ASSURE
A senior practitioner in the room when the auditor arrives.
Attendance at your certification audit, evidence presentation, auditor liaison, and management of findings through to closure. For organisations facing Stage 2 without in-house audit experience.
Scoped on the free 45 minute diagnostic
THE ENGAGEMENT
Stage 2 is an evidence conversation.
Stage 2 is not a document review. It is a conversation in which an auditor asks for evidence and forms a judgement on what is produced and how quickly. Organisations lose findings not because the controls are absent but because nobody in the room can locate the record, explain the control owner's reasoning, or present the evidence in the form the auditor expects.
A practitioner who has sat through these audits changes that. We brief your team before the audit on what will be asked and how to answer it, attend across the audit itself, present the evidence, and manage the exchange with the auditor so questions are resolved at the point they are raised rather than left open.
Findings raised are normal and manageable. Almost every first certification audit produces some. Findings mishandled are what delays certificates: a minor left unclosed, a corrective action that does not address root cause, a response submitted after the deadline. We manage the findings log in real time and run corrective action through to closure and certificate issue.
DELIVERABLES
What you receive.
Pre-audit briefing for your team on what to expect and how to answer
Senior practitioner attendance across the audit
Evidence presentation and auditor liaison throughout
Findings log captured in real time with proposed responses
Corrective action plan and management through to closure
Certificate issue confirmation
FIT
Who this is for.
- You are facing a first certification audit and nobody internally has been through one.
- Your internal lead owns the management system but has never defended it in front of an auditor.
- The certificate sits on a commercial deadline, so a delayed close-out has a cost attached.
This is not for organisations with an experienced internal audit function already comfortable running the process. If your team has defended certification audits before, you do not need a practitioner in the room.
WHAT COMES NEXT
Where organisations go from here.
Certification is the start of an operating obligation rather than the end of a project. Surveillance audits follow annually, the management system needs upkeep between them, and enterprise questionnaires keep arriving.
SUSTAIN
Managed Compliance Retainer
Certification renewals, surveillance audit support, governance upkeep, and enterprise security questionnaire responses on a managed retainer.
Explore the retainerASSURE
Pre-Certification Readiness Audit
Not yet submitted? A mock audit against Stage 1 and Stage 2 criteria, with findings and remediation before the certification body sees the system.
Explore the readiness auditQUESTIONS
Common questions.
Stage 2 in the diary?
A 45 minute scoping call establishes your audit dates, the attendance you need, and the price. No sales pitch. If your team is ready to run it alone, we will say so.
Prefer email? Write to info@goldlineconsultancy.co.uk.