top of page
Search

How to Conduct an Internal Accreditation Audit: A Step-by-Step Guide

Oct 11
10 min read


Preparing for accreditation should not begin when an external reviewer schedules a visit. Organizations benefit from regularly checking their documentation, processes, and records to identify problems while there is still time to address them.

One way to do this is through an internal accreditation audit.

An internal accreditation audit helps an organization evaluate whether its current practices and supporting documentation align with applicable accreditation requirements. It can reveal missing records, outdated policies, inconsistent procedures, and opportunities to improve internal processes before an external review.

Whether your organization operates in healthcare, behavioral health, education, workforce development, automotive training, culinary education, or another standards-driven environment, a structured internal review can help your team understand where it stands.

In this guide, we'll explain how to plan an internal accreditation audit, review evidence, document findings, and turn results into actionable improvements.

What Is an Internal Accreditation Audit?

An internal accreditation audit is a structured review of an organization's activities, documentation, and evidence against applicable accreditation requirements.

The purpose is to evaluate how well the organization can demonstrate that it meets those requirements and to identify areas that need additional attention.

An internal audit might examine:

  • Policies and procedures.

  • Training and personnel records.

  • Required forms and completed documentation.

  • Committee meeting minutes.

  • Quality improvement activities.

  • Performance data and reports.

  • Required reviews and approvals.

  • Implementation of written procedures.

  • Previously identified gaps and corrective actions.

The exact scope depends on the accrediting body, standards, industry, and organization.

An internal accreditation audit is not necessarily the same as a formal external audit, regulatory inspection, or accreditation survey. It is an internal management tool that helps an organization evaluate its readiness and improve its processes.

Why Should Organizations Conduct Internal Accreditation Audits?

A well-planned internal audit can help organizations identify concerns before they become last-minute emergencies.

1. Identify missing or outdated documentation

A policy may exist, but its approval date could be outdated. A required form may be available, but staff may no longer use it. A report may be generated, but nobody may document the required review.

An internal audit helps identify these situations.

2. Confirm that written procedures reflect actual practice

Documentation should accurately describe how the organization operates.

For example, a procedure might require monthly reviews of a particular record. During the audit, you discover that the reviews stopped several months ago.

The problem is not necessarily the written procedure. The organization must determine why the activity stopped and how to restore and sustain the required process.

3. Improve accountability

An audit can identify responsibilities that are unclear or tasks that nobody consistently owns.

Assigning an owner and a completion date to each finding makes follow-up more manageable.

4. Support continuous readiness

Regular reviews reduce reliance on last-minute document collection and rushed preparation.

Instead of waiting until a survey approaches, your organization can identify and address issues throughout the accreditation cycle.

5. Strengthen organizational systems

An internal audit may reveal opportunities to simplify documentation, improve training, establish clearer workflows, or reduce duplicate work.

The goal is not simply to prepare for an external review. It is to maintain systems that support reliable operations.

Step 1: Define the Scope of Your Internal Audit

Before reviewing documents, determine what the audit will cover.

Trying to evaluate every requirement across an entire organization at once can be overwhelming, especially for small teams with limited administrative capacity.

Start by identifying:

  • The accrediting organization and applicable program.

  • The current standards or requirements.

  • The departments, locations, or processes being reviewed.

  • The time period covered by the audit.

  • The purpose of the review.

  • The people responsible for conducting and responding to the audit.

You may choose to review the entire accreditation program or focus on a specific area, such as documentation management, staff training, quality improvement, or safety procedures.

For a first audit, a manageable scope can make the process easier to complete and repeat.

Important: Always use the applicable, current standards and any official guidance provided by your accrediting organization. Do not assume that requirements from another program or an older standards manual apply to your organization.

Step 2: Create an Audit Checklist

An audit checklist provides a consistent way to evaluate requirements and record results.

For each applicable requirement, identify what the organization must demonstrate and what evidence should be reviewed.

Your checklist might include the following columns:

Field

Purpose

Standard or requirement

Identifies what is being evaluated

Evidence expected

Describes the records or practices that demonstrate compliance

Evidence reviewed

Records what was actually examined

Result

Records the audit conclusion

Finding or observation

Explains any identified concern

Responsible person

Identifies who will follow up

Due date

Establishes a target completion date

Verification

Records how follow-up will be confirmed

Use the wording and evaluation categories required by your accrediting body when applicable.

For an internal tracking tool, you might use simple categories such as:

  • Meets: The reviewed evidence supports the requirement.

  • Needs follow-up: Additional clarification, evidence, or review is needed.

  • Gap identified: The review found a deficiency or missing element.

  • Not applicable: The requirement does not apply, with the rationale documented where appropriate.

Avoid labeling a requirement compliant simply because a document exists. Consider whether the evidence is current, relevant, approved when necessary, and consistent with actual practice.

