Audit

Compliance audits for any standard your company requires, with no surprises when it comes to certification

Independent assessment of quality, environmental, health and safety controls, medical devices, food safety, information security, the GDPR, DORA and NIS2, including an objective gap analysis and a clear report on what needs to be rectified before the external audit.

Certified auditorsISO 19011 methodologyReport containing evidence

Audit Findings

Latest internal audit

Compliant Controls

82%Before the certification audit

Non-conformities

2 major · 2 minor

Deadline for Corrections

30 days

Action plan with those responsible

Evidence Gathered

Documents and records analysed

Internal Audit: Before the official assessment

Third-Party Audit: Suppliers and partners

Information Security Audit: Technical and Organisational Controls

Regulatory Audit: NIS2, DORA and GDPR

Quality, Environment & Health and Safety at Work ISO 9001 · 14001 · 45001

Medical Devices & Food ISO 13485 · 22000

Why carry out an audit?

A properly conducted audit prevents costly surprises

Independent assessment

Auditors with no conflict of interest, who assess controls against the standard without being influenced by those who implemented them.

Defensible evidence

Each finding is documented along with the supporting evidence, ready to be presented to the external auditor or the regulator.

Prioritised action plan

Non-conformities classified by severity (major/minor), with a deadline and a person responsible for each correction.

Methodology

Based on ISO 19011 — the international standard for auditing

Planning

We define the scope, audit criteria and timetable, and the team being audited is informed in advance.

Gathering of evidence

Interviews, direct observation and document analysis to verify that the controls operate as described.

Identification of findings

Classification of non-conformities (major/minor) and opportunities for improvement, always supported by evidence.

Final report

A structured report setting out findings, evidence and recommendations, ready to be presented to management.

Follow-up

Review of the corrective action plan prior to the certification audit or the next follow-up audit.

What we deliver

A report to act on, not to shelve

Report on findings

Non-conformities and opportunities for improvement, with supporting evidence and reference to the relevant clause of the standard.

Action plan

Corrections prioritised by severity, with a designated person and a deadline set for each one.

Compliance matrix

Status of each control against the standard — ISO 9001, 27001 or any other — which can be updated between audit cycles.

Executive presentation

A 1–2-page summary for management, without the technical detail of the full report.

Frequently Asked Questions

Common questions about auditing

What is the difference between an internal audit and a certification audit?

The internal audit is carried out prior to the official assessment, in order to identify and rectify any shortcomings. The certification audit is conducted by an accredited body and determines whether certification is granted.

How long does an audit take?

It depends on the scope and size of the organisation. A typical ISO 27001 internal audit takes between 1 and 3 weeks, including preparation, fieldwork and reporting.

Does the audit replace certification by an accredited body?

No. Our internal audits prepare the organisation for certification, which is always issued by an accredited and independent certification body.

Request a quote

Find out the scope and cost of your audit

Fill in the form and receive a proposal with a scope, timeframe and methodology tailored to your organisation.

Your signature could not be validated.

You have successfully subscribed.

Ready to achieve certification without any last-minute surprises?

Get in touch with our team and book your internal audit well in advance.