FOR SCALING TEAMS
Two frameworks, one management system, and an internal audit nobody owns.
Somewhere past a hundred people the questionnaires stop being occasional. A second framework appears, the platform is running, and clause 9.2 becomes due on a management system your own team built.
Loading the calendar
Open the booking pageCalendar not loading? Open Calendly directly
What this stage looks like
More than one framework is live or planned, and the control sets overlap.
There is a security or compliance lead, but no separate audit function.
The platform shows green and the certification date has not moved.
Surveillance is due, or Stage 1 is booked, and the internal audit has not run this cycle.
Where to start
ISO 27001 Internal Audit, independent of whoever built the system.
ISO 42001 Internal Audit, for an AI management system.
Platform Rescue, if the platform is running and the audit is not getting closer.
The Goldline Method Sprints, for a first certification on a fixed scope.
Get the audit done by someone who did not build it
A free diagnostic call with the practitioner who would do the work. Bring your audit programme, or the scope the certification body has been given.
45 minutes, video, with the practitioner who would do the work. No sales pitch.