News and Blogs
Internal Audit: The “Us on Us” Check Every System Needs
The XOXO Journey
At XOXO, the journey toward quality had been intentional.
The organisation had successfully established its Quality Management System (QMS). Staff were trained first on implementation, and then on internal auditing. With structured guidance, processes were defined, responsibilities assigned, and expectations aligned with ISO requirements.
Everything looked right. But at XOXO, there was a clear understanding:
A system is not proven when it is written.
It is proven when it is demonstrated.
The Day the System Was Put to the Test
The internal audit was not an afterthought. It had been planned!
An audit programme had already defined when audits would take place and which processes would be reviewed. From this, detailed audit plans guided each audit activity, what to check, where to go, and what criteria to use.
So when the day arrived, it was not a search for problems. It was a structured evaluation.
The “Us on Us” Check
Internal audit is an “Us on Us” check.
It is XOXO evaluating XOXO, using its own trained personnel, but in a way that is systematic, independent, and evidence-based.
It is not random. It is not opinion-based. It is not assumption-driven.
It is a documented process of obtaining objective evidence and evaluating it against defined requirements (criteria).
What the Auditors Were Really Looking For
As the audit began, the auditors, with all the necessary attributes and well structured check-list, did not walk in asking: “Where are the problems?”
Instead, they asked: “Show us how this requirement is being fulfilled.”
They looked for conformance. They reviewed processes, observed activities, and examined records, not to catch people, but to confirm that what was planned was actually being done.
In many areas, conformance was clearly demonstrated. Processes aligned. Records supported actions. The system was alive.
When Does a Nonconformity Appear?
At XOXO, the auditors understood something very important:
They were not there to look for nonconformities, but to confirm conformance.
A nonconformity only appeared when conformance could not be demonstrated.
When a requirement existed, but there was no evidence to support it.
When a process was defined, but not followed as intended.
When something was claimed, but could not be shown.
Only then did the conversation shift. And even then, it was not about fault. It was about understanding.
From Evidence to Improvement
Each identified gap led to deeper thinking:
- What requirement was not met?
- What evidence was missing?
- Why did this happen?
And from there, corrective actions were defined, not just to fix the issue, but to address its cause. Because the purpose of audit is not to expose weakness.
Audit is to strengthen the system through truth and evidence.
What the Audit Was Quietly Verifying
As the audit progressed, it became clear that it was answering fundamental questions:
- Are we truly implementing the requirements of the ISO standard?
- Can we demonstrate this with objective evidence?
- And is the system effective, are we achieving the intended results?
This is the real purpose of internal audit.
Not inspection. Not policing!
But verification and assurance.
What XOXO Discovered
By the end of the audit, XOXO gained more than findings. It gained confidence.
Confidence in areas where conformance was strong, clarity in areas where improvement was needed and direction for strengthening the system.
Because now, everything was based on evidence, not assumption.
Final Reflection
Internal audit is not about going to look for problems. It is about going to confirm what is working. It determines whether the QMS conforms to the organisation’s own requirements and the ISO standard, and whether it is effectively implemented and maintained.
And where something cannot be demonstrated, it becomes an opportunity to improve. That is the power of the “Us on Us” check, because at any point, XOXO can now say:
We are not just saying we have a system.
We are showing it.
We are proving it.
And we are improving it.
Finally XOXO was prepared for “Them on Us”: the external certification audit!