● 0 = No internal audit process exists and no audit performed.
● 1 = Internal audit procedure missing but process is set and works from experience. Process walkthrough by supervisor.
● 2 = Internal audit process is covered by written procedure. Internal audit conducted by designated employee/supervisor but no proper training provided; audit plan is not up to date; no detailed checklist for audit; no corrective action for issues found during audit.
● 3 = Periodic internal audit conducted by designated person (minimum at least once per year) with up to date internal audit schedule with proper checklist; auditor trained by certified auditor; proper CA/PA identified and fixed; reports to top management. The action plan status is tracked, verified, and reported. Findings are closed on-time and verified periodically.
● 4 = Periodic internal audit conducted by certified auditors (minimum at least once per year) and make necessary changes accordingly due to CA/PA; audit schedule in place; up to date audit activities; audit checklist; consideration of previous audits results; analysis and review of audits and reports out to leaders; review of audit procedure and make necessary update accordingly. "