Audits & Corrective Actions

Audits run themselves, findings become tasks, and tasks close through verified sign-off.

From audit planning to CAPA closure, the assistant runs the workflow. You get a scored audit report, colour-coded non-conformities, and corrective actions routed to the right department automatically.

audit · ISO 27001 · Site A
status
Clauses evaluated
Findings4 non-conformities
  • NC-014Missing MFA on admin accountsMajor
  • NC-021Access review overdueMinor
  • NC-035Log retention below targetOFI
  • NC-042DR test evidence not filedMinor
Corrective actionsrouted to owners
  • IT Ops
    CAPA · NC-014
    due 7d
  • HR
    CAPA · NC-021
    due 14d
  • Platform
    CAPA · NC-035
    due 30d
  • Facilities
    CAPA · NC-042
    due 10d

Traditional ICMS is a workflow. ICMS AI is a conversation.

Traditional workflow

You navigate the app.

  • Audit calendar in a spreadsheet, chased by email
  • Findings captured on paper and re-typed into a system later
  • CAPAs assigned by phone, tracked in inboxes
  • Closure meetings needed to confirm every action

ICMS AI · agentic

You just ask.

  • Ask: "Run the Q4 internal audit for Site A on ISO 27001"
  • The assistant executes the audit clause by clause, capturing evidence
  • Non-conformities are classified by severity, assigned, and scheduled
  • Corrective actions are tracked to verified closure with sign-off

How it works.

  1. 01

    Plan and schedule

    Audit calendar built from your certification cycle, framework coverage, and internal cadence. Reminders go out automatically.

  2. 02

    Execute clause-by-clause

    Each clause is scored with evidence attached. NCs are raised with severity (Major, Minor, OFI, Observation) and a suggested corrective action.

  3. 03

    Route the CAPA

    Each finding becomes a corrective action plan (CAPA) with an owner, deadline, and progress tracker. The assistant nudges owners as due dates approach.

  4. 04

    Verified closure

    CAPAs close through a maker-checker-approver workflow with evidence of remediation attached. The Internal Audit and NC reports generate in one click.

What you get.

Turns the audit-to-closure loop from a quarter of paperwork into a live workflow.

  • Audit calendar and planning across every site and framework
  • Scored clause-by-clause checklist execution
  • NC severity classification (Major, Minor, Observation, OFI)
  • CAPA workflow: Maker · Checker · Approver
  • Internal Audit and NC reports generated automatically
  • Findings routed to the owning department without manual triage

See it on your standards.

Talk to us about running this on your compliance programme.