Internal audit software: plan audits, follow up findings

Features

What you do with Audits

Programme and cycle coverage

The programme block shows what is planned, completed and overdue per year. Coverage over the cycle shows which clauses and processes have been audited over 1, 3 or 5 years, based only on completed audits.

Checklist from your standards

Questions are built from the selected standards, per clause or per assessment criterion, or from a template. AI can suggest extra questions that fit your scope.

Preparation that fills itself

For each audit, BrydgeOne collects what is going on around the scope: open findings, open actions, complaints, incidents, risks, changes, document revisions and compliance requirements.

Findings with a severity ladder

Record findings from strength to major. A minor finding requires a corrective action, a major one a CAPA and a critical one a CAPA with escalation.

Check earlier findings for effectiveness

Bring earlier findings along with a reason and assess whether the measure was effective. If it was partly or not effective, BrydgeOne suggests next steps such as reopening a CAPA or reassessing the risk; you decide.

Report and re-audit

The audit report builds itself from the audit data, plus your own conclusion. If a re-audit is needed, you create it in one click with the same scope and the open findings as checkpoints.

In practice

How it works

1
Plan the audit
Plan an audit and choose the audit type, the standards in scope, the auditor with a note on independence, and the scope, objective and criteria.
2
Prepare
Link what prompted the audit, such as an incident, complaint or risk, and review what is going on around the scope in the preparation block.
3
Carry out
For each question you record objective evidence, a conclusion, the process owner and attachments. For a nonconformity you record a finding straight away, with or without a follow-up action.
4
Report
When you export, you write your conclusion and download the audit report. The rest of the report comes from the audit data.
5
Follow up and close
Findings move from open through action in progress and closed to verified. You can only close the audit once the pre-closure check has no open points left.

A selection of what AI does in Audits

In Audits, AI proposes extra audit questions and answers questions about your audit figures; you decide what goes into the checklist.

Draft extra audit questions

With the button that adds AI questions, AI drafts extra questions that fit the scope of your audit.

Own group in checklist

Questions from AI sit in their own group, next to template questions and your own.

Questions about audit figures

On the AI tab you ask questions about your own audit figures and get an answer from your own data.

This is a selection of the AI capabilities in this module, not everything. AI suggests, you decide. Nothing is applied without your approval.

Standards and legislation

Where it helps you

BrydgeOne contains no text of the standards. Here you see which topics from standards and legislation this module helps you with.

ISO 9001

The audit programme, checklists, findings and reports are evidence for internal audit (clause 9.2).

ISO 14001

One audit can cover ISO 14001 and other standards at the same time; coverage is tracked per standard (clause 9.2).

ISO 45001

Findings are followed up in a traceable way with actions or CAPAs and an effectiveness check (clause 9.2).

VCA

With the VCA audit type you also plan and record VCA audits in the same programme.

One platform

Works together with

Every module works on its own. Switch on more and they fill each other in automatically.

ActionsFindings become mandatory actions or CAPAs with an effectiveness check Standards frameworkChecklists come from standard clauses; findings update clause status Risks & opportunitiesRisks steer planning; findings create or raise risks ProcessesAudits per process, with coverage and unaudited processes Management reviewAudit results and findings feed the management review AutomationNew findings trigger rules that create a CAPA automatically Incidents & reportsIncidents inform planning, checklists and preparation Quality reportsComplaints inform planning, checklists and preparation Document managementDocuments and document changes are part of the preparation Audit-ready checkPlanned audits and open findings count in the check Management of ChangeOngoing changes appear in the audit preparation StakeholdersRequirements from the requirements register inform audit planning

