
- Rich-text report inside the audit
- Live links to policies, risks, assets, tasks, vendors, KPIs, management reviews, incidents
- AuditMagic in the tab next door, findings grouped by resource
Phase 03 - Lock
Lock the record.
When management signs off, set status to completed. The audit locks; any later change is logged.
In Valiido
Flip status to completed - title, period, type, scope, criteria, method, team, budget, and the report are frozen. Every change after that lands in the version history with author and timestamp.
- Status change locks every audit field
- Versioned history with author and timestamp
- Unlock only by flipping status back to planned
Report on the audit itself. Locked on completion.
Write the audit report straight on the audit - headings, lists, tables, embedded evidence. Set the audit to completed and the editor closes; the audit-lock banner sits on top of the report.
- Rich-text report inside the audit, no external Word file
- Embedded images, lists, tables, and attachments
- Locked on completion - the auditor sees the same version management did
- Versioned from the first entry to the lock
A completed audit report with the lock active.
Start with Valiido today.
Six occasions. Two types. One form.
Internal audit, surveillance, recertification, supplier and customer audits, management review - all of them fit the same form in Valiido. Audit type is Internal or External; the rest is scope and criteria.
Internal audit cycle
One per ISO® 27001 chapter or TISAX® area, annual or rolling.
ISO® 27001 9.2 · TISAX® ISA 6
Supplier audit
Critical vendors, optionally with subcontractor chain and on-site visit.
ISO® 27001 A.5.19 - A.5.22
TISAX® self-assessment
Your own rating against the VDA® ISA catalog before the TISAX® audit.
TISAX® ISA 6 self-assessment
Surveillance audit
Sampling by the certification body in years 1 and 2 after initial cert.
ISO/IEC 27006
Recertification
Full scope every three years. You arrive with two years of live trail.
ISO/IEC 27006
Customer audit
Enterprise customers auditing your scope - documented on the same audit form.
TISAX® label assignment
Switch the type - fields, version history and audit-lock stay the same.
Audits in Valiido - one record, one seal, one trail.
Everything an audit needs sits on one record. Closing it locks the fields; every later change carries author and timestamp.
Internal or external, same form
Set the audit type to Internal or External - the rest of the form stays the same. Same fields for title, period, scope, criteria, method, team, budget.
Understand the Standards
Assessment and Planning
Documentation and Implementation
Ongoing Compliance
Report on the audit itself
The audit report sits inside the audit, not in a separate Word file. Rich text, images, tables - always at the current version.
Live references from the ISMS
Policies, risks, tasks, assets, vendors, incidents, KPIs, management reviews - link them straight from the audit. References stay live, not snapshot.
Status change locks the record
Set status to completed - the audit locks. Title, period, scope, criteria, method, team, budget, report: all frozen until you flip the status back.
Definition of Scope- Risk management procedure
Risk assessment- Training concept
- Audit program
Versioned history, every edit kept
Every change to the audit lands in the version history, with author and timestamp. What the auditor sees is traceable, not just signed off.
1,200 projects completed700+ satisfied clients
AuditMagic in the same module
The AuditMagic tab sits right next to your audits. It checks every object instantly against Valiido best practices, ISO® 27001 and TISAX®, with a full report every Monday.
What an ISMS usually costs.
You can pay consultants, buy template packs, or start from zero. Or you can use Valiido.
Consulting project
€15,000 - 25,000
per project, plus your time
Template pack
€800 - 2,000
plus rewrite work, no updates
Valiido
from €149/month
flat rate, 50 employees included (€124/month billed annually)
Common questions about audits in Valiido
How an audit cycle runs on Valiido, what your auditor sees, and what happens after the audit closes.
One record. One seal. One trail.
Pick a plan, open the first audit, write the report. €149/month flat for up to 50 employees. No setup call, no consultants.
Lock the audit when you are done. Every later change carries author and timestamp - the file you show next year is the file management signed off.
- Internal and external on one form
- Status change locks the record
- €149/month flat, up to 50 employees
