# Clause 9.2.1: General

Hold internal audits at planned intervals to find out whether the BCMS satisfies both the standard and what the organization itself requires of its BCMS, and whether it is put into practice and kept up effectively.

Cloud: The general audit requirement is that the programme is planned and impartial. Add cloud dependency as an explicit audit criterion so it is not left to the auditor's discretion.

Evidence: Audit schedule with planned intervals and evidence of adherence; Audit reports addressing conformity to internal requirements, to the standard, and to effective implementation; Coverage map showing the whole BCMS is audited across a cycle.

Test: Confirm cloud dependency is a named criterion in the audit plan.

Citation: ISO 22301:2019, clause 9.2.1. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.