9.2 Internal audit

Clause 9.2 mandates that an organization plan and perform internal audits of its Business Continuity Management System to verify conformity with the BCMS policy, objectives and applicable requirements, record audit findings, and ensure corrective actions are taken and reported to top management.