The organization shall plan, establish, implement and maintain an audit programme including frequency, methods, responsibilities, planning requirements and reporting, taking into account the importance of the processes concerned and the results of previous audits; define the objectives, criteria and scope of each audit; select auditors and conduct audits to ensure objectivity and impartiality; and ensure results are reported to relevant management, which can include the compliance function, top management and the governing body. Documented information shall be kept showing that the programme was implemented and what the audits found (ISO 19011).
This control maps to 42 controls across 26 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.