The laboratory shall hold internal audits at planned intervals to find out whether the management system meets the laboratory's own requirements, laboratory activities included, and the requirements of this document, and whether it is implemented and maintained effectively. It shall plan, set up, carry out and maintain an audit programme covering how often audits happen, the methods, who is responsible, planning requirements and reporting, and taking account of how important the activities are, of changes that affect the laboratory, and of what earlier audits found. For each audit it shall set the criteria and scope, report the results to the management concerned, carry out correction and corrective action promptly, and keep records of the programme and of the audit results.
This control maps to 3 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.