Step 3: Gather the Required Evidence

Once the checklist is prepared, identify the evidence needed for each requirement.

Depending on the standards, this might include policies, procedures, completed forms, training records, meeting minutes, reports, plans, or other organizational documentation.

For each item, ask:

  • Is the required evidence available?

  • Is it current?

  • Does it relate to the correct program, department, or location?

  • Does it show what the organization actually does?

  • Is there evidence that the required activity occurred?

  • Can authorized staff locate it efficiently?

  • Are the records maintained in accordance with applicable privacy, security, and retention requirements?

Keep a record of what was reviewed. This helps prevent repeated searching and provides a basis for explaining audit findings.

For more guidance on building an organized documentation system, read How to Organize Business Files Digitally.

Step 4: Evaluate Documentation and Actual Practice

An internal accreditation audit should go beyond reading policies.

Compare the written requirement with what happens in practice.

Consider this example:

Written procedure: Staff complete and document a required orientation process.

Evidence available: An orientation procedure exists, but completed orientation records are inconsistent.

Audit observation: The organization may have a process in place, but the available records do not consistently demonstrate that the process was completed.

Follow-up: Determine whether the issue involves training, recordkeeping, implementation, or another underlying cause.

This approach helps distinguish between different problems.

A missing document may require documentation development. An outdated policy may need review and approval. An activity that is not being performed may require a process change, staff training, or additional oversight.

The appropriate response depends on the finding and the applicable requirements.

Step 5: Document Findings Clearly

Audit findings should be specific enough for someone to understand what needs attention and why.

Avoid vague notes such as:

  • Fix documentation.

  • Review policies.

  • Improve compliance.

  • Follow up with staff.

Instead, describe the issue and the evidence supporting the observation.

For example:

Vague finding: Training records need improvement.

More useful finding: The records reviewed did not consistently demonstrate completion of the required annual training for the sample examined. The organization should verify the applicable requirement, determine the extent of the issue, and establish appropriate follow-up.

A clear finding should identify the requirement or process involved, the evidence reviewed, the issue identified, and any necessary next steps.

Use factual, neutral language. The purpose of an internal audit is to improve organizational systems, not to assign blame.

Also distinguish confirmed deficiencies from questions that still require clarification. If the evidence is incomplete, document what remains to be verified rather than drawing an unsupported conclusion.

Step 6: Prioritize the Findings

Not every finding will require the same response or urgency.

Consider the potential impact, the applicable requirement, any established deadlines, and whether the issue could affect safety, operations, regulatory obligations, or accreditation readiness.

You might organize findings into categories such as:

  • High priority: Requires prompt leadership attention or immediate action under applicable requirements.

  • Moderate priority: Needs timely corrective action and documented follow-up.

  • Routine improvement: An opportunity to improve consistency, efficiency, or organization.

These are internal management categories, not substitutes for an accrediting body's official classifications.

If the accrediting body has specific definitions for findings, deficiencies, or required response timelines, follow those requirements.

A priority system helps leadership direct attention where it is most needed without losing track of smaller issues.

Step 7: Develop Corrective Actions

After identifying findings, determine what must happen to address them.

A corrective action should do more than temporarily fix the visible problem. Where appropriate, the organization should investigate why the issue occurred and consider how to prevent it from recurring.

For each finding, document:

  1. The issue being addressed.

  2. The applicable requirement or internal process.

  3. The cause or contributing factors, when known.

  4. The corrective action.

  5. The person responsible.

  6. The target completion date.

  7. The evidence needed to demonstrate completion.

  8. The method for verifying effectiveness, when appropriate.

For example, if required records are incomplete, simply telling staff to complete them may not resolve the underlying problem.

The organization may need to clarify the process, revise a form, provide training, assign responsibility, or introduce a periodic review.

Step 8: Track Progress Until Findings Are Resolved

An audit is only useful if the organization follows through on its findings.

Maintain a centralized log that shows the status of each action.

A simple tracking system might include:

Finding

Owner

Due date

Status

Verification

Required records incomplete

Department lead

Assigned date

In progress

Review completed records

Policy review overdue

Policy owner

Assigned date

Pending

Confirm approved revision

Recurring activity not documented

Process owner

Assigned date

In progress

Review subsequent records

The examples above are illustrative; actual owners and dates should be assigned by your organization.

Review outstanding actions regularly. Follow up on overdue items and escalate unresolved concerns according to your internal procedures.

When an action is marked complete, retain appropriate supporting evidence. Where necessary, verify that the change is working rather than relying solely on a verbal confirmation.

Step 9: Share Results With Leadership

Leadership should have a clear understanding of the audit's results and any decisions that require attention.

A useful summary can include:

  • The scope and date of the audit.

  • The departments or processes reviewed.

  • Key strengths identified.

  • Significant findings and risks.

