Internal audits, sometimes called “first-party audits”, are conducted by the organisation directly or on its behalf, for review by the top management and for other internal purposes, and can form the basis for a selfdeclaration of conformity.