# Internal Audit Execution
URL: https://docs.autociso.io/console/iso/internal-audit/
Description: This is the working page for a single internal audit. Review each ISO 27001:2022 control, record findings and document nonconformities.

*This is the help text the console shows in the help panel on this page.*

This is the working page for a [single internal audit](https://docs.autociso.io/console/iso/internal-audits/). Review each ISO 27001:2022 control, record findings and document nonconformities.

### Control Statuses
Filter the checklist by status:
- **OK**: The control is implemented and effective, no finding.
- **Observation**: A minor weakness or improvement opportunity, not a formal nonconformity.
- **Minor NC**: A nonconformity that does not prevent the ISMS from achieving its intended outcomes.
- **Major NC**: A nonconformity that indicates a systematic failure or absence of a required control. Must be resolved before certification.
- **Not Reviewed**: Not yet assessed in this audit.

Open a control to set its **Auditor Status** and add **Notes**, then click **Save**.

### Nonconformity Tracker
For a control with a Minor or Major NC, fill in the **Nonconformity Details** (Description, Root Cause, Corrective Action, Owner ID, Due Date) and click **Save NC**. Saved nonconformities appear in the **Nonconformity Tracker** at the bottom of the page, where you can click **Close** once one is resolved.

### Signing the Report
The **Sign Audit Report** button appears once every control has been reviewed (no control left as Not Reviewed). Confirm in the "Sign as Internal Auditor?" dialog by clicking **Sign Report**. This finalizes the audit, generates a signed PDF report and creates evidence in the [Evidence Vault](https://docs.autociso.io/console/iso/evidence/). It cannot be undone. After signing, use **Download PDF** to save the report.