ISO 27001

The Gap Analysis

GAP Analysis compares actual business performance with a quality management system’s potential or desired performance. It will identify the responsible and relevant persons within the organisation and the company’s operational process flows. It will identify the gaps required to be satisfied by the ISO Standard.

Once Compliant understands the documentation your business has in place, we will fill all the gaps. We know precisely what is required to get you certified to ISO stress-free and first time.

We can provide a commitment letter from ourselves and the certification company to say you are on the ISO journey, which helps you with tenders, PQQ and clients.

Documentation And Folder Structure

Develop or enhance an existing management folder structure for document retrieval and versioning. Implement the Integrated Management System (IMS), ensuring complete synergy with the existing system, or create a new and more robust version. Identify all interested parties, legislation, risk assessments, plans, process flows, and policies. Identify the right UKAS-approved certification company.

As we are certified, how can we not get your business certified?

We provide a comprehensive management system made up of populated documents. We know what the auditor will ask for before they ask. We collate these documents in advance of the audit.

Stage One Assessment

Stage 2 certification audit. This can be completed by the certification company remotely, on-site, or in a blended format. A site visit to one of your clients may be necessary. Certification achieved.

We ensure you have a robust management system of populated documentation and full-on-the-day audit support to liaise with the auditors and represent your business.

If anything is required on audit day, we collaborate to sort out the audit, ensuring a smooth process for all concerned.

Once you have been advised by the auditor that you are being recommended for certification, we collate all the relevant final pieces of information and liaise with the certification body to get your certificates. We then promote your business by case study to announce to all your peer ISO businesses that you are certified.

Internal Audit

Internal Audit. This is the sanity check before your stage 2 certification audit. A complete check on all documentation and ensure process flows are accurate, and a comprehensive understanding of the IMS to ensure the business meets the standard’s requirements. Check that all controls are implemented, including KPI maintenance and corrective actions. Continuous improvement. Meetings with the Management team to ensure compliance and understanding of the requirements in preparation for the Stage 2 on-site audit. There will be online team meetings, emails, and, when required, on-site visits to ensure you are audit-ready.

We take the stress out of certification.

Stage Two Assessment

Stage 2 certification audit. This could be completed by the certification company remotely, on-site, or even blended. A site visit to one of your clients may be necessary. Certification achieved.

We ensure you have a robust management system of populated documentation and full-on-the-day audit support to liaise with the auditors and represent your business.

If anything is required on audit day, we collaboratively sort the audit to ensure a smooth process for all concerned.

Once you have been advised by the auditor that you are being recommended for certification, we collate all the relevant final pieces of information and liaise with the certification body to get your certificates. We then promote your business by case study to announce to all your peer ISO businesses that you are certified.

Ongoing Support and Improvement

Compliant Ltd offers comprehensive ongoing support and continuous improvement.

Once certified, your business must retain the certification. This can be very timely and costly to a company. We take all of that away and make it.

Periodic maintenance of IMS to ensure all controls continue to be implemented, as well as maintaining a risk-based internal audit to include an audit of controls, complete management reviews, assess KPIs and corrective actions, and continually seek improvement.

See our comprehensive expert ongoing support information