  • Outstanding corrective actions.

  • Items requiring leadership decisions or resources.

  • Deadlines and the next review date.

Keep the summary factual and focused on actions.

The purpose is to help leadership understand the organization's current position and determine what support or decisions are necessary.

Protect confidential information and distribute audit results only to authorized individuals.

Step 10: Schedule the Next Internal Audit

Internal audits should be part of a repeatable management process.

The appropriate frequency depends on the applicable standards, risk level, organizational needs, and previous findings. Some requirements may call for specific review intervals, while other areas may be reviewed through a broader annual schedule or targeted reviews.

A practical approach is to establish an internal audit calendar that identifies:

  • What will be reviewed.

  • When the review will occur.

  • Who will conduct it.

  • Which standards or processes will be included.

  • When findings are due for follow-up.

  • When leadership will review results.

Your calendar should coordinate with the organization's broader accreditation compliance calendar, rather than creating another disconnected schedule.

For more on scheduling recurring activities, see How to Create an Accreditation Compliance Calendar.

Common Internal Accreditation Audit Mistakes to Avoid

Even a well-intentioned review can be less effective if the process is inconsistent.

Reviewing documents without checking implementation

A policy does not automatically prove that the required activity is occurring. Review supporting records and actual practice where appropriate.

Using outdated standards

Confirm that you are working from the current requirements applicable to your program.

Treating every finding as a documentation problem

Some issues involve implementation, training, responsibility, resources, or oversight. Identify the nature of the issue before selecting a corrective action.

Assigning findings without clear ownership

Every action needs an appropriate owner and a realistic deadline.

Closing findings without verification

Where appropriate, check that the action was completed and that it addressed the problem.

Waiting until an external survey is approaching

An internal audit is most useful when there is enough time to investigate issues, implement improvements, and verify results.

Internal Accreditation Audit Checklist

Use this checklist as a starting point for planning your next review.

  • Confirm the applicable, current standards.

  • Define the audit scope and review period.

  • Assign the people responsible for the audit.

  • Prepare a checklist linking requirements to expected evidence.

  • Gather and review relevant documentation.

  • Compare written procedures with actual practices.

  • Record findings and supporting observations.

  • Prioritize issues according to applicable requirements and risk.

  • Assign corrective actions, owners, and due dates.

  • Track progress and verify completion.

  • Report significant results to leadership.

  • Schedule future reviews and follow-up activities.

This checklist is a general planning aid. It does not replace official audit protocols, required forms, or instructions issued by your accrediting organization.

How AccrediReady Can Help

Internal accreditation audits require coordination, documentation, follow-up, and a clear understanding of applicable standards. For organizations with limited administrative capacity, maintaining that process alongside daily operations can be challenging.

AccrediReady provides outsourced accreditation management support to help organizations organize documentation, track requirements and deadlines, coordinate evidence, and maintain ongoing readiness.

Support may include organizing an accreditation tracking system, reviewing documentation, identifying areas that need follow-up, maintaining a compliance calendar, and helping monitor corrective actions.

The specific scope of support depends on your organization's needs and agreed-upon services.

Explore the AccrediReady website to learn more about the outsourced Accreditation Management Office model. You can also visit the Free Resources page for additional tools to support your work.

Accreditation readiness is an ongoing responsibility. A structured internal audit helps turn that responsibility into a manageable process of reviewing, documenting, improving, and following through.

This article provides general educational information. It does not replace the current standards, formal audit procedures, or instructions of your accrediting organization. Requirements vary by program and organization, and completing an internal audit does not guarantee accreditation.

Frequently Asked Questions

How often should an organization conduct an internal accreditation audit?

The frequency depends on applicable requirements, organizational risk, previous findings, and the scope of the accreditation program. Follow any required review schedule and establish a practical calendar for additional internal monitoring.

Who should conduct an internal accreditation audit?

The review should be conducted by people with appropriate knowledge of the requirements and processes being evaluated. Where practical, use reviewers who can assess the evidence objectively and identify issues without simply confirming their own work.

What is the difference between an internal audit and an accreditation gap analysis?

A gap analysis generally compares current conditions with required standards to identify what is missing or incomplete. An internal audit is a structured review of whether the organization can demonstrate that requirements are being met. The two activities can overlap, and the terminology may vary by organization and accrediting body.

What happens when an internal audit identifies a deficiency?

Document the finding, verify the applicable requirement, evaluate the issue, and determine the appropriate corrective action. Assign responsibility and a deadline, retain supporting evidence, and verify completion or effectiveness as appropriate. Follow any official reporting or escalation requirements that apply.

Does passing an internal accreditation audit guarantee accreditation?

No. An internal audit is a management tool that helps identify issues and improve readiness. The accrediting organization makes its own determination using its applicable standards and review process.

 
 
 

Comments


bottom of page