ASSURE
Find the findings before your certification body does.
A mock audit against the certification body's Stage 1 and Stage 2 criteria, conducted by a senior practitioner, with findings and a remediation plan before you submit. For organisations with an audit booked and one chance to pass cleanly.
Scoped on the free 45 minute diagnostic
THE ENGAGEMENT
The same findings, earlier, at a fraction of the cost.
The most expensive point at which to discover an inadequate management system is during Stage 2, when the certification body raises a major nonconformity and the certificate slips a quarter. Deals that were waiting on the certificate wait longer, and the internal credibility of the programme takes the damage.
A mock audit surfaces the same findings earlier. We audit the management system the way the certification body will: sampling evidence, testing whether records support the claims made in the documentation, and interviewing control owners rather than reading policies in isolation. Findings are logged with severity ratings that match certification body conventions, so nothing is softened.
The review closes with a verdict rather than an opinion. Either the system is ready to proceed, or it needs specific remediation first, or the audit date should move. That verdict is given plainly, with the reasoning and the remediation sequenced against your booked date.
INDEPENDENCE
Why we can run this for our own implementation clients.
A Pre-Certification Readiness Audit is a rehearsal, not an assurance opinion, so we run it for organisations we implemented for as a matter of course. Preparing a management system for audit is support work. Forming an independent opinion on whether that system conforms is assurance, and the same party should not do both.
That is why our position on clause 9.2 internal audit is the opposite. Goldline does not conduct internal audits of management systems it implemented, because an internal audit reporting on the implementer's own work is not an audit, and a certification body reading the evidence will see that immediately. The line is the one your certification body draws, and we hold it in both directions.
DELIVERABLES
What you receive.
Mock audit conducted against Stage 1 and Stage 2 criteria
Findings log with severity ratings matching certification body conventions
Evidence gap analysis by control
Remediation plan sequenced against your audit date
A readiness verdict: proceed, remediate first, or reschedule
FIT
Who this is for.
- You have a certification audit booked and want to know what the auditor will find before they find it.
- You implemented internally or with another consultancy and want independent verification of the result.
- A failed audit carries commercial consequence, whether a paused deal, a tender deadline, or a supervisory commitment.
This is not for organisations still mid-implementation. Auditing a half-built management system produces a findings log rather than useful direction, and a readiness assessment is the right instrument at that stage.
WHAT COMES NEXT
Where organisations go from here.
Where the verdict is proceed, the natural next step is having a practitioner in the room for the audit itself. Where remediation is needed first, the Sprint programmes close the gap on a fixed scope.
ASSURE
Stage 2 Audit Defence
Senior practitioner attendance at the certification audit, evidence presentation, auditor liaison, and management of findings through to closure.
Explore audit defenceIMPLEMENTATION
ISO 27001 Sprint and ISO 42001 Sprint
Where the audit finds material gaps, fixed-scope implementation of the information security or AI management system, audit-ready on a defined timeline.
See the Sprint programmesQUESTIONS
Common questions.
Audit booked?
A 45 minute scoping call establishes your audit date, the scope of the review, and the price. No sales pitch. If your system is clearly ready, we will tell you rather than sell you a review you do not need.
Prefer email? Write to info@goldlineconsultancy.co.uk.