1. createdplanned -> planned
Internal audit record opened from the Q2 ISMS readiness review.
ISO operating records
Internal audit, management review, and CAPA evidence that proves the ISMS is operating.
ISO 27001 operating-record cockpit
Turn ISMS readiness gaps into dated records with owners, due dates, linked evidence, status transitions, and closure proof before an auditor samples the file.
2
1
12
6
Lifecycle queue
3 records ordered by closure riskManagement reviewManagement review action MR-01
Management review approved risk-treatment priorities and requested closure evidence.
Pending closureDue 01 Jul 2026
9.3Internal auditQ2 internal audit finding A-01
Internal audit observed incomplete evidence-linking for privileged access review samples.
Pending verificationDue 15 Jul 2026
9.2CAPACAPA C-02 phishing simulation coverage
CAPA closed after phishing simulation coverage gap was remediated and verified.
closedDue 21 Jun 2026
10.1Internal audit
Pending verificationQ2 internal audit finding A-01
Internal audit observed incomplete evidence-linking for privileged access review samples.
Compliance LeadOwner
9.2ISO requirement
B.3.6Source CTM control
15 Jul 2026Due date
Linked evidence
B.3.6:manual:manual://iso27001/internal-audit-plan-q2.pdfImmutable event trail
2. Finding recordedplanned -> in progress
Finding logged: access-review sample evidence needs owner attestation.
3. Action recordedin progress -> in progress
Access owner assigned to attach signed review evidence and remediation note.
4. Evidence linkedin progress -> in progress
Signed owner attestation linked for verification.
5. Status changedin progress -> Pending verification
Ready for independent verification before closure approval.