Understanding Internal Audit Requirements and Scheduling
Last updated: May 13, 2025
This article explains how internal audits work with Bastion and what you need to know about audit scheduling and requirements.
Continuous Automated Auditing
Bastion provides continuous automated auditing through our platform, constantly monitoring your integrations and security controls. This automated auditing runs 24/7 and requires no manual intervention.
Annual Audit Requirements
In addition to continuous automated auditing, organizations should conduct formal audits on an annual basis. These can be performed by:
Bastion (included in your subscription)
Internal auditors (if available and no conflict of interest exists)
For smaller organizations where most staff are operational, we recommend using external auditors (such as Bastion) to avoid potential conflicts of interest.
Audit Scheduling and Tracking
Your audit schedule and frequency are tracked automatically through the Bastion platform. We help ensure you stay compliant by:
Monitoring certification renewal deadlines
Tracking audit completion status
Sending notifications when audits are due
Audit Documentation
While specific audit intervals should be documented in your policies, Bastion's platform maintains the master schedule and tracking of all audit activities. This ensures nothing falls through the cracks and your organization maintains continuous compliance.