PRACTICAL GUIDANCE
What this review is for
A structured readiness review before an independent certification audit. Test whether scope, operating evidence, internal audits and management decisions form a coherent and defensible management system.
Who this is for. For teams approaching an initial certification audit, expanding a certified scope, or returning to certification after major organisational change.
SERVICE SPECIFICATION
Scope and evidence
What the review covers
- Agree whether the exercise addresses simulated Stage 1 readiness, simulated Stage 2 readiness, or selected concerns.
- Check that the proposed certification scope matches the actual activities, locations and interfaces.
- Trace selected requirements into operational evidence and test whether staff can explain their responsibilities.
- Review the completeness and usefulness of internal audit, management review and corrective-action records.
- Identify unresolved issues, unavailable evidence and dependencies that affect the proposed certification timetable.
Evidence to prepare
- The proposed scope and any information already supplied to the certification body.
- Current policies, objectives, process arrangements and risk decisions.
- Operating evidence from a period that fairly represents the system in use.
- Internal audit results, management-review outputs and evidence of corrective-action effectiveness.
- The certification body’s plan, previous findings and correspondence relevant to the assessment.
What the review is intended to produce
- A readiness report limited to the agreed scope and sample.
- A list of evidence gaps and inconsistencies that could hinder an external audit.
- A prioritised action plan identifying prerequisites and who needs to make decisions.
- A practical evidence index for the team’s own preparation.
- A closing discussion distinguishing established evidence from assumptions and work still in progress.
How the work is structured
Confirm the audit context
Understand the standard, scope, certification body and planned assessment. Use the actual assessment plan where one exists.
Run a structured rehearsal
Walk through selected processes with the people who operate them. The purpose is to expose uncertainty while there is time to respond.
Test the management cycle
Check whether objectives, monitoring, internal audit, review and improvement connect to operational decisions.
Make a realistic next-step decision
Classify the remaining work and its dependencies. The organisation and certification body decide whether the planned external assessment should proceed.
Service boundaries
- Certification audits are carried out by independent certification bodies, ideally accredited by UKAS. ISOaudit does not issue certificates and is independent of ISO, UKAS and certification bodies.
- This is a readiness exercise, not a certification Stage 1 or Stage 2 audit. No readiness opinion guarantees a certificate or binds the independent certification body.
- This page describes a proposed service method. An audit brief records your needs; it does not place an order or confirm scope, availability or delivery terms.
The specification does not constitute an offer or an agreed engagement. Trading identity, price, availability, scope, liability and service terms must be confirmed before a paid engagement can be accepted.
Common questions
Will a simulated audit reproduce the certification body’s findings?
No. Different samples, dates and professional judgements can produce different findings. The value is in identifying weaknesses and improving evidence before the external assessment.
How much operating history is enough?
There is no useful universal answer. Evidence should demonstrate the relevant processes in operation, including required audit and review activity. Discuss your circumstances with the chosen certification body.
Can we use this instead of our internal audit?
Do not assume so. The purposes, criteria, competence, independence and programme requirements must all be considered. A readiness exercise should be described accurately in the records.
FICTIONAL WORKED EXAMPLE
Fictional example: separating an action from its effectiveness
A fictional team has updated a procedure after an internal finding and wants to book a certification assessment. This educational scenario is not a forecast of an audit result.
| Criteria to establish | Agree the review scope, relevant licensed requirements, internal findings and the organisation's own closure criteria. The certification body retains its separate assessment and decision process. |
|---|---|
| Evidence and sample | Inspect the selected finding, cause analysis, approved change and later operating records. Choose a review period that can reveal whether the intended change has taken effect. |
| What the evidence shows | The fictional procedure has changed, but no later operating example is available. Action completion is evidenced; effectiveness is not yet evidenced. |
| Next step | Identify the operating event or record needed, assign its review and record the remaining uncertainty. Discuss the assessment timetable with the certification body using an accurate account of readiness. |
A readiness opinion cannot bind the certification body. A polished action log does not replace sufficient evidence that the system operates.
YOUR NEXT STEP
Make the scope concrete.
Describe your organisation, objective and constraints. Download the brief and review it before commissioning work.
Prepare an audit brief ↗SOURCES & REVIEW
Check the underlying information.
These are independent summaries and implementation suggestions, not the copyrighted standard text. Use an authorised copy of the applicable standard for its full requirements.
Reviewed 1 November 2026 · Next editorial review 1 December 2026 · Editorial policy
The displayed review date records an editorial source check. Named specialist review is still to be assigned for this private edition. The 2 November 2026 content update added an original fictional worked example and related guidance; source corrections are recorded in the project change log.