Loading...

ISO consulting and assurance · ISO 9001:2026

ISO 9001:2026 internal audit for companies in Colombia

We audit your quality management system (QMS) against ISO 9001:2026, with a fixed scope, a findings report with evidence and an action plan. For companies that are already certified and for those heading to their next external audit.

What is an ISO 9001 internal audit?

It is the planned, documented verification that an organization's quality management system (QMS) meets the requirements of ISO 9001:2026 and the organization's own requirements, and that it is effectively implemented and maintained. Clause 9.2 of the standard requires it at planned intervals, and it ends in a report with findings and evidence that feeds the improvement of the system.

ISO 9001:2026 was published on 16 September 2026 and replaces ISO 9001:2015; 2015 certificates remain valid during the transition period, whose dates are set by your certification body. Your internal audit is one of the pieces of evidence that body reviews in surveillance and renewal audits: doing it on time and with an auditor independent of the system's operation lets you fix issues before the finding reaches the external audit.

Who is it for?

Companies already certified in ISO 9001

  • That must audit every year and tend to leave it to the last minute.
  • That need an auditor independent of the QMS operation, to gain objectivity.
  • That want to reach the surveillance or renewal audit without surprises.

Companies preparing to be audited by a third party

  • That have an external audit coming up and want nonconformities to surface beforehand.
  • That want to audit only where the risk is: critical processes or suppliers.
  • That manage several standards and want to coordinate their internal audit.

Three audit formats, with a fixed scope

Each format has its scope, timeline and deliverables defined from the proposal. You choose according to where your company is; nothing is mandatory.

2 days + 2 business days

Flash Check

Express internal audit to meet your annual requirement with clear findings.

  • Fixed scope: 1 standard and critical processes
  • 2 days of audit, remote or on-site
  • Report with classified findings and evidence, within 2 business days
  • Suggested action plan
3 days + 2 business days

Focused Audit

Audit by risk or critical topic to audit only where the risk is.

  • Topic selected based on risk and previous findings
  • 3-day audit of the controls and processes for the topic
  • Report with evidence and priorities, within 2 business days
  • Corrective recommendations
4 days + 2 business days

Dress Rehearsal

External audit simulation so nonconformities show up here and not on audit day.

  • 4 days of simulated audit using the certification body's criteria
  • Findings report with severity level, within 2 business days
  • Preparation session for the audited team
  • Closure verification at 30 days

The timelines are FORQUANTIQ consulting time. The proposal confirms the timeline according to your scope. Want to see the full portfolio? See the products for certified companies.

What you receive

  • Fixed plan and scope, agreed in the proposal before work begins.
  • Audit report with classified findings and the evidence that supports them, within 2 business days.
  • Action plan to turn the findings into concrete actions.
  • Results meeting to review the report and the priorities.
  • Closure verification at 30 days (in Dress Rehearsal).
  • Confidentiality agreement before we start, and data processed in accordance with Colombian Law 1581 of 2012.
  • An optional next step: quarterly follow-up (Quarterly Pulse) or an annual program (Annual Cycle), if it helps you.

How we work

  1. Proposal and fixed scope. We define with you the format, the processes or topic to audit, the timeline and the deliverables. Any scope extension is agreed in writing before it is carried out.
  2. Audit planning. The criteria are the requirements of ISO 9001:2026 that apply to your quality management system and your organization's own requirements. If your system is still certified to the 2015 edition, the proposal defines the criteria during the transition.
  3. Execution. We audit the processes and controls within the agreed scope, remotely or on-site depending on the service, and record the evidence for each finding.
  4. Report and action plan. Within 2 business days we deliver the report with classified findings and evidence, together with a suggested action plan.
  5. Results meeting. We review the report and the priorities with you.
  6. Closure verification. In Dress Rehearsal, we verify the closure of the findings at 30 days.

Who audits and what we do not do

Certified internal auditors

The audit is performed by internal auditors certified in ISO 9001. It is a personal certification of the auditors.

What we do not do

FORQUANTIQ does not issue ISO certificates. Certification is granted by an accredited body of your choice. Our internal audit prepares your company and does not replace the certification audit.

Frequently asked questions about the ISO 9001 internal audit

What is an ISO 9001 internal audit?

It is the planned, documented verification that an organization's quality management system (QMS) meets the requirements of ISO 9001:2026 and the organization's own requirements, and that it is effectively implemented and maintained. It ends in a report with findings and evidence.

Is an ISO 9001 internal audit mandatory?

For an organization that implements ISO 9001:2026, yes: clause 9.2 requires internal audits at planned intervals. In addition, in certification and surveillance audits the certification body reviews the evidence that this internal audit program was carried out.

How often should an ISO 9001 internal audit be done?

The standard does not set a numeric frequency: it requires planned intervals. The usual practice in certified companies is to audit the scope of the QMS at least once a year, before the external surveillance or renewal audit.

What is the difference between an internal audit and an ISO 9001 certification audit?

The internal audit is commissioned by the organization itself to verify and improve its system. The certification audit is performed by an accredited body of your choice and is the one that grants or maintains the certificate. The internal audit prepares the company, but it does not replace the certification audit.

Is the audit done against ISO 9001:2026 or ISO 9001:2015?

The criteria are defined in the proposal according to the state of your system. ISO 9001:2026 was published on 16 September 2026 and replaces ISO 9001:2015; 2015 certificates remain valid during the transition period, and the dates are set by your certification body.

How long does the internal audit take with FORQUANTIQ?

It depends on the format: Flash Check is 2 days of audit, Focused Audit is 3 days and Dress Rehearsal is 4 days, and in all three the report is delivered within 2 business days. Dress Rehearsal also includes closure verification at 30 days. These are FORQUANTIQ consulting days; the proposal confirms the timeline according to your scope.

Can I request an audit with a limited scope?

Yes. All three services have a fixed scope, agreed in the proposal before work begins. Focused Audit concentrates on a risk or critical topic and Flash Check on one standard and its critical processes.

How much does an ISO 9001 internal audit cost?

Each proposal defines scope, timeline, deliverables and fee before work begins, and any scope extension is agreed in writing before it is carried out. Request your proposal and we will send it with the fee for the scope you need.

Who performs the audit, and does FORQUANTIQ certify in ISO 9001?

It is performed by internal auditors certified in ISO 9001. It is a personal certification of the auditors. FORQUANTIQ does not issue ISO certificates: certification is granted by an accredited body of your choice.

Can you audit a company that is already certified by another body?

Yes. The internal audit, focused audit and external audit simulation services are designed for companies that are already certified and need to meet their annual internal audit or reach the external audit without surprises.

Is the audit done remotely or on-site?

Depending on the service and scope: for example, Flash Check can be done remotely or on-site. The format is defined in the proposal.

How is my company's information handled during the audit?

Under a confidentiality agreement before we start, in accordance with Colombian Law 1581 of 2012 and FORQUANTIQ's personal data processing policy.

Request your ISO 9001 internal audit proposal

Tell us about your situation and we will propose the format that fits best. We reply within 24 business hours.

You can also write to us at info@forquantiq.com.

FORQUANTIQ S.A.S. · The scope, timeline and fee of each service are confirmed in a final proposal before work begins. · Personal data processing policy · Back to home