Knowledge base

Read more about Audits

What is a QHSE platform and what should you look for when choosing one?QHSE stands for Quality, Health, Safety and Environment. A QHSE platform brings the work on all four topics together in one environment. This article explains what such a platform does and what to look for when you choose one. QHSE software or Excel: when should you switch?Almost every QHSE system starts in Excel, and that is perfectly fine. Yet there comes a point where the spreadsheets cost more work than they save. This article helps you recognise that point. Carrying out an internal audit: step-by-step plan and checklistAn internal audit tests whether your management system does what you agreed and whether it works. With a fixed plan it becomes a source of improvement rather than a paper exercise. This article walks through the seven steps, with a checklist. Introducing ISO 9001: how to set up a quality management systemISO 9001 is the most widely known standard for quality management. It helps you deliver consistently what customers expect and keep getting better. Here is how to set up a system that fits your organisation instead of a pile of documents. CAPA: how to follow up corrective and preventive actions effectivelyCAPA stands for Corrective and Preventive Action. It is how you solve a problem for good and stop it from coming back. This article walks through the route from report to root cause, action and effectiveness check. Writing an audit report: structure, phrasing findings and an exampleWriting an audit report means turning what you saw, heard and checked into a text that others can act on. A good report is short, factual and traceable, and also says what works well. Here is how to structure it and phrase your findings. Evaluating suppliers: criteria, scoring model and an example scorecardEvaluating suppliers means establishing, at fixed moments and with fixed criteria, whether a party delivers what you need. What you buy or outsource stays your responsibility towards the customer. Here is how to build an evaluation that stays workable. Document control for your management system: versions, approval and reviewDocument control in a management system ensures that employees always work with the current, approved version. ISO 9001 speaks of documented information and mainly asks for control, not a mountain of paper. Here is how to arrange it practically. Management review: example with agenda, inputs and minutesA management review is the moment when top management checks whether the management system works and where it needs adjusting. Below you will find the inputs, an example agenda and short minutes, so you can build your own version right away. Preparing for a certification audit: checklist for the final weeks and the day itselfPreparing for a certification audit is mostly about making sure you can show what you already do. This guide gives a checklist for the final weeks and audit day, describes what auditors often ask and explains how to handle findings. Setting up a legal and regulatory register: know which obligations apply to youA legal and regulatory register shows which binding obligations apply to your organisation and whether you comply. Here you will read how to determine what applies to you, how to set up the register and how to keep it up to date. Food defense and food fraud: the difference, and how to assess them with TACCP and VACCPFood defense and food fraud are about deliberate threats to food, unlike food safety, which is about unintentional hazards. With TACCP you assess attacks and with VACCP your vulnerability to fraud. Here you read the difference, the approach, example measures and what to document. What does QHSE software cost? Pricing models, extra costs and comparing quotationsThe price of QHSE software depends on the pricing model (per user, per module, per site or a fixed package), the number of modules and what is included in the price. There is no fixed market price. Compare quotations on the total cost over three years, including implementation, training and support, and not on the lowest monthly price. Safety Culture Ladder explained: the steps, step 3 and how to startThe Safety Culture Ladder (SCL) is an assessment model from NEN that shows how mature an organisation's safety culture is, on five steps from pathological to progressive. A certification body mainly assesses behaviour and culture, through conversations and observations. Clients in construction, infrastructure and rail, among others, sometimes ask for a minimum step in tenders, often step 3. Registering and handling a nonconformity: steps and an NCR exampleA nonconformity is a situation in which a requirement is not met, such as a specification, a procedure, a legal requirement or a customer agreement. You record it in an NCR (nonconformity report), limit the damage straight away, find the cause, take a corrective action and close it only once the effect has been checked. Below are the steps, the fields of a good NCR form and a worked example.

Glossary

Terms related to Audits

Non-conformityNon-conformity CAPACorrective and Preventive Action Certification bodyCertification body CertificationCertification Corrective actionCorrective action Management reviewManagement review Effectiveness checkEffectiveness check Internal auditInternal audit

Frequently asked questions

Questions about Audits

Can we record an external certification audit?

Not as an external audit as such: the module is meant for your internal audit programme. You can use the external audit preparation type to record your preparation, or use the no-checklist option to register the findings from the external report and follow them up.

Can one audit cover ISO 9001 and ISO 14001 at once?

Yes. Select both standards in the scope; coverage is tracked per standard.

How do we ensure auditor independence?

When planning, you record a note on the auditor's independence. This makes you think consciously about not having anyone audit their own work.

What happens to open findings from earlier audits?

The findings tab shows all findings across all audits, with the owner and deadline from the linked action in Actions. In a later audit you bring them along to check effectiveness.

Start small

Start with just Audits and expand when you want

You do not have to set up everything at once. Switch this module on, add other modules later and keep using the same data and the same app. BrydgeOne fits every organisation, from a small company to enterprise, and you only pay for what you switch on, from € 49 per month.

AuditsStart hereActionsAdd laterStandards frameworkAdd laterRisks & opportunitiesAdd laterProcessesAdd later

See Audits in your own situation

You only pay for the modules you switch on, from € 49 per month. In a demo we show how it works with your own processes.

Book a demo See pricing

Safety

More modules

Workplace inspectionsCarry out inspections with clear checklists. LMRALast-minute risk analysis before the job. Toolbox talksShare toolbox talks and record attendance. Hazardous substancesManage safety data sheets (SDS) and exposure. Certificate managementTrack the validity of diplomas and inspections. Skills matrixKeep skills and training up to date.

All 46 modules