An ISO 27001 internal audit involves a thorough examination of your organization’s ISMS to ensure that it meets the Standard's requirements. Unlike a certification review, it's conducted by your own staff, who will use the results to guide the future of your ISMS.