How to prepare for an ISO certification audit

1. Define what is being assessed

Describe the activities, products or services, headquarters and operating locations in scope. Identify relevant outsourced processes. A general label such as “services” does not adequately explain what the organisation does or where the work happens.

Provide this information before scheduling. Discuss significant later changes, such as a new location or activity, so they can be considered in the planning.

2. Organise evidence from actual operations

Group records by process and identify the people who can explain them. Depending on the standard and scope, discussions may cover responsibilities, training, objectives, customer requirements, operational controls, incidents, complaints and improvement actions.

• Documents in the versions actually used by the team.
• Records from representative periods and situations.
• Evidence of internal evaluations and management review.
• Follow-up of identified problems and actions taken.

Do not create retrospective records to fill a file. Explain new activities, missing evidence and the current status of any measures taken accurately.

3. Arrange people and access

A contact person coordinates the schedule and access to records. People who carry out the work should be available for the relevant discussions. For site visits, agree access arrangements, required protective equipment and confidentiality restrictions.

For example, the team may trace a selected customer order from the original requirement through responsibility, delivery and verification of the outcome. The connection between these records is more useful than a generic presentation of every procedure.

4. Follow up the audit findings

Discuss conclusions at the closing meeting. For a nonconformity, clarify the evidence, relevant requirement and next steps communicated by the certification body. Keep records of corrections, cause analysis and applicable actions.

The audit and certification decision are separate stages. The report and evidence are reviewed before a decision; completion of an audit does not automatically mean a certificate is issued.

Prepare for the first discussion

Have your activity description, target standards, employee count, locations and desired timeline ready. Include details of an existing certificate where applicable. Read the InterConformity certification process and pricing guide to plan your enquiry.

Frequently asked questions