Internal audits are conducted in accordance with the IMS Annual Audit Programme to assess whether Devoteam Portugal’s Integrated Management System (IMS), its processes and controls are effectively implemented, maintained and compliant with applicable requirements.

They support the evaluation of conformity with the standards and frameworks included in the IMS, as well as applicable internal, legal, regulatory and contractual requirements.

Internal audits also help identify nonconformities, risks and opportunities for improvement, supporting the continual improvement and effectiveness of the IMS.

Employees contribute by:

• following applicable IMS policies and processes;

• providing accurate and timely information when requested;

• participating in audits and interviews, where applicable;

• supporting the implementation of corrective and improvement actions.

External audits and assessments provide an independent evaluation of Devoteam Portugal’s management systems and validate conformity with the applicable certification and assessment requirements.

They are performed by recognised certification or assessment bodies in accordance with the applicable audit or assessment programme.

The IMS Management Team coordinates audit readiness, supporting the preparation of documentation, evidence, process owners and relevant teams.

Employees contribute by:

• ensuring that activities are performed in accordance with applicable IMS policies and processes;

• providing accurate information and evidence requested by auditors;

• participating in interviews or audit activities when required;

• demonstrating awareness of the requirements applicable to their role.

The IMS Management Review is a formal evaluation of the suitability, adequacy, effectiveness and performance of the Integrated Management System.

It enables Top Management to review whether the IMS remains aligned with:

• organisational strategy and objectives;

• applicable legal, regulatory and contractual requirements;

• customer and stakeholder expectations;

• applicable standards and certification requirements;

• risks, opportunities and organisational changes;

• performance results and improvement priorities.

The review supports management decision-making and may result in actions related to improvements, resources, objectives, risks, processes or changes to the IMS.

Relevant decisions and actions are documented, assigned and monitored until completion.

Documented information is managed to ensure that information required by the IMS remains accurate, available, suitable for use, appropriately protected and controlled throughout its lifecycle.

IMS documented information shall be created, reviewed, approved, distributed, accessed, updated, retained and disposed of in accordance with the applicable Documented Information Management Process and information security requirements.

Documents shall only be stored and managed in IT-approved information systems and repositories.

If you need to create, amend or review IMS documented information, please contact the IMS Management Team:  pt.compliance@devoteam.com.

For further information, refer to the "Documented Information Management Process".