Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance Mastering Internal Audits for ISO Standards | Interview with Carlos Cruz
15 snips
Dec 2, 2025 Carlos Cruz, founder of Metanoia Consulting, shares his 35 years of expertise in ISO management systems. He discusses the critical importance of internal audits for ensuring compliance and effective systems. Key insights include setting clear audit objectives, the necessity of audit checklists, and strategies for preparing audits to gather evidence. He also highlights the role of AI in enhancing audit productivity and encourages consultants to incorporate audits into their services for continued growth and revenue.
AI Snips
Chapters
Transcript
Episode notes
Treat Claims As Leads, Not Proof
- Verbal answers are not facts; auditors must seek corroborating evidence but interviews remain crucial.
- Combine records with interviews to understand whether training and procedures actually change behavior.
Write Reports That Prove Your Due Diligence
- Write audit reports that list conformities, nonconformities and opportunities for improvement with supporting evidence.
- Include positives to show due diligence when no nonconformities exist.
Keep Independence When Identifying Root Causes
- Avoid prescribing root causes or corrective actions as the auditor to maintain independence.
- Suggest possible areas to investigate but leave root-cause analysis to the organization.