Why Internal Audits Matter

I recently completed my ISO 9001 internal auditor recertification, having done my first first certification in 2013. It was a good reminder that while systems, tools, and terminology evolve, the fundamentals of quality management don’t. Strong internal structures and objective auditing remain essential for any business that wants to run efficiently and stay competitive.

It’s easy for internal systems to become background noise as many assumed to be working just because things haven’t gone off the rails. But without proper structure, you’re inviting chaos. Good internal systems provide clear accountability, streamlined processes, better risk control, and clear data to improve decision making. Not forgetting compliance, which means there won't be a need to scramble to meet ISO requirements when the auditor comes knocking on your door.

Without that structure, your operations are built on assumptions and memory. As we all know, assumptions make an ass of you and me.

An internal auditor isn’t just someone ticking boxes for certification. A good auditor is someone who checks your businesses' system performance. Using this information, they can identify opportunities for improvement, as well as highlight inefficiencies. An effective audit provides business owners with a clear-eyed view of what's really happening. This in turn helps drive smarter decision making, aiding in long term growth.

But objectivity doesn’t just apply internally.

As someone who also audits suppliers, I’ve learned that objectivity becomes even more critical when external relationships and commercial interests are involved.

For example, I once audited a supplier that provided us with very competitive quotes for projects in a specific sector, but their document control system was a mess. From a pure compliance standpoint, it was a clear nonconformance. But commercially, this was a critical supplier with no real alternative in the short term.

What did I do? I had to flag the issue, document it, and raise a corrective action but without escalating it to the point of damaging the relationship. The key is staying objective. Don’t ignore issues just because a supplier is “too important.” At the same time, understand the bigger picture, and not fixate on every small detail.

In the end, internal audits regardless whether inside your own company or with suppliers, only work if they’re honest, structured, and aligned with business priorities. The goal isn’t to catch people out. It’s to improve how things run.

After revisiting ISO 9001 more than a decade later, the message is clear: structure and objectivity still matter. Probably more than ever.