The clauses an audit opens on, standard by standard
We run readiness work for recertification and surveillance audits in the four standards below. Each page lists the clauses that get asked first in that standard’s audit and the records that have to exist before the opening meeting.
ISO 9001
Quality Management System
- Process map and performance indicators (cl. 4.4, 9.1.1)
- Control of documented information (cl. 7.5)
- Actions to address risks and opportunities (cl. 6.1)
ISO 14001
Environmental Management System
- Environmental aspects and impacts (cl. 6.1.2)
- Compliance obligations and legal register (cl. 6.1.3)
- Environmental objectives and planning to achieve them (cl. 6.2)
ISO 45001
Occupational Health and Safety Management System
- Hazard identification and risk assessment (cl. 6.1.2)
- Worker consultation and participation records (cl. 5.4)
- Determination of legal and other requirements (cl. 6.1.3)
ISO/IEC 27001
Information Security Management System
- Determining the scope (cl. 4.3) and the asset inventory (A.5.9)
- Information security risk assessment and treatment plan (cl. 6.1.2, 6.1.3)
- Statement of Applicability (SoA) and justifications
Other standards may apply depending on what the organization does; which system to build is decided together with the scope entering the audit and the certificates already held.
The readiness process
-
Gap analysis
The system, the records and the previous audit report are compared clause by clause; what is missing is separated from what is merely out of date.
-
Records plan
Working backwards from the audit date, each record is given the date by which it has to exist.
-
Documentation and rollout
Missing documents are built, existing ones are corrected against practice on the floor, and both are put into use.
-
Internal audit and management review
The internal audit is run, findings are closed, and the management review is held with the inputs the standard requires.
-
Dry run
We rehearse in the order the auditor will take, list whatever is still open and queue it for closing before the audit.
Request a proposal for audit preparation
We prepare the scope, work plan and proposal around your audit schedule and needs.