Skip to content

ISO management systems

We implement and organise management systems so that they describe how your organisation actually works, not just what the auditor requires. We prepare organisations for certification and recertification and carry out internal audits.

The most common reasons to implement or review a system

A certificate is required in a tender or by a business partner. The system has been in place for years, but the documentation has drifted away from practice. A surveillance or recertification audit is approaching and you need to know what to fix before the certification body visits.

01

Scope of services

  • Implementing a system

    Gap analysis against the standard, process mapping, documentation, risk analysis, training for the management system representative and the team.

    • Gap analysis
    • Documentation
    • Risk analysis

    Outcome: A system ready for the certification audit.

  • Preparing for certification and recertification

    System review, internal audit, corrective action plan, support during the audit.

    • System review
    • Internal audit
    • Corrective actions

    Outcome: Non-conformities closed before the external audit.

  • Internal audit

    An audit according to the audit programme, with a report on non-conformities and observations.

    • Audit programme
    • Non-conformities
    • Observations

    Outcome: A report and a corrective action plan.

  • Integrated systems

    Combining several standards in one system, for example quality, environment and information security.

    • ISO 9001
    • ISO 14001
    • ISO/IEC 27001

    Outcome: One set of documentation and one audit cycle instead of several.

Standards: ISO 9001 (quality), ISO/IEC 27001 (information security), ISO 22301 (business continuity), ISO 37001 (anti-bribery), ISO 14001 (environment), ISO 50001 (energy management) and FSSC 22000 (food safety). We also run training for management system representatives and internal auditors.

02

Measurable result

We measure the effect by compliance with the standard, the number of non-conformities before and after the audit, and the result of the certification or surveillance audit. We agree the target before work begins.

Certificates are issued by an accredited certification body. We prepare your organisation for the certification audit, but we do not carry it out.

03

Selected work

  • 29 organisations with ISO-standard management systems: implementation, maintenance, internal audits and certification support under ISO 9001, 14001, 22301, 27001, 37001, 50001 and FSSC 22000.
  • 290 organisations we have audited: management systems, a training quality standard, cybersecurity and data protection, management control and grant-funded projects.
  • Support with recertification of integrated management systems under ISO 9001, ISO/IEC 27001 and ISO 37001, and implementation of business continuity management systems in transport.

04

Contact

Describe your situation. Within two working days we will tell you where to start, what scope of work we suggest and how long it will take.