Audit services

A clear scope. A defensible finding. A useful next step.

Choose the type of review that matches the question you need answered. Each service specification explains the scope, evidence and intended deliverables.

01

Understand your starting point

ISO Gap Analysis

Turn a broad certification ambition into a clear evidence map. A gap analysis compares selected parts of your management system with the agreed standard and identifies what needs to happen next.

↗
02

Test how the system works

Internal Audit

Follow work from requirement to result. An internal audit tests whether agreed arrangements are implemented and effective, with findings tied to evidence rather than the appearance of a document set.

↗
03

Rehearse the evidence, identify the weak points

Pre-Certification Readiness Audit

A structured readiness review before an independent certification audit. Test whether scope, operating evidence, internal audits and management decisions form a coherent and defensible management system.

↗
04

Move editions with a clear evidence trail

Transition Audit

Translate a revised standard into a controlled implementation plan. Separate changes to the requirements from changes your organisation needs to make, then test that those changes have taken effect.

↗
05

Check the controls behind the promise

Supplier Audit

A second-party audit focused on the supplier activities that matter to your contract. Establish what the supplier does, how it demonstrates control and which risks need a decision before or during the relationship.

↗
06

One operation, connected assurance

Integrated Management System Audit

Review shared management processes together while keeping each standard’s specific obligations visible. An integrated audit follows how the organisation actually works across quality, environment, safety, security, privacy or AI governance.

↗
07

Keep the management cycle moving

ISO Desk

A proposed ongoing support arrangement for the work between audits: planning, document reviews, action follow-up and preparation for management decisions. Build a repeatable operating rhythm with clear ownership.

↗
08

Make privacy accountability inspectable

UK GDPR Audit

A scoped review of how personal information is collected, used, shared, protected and retired. Connect privacy statements to operational evidence and identify decisions that need legal or specialist assessment.

↗
09

Prepare the scope and the control evidence

Cyber Essentials Readiness

Understand your Cyber Essentials scope and work through the five technical control areas. Identify practical gaps before entering the independent scheme assessment.

↗
Plan the work before committing to it.

These are service specifications for review. Prices, the contracting entity, delivery availability and service terms remain open. The audit brief tool creates a document for you; it does not place an order.

Prepare your brief →