Written for the moment nobody else writes for: the audit is booked, things are not ready, and panicking is not a plan. Four documents that take you from three weeks out to the closing meeting and beyond, whichever ISO standard you are being audited against.
Certification body data says 78 per cent of certified organisations get findings, and that audits are decided by a handful of clauses: internal audit, management review, corrective action, risk and competence. This pack spends your remaining weeks on those, tells you how to be audited well, and gives you the templates for what comes after. One rule runs through all of it: nothing gets backdated, invented or dressed up, because the honest gap is survivable and the dishonest fix is not.
The five clauses that decide audits, backed by certification body data. The honest inventory, the three-pile triage, the week-by-week plan, the minimum viable evidence check, and what to say to the certification body if postponing is genuinely the right call.
What the assessor is actually doing, the say-this-not-that table, the two sentences that do the most work, how to run the day, what your rights are when the auditor is the problem, and how to disagree with a finding through the route that works.
Four cards, ten minutes each: everyone, managers and supervisors, the audit guide, and the boss, whose card opens with the fact that management absence is itself one of the commonest findings. Put your own names in the brackets and print.
The nonconformity response that closes first time, including the extent-of-condition box most responses miss. The measured letter for disputing a finding. The formal appeal. And the gap-period recovery plan for when the records are months behind and someone is quietly wondering whether to backdate: the honest route, made the easy route.
Not a summary. The actual questions an assessor puts about that document, and what to put in front of them. You will not find this in a template bundle, because template bundles are not written by people who have sat in the assessor’s chair.
Certification does not make you legally compliant, and the two are routinely confused. The statutory duties are mapped next to the clauses so neither is being satisfied by accident.
Every document carries a phase number in its header, from appoint through to learn. If you are lost, look at the header of whatever is in front of you and you know where you are.
Where a document must be produced by a competent specialist, such as a fire risk assessment, asbestos survey, legionella or health surveillance, the toolkit says so, explains how to commission one, and tells you how to judge whether what you were handed is any good. Selling you a template for those would be worse than selling you nothing.
The newly appointed quality or compliance manager who just inherited the system, the business whose surveillance audit arrived faster than expected, and anyone whose certification audit is booked and whose stomach drops slightly when they think about it. It pairs with any of the toolkits, and works on its own with whatever system you already have.
Drafted for the United Kingdom with notes for Scotland and Northern Ireland, and structured so that the management system requirements carry across unchanged to any jurisdiction. Outside the UK you would replace the legal register entries with your own obligations; everything else holds.
Fully editable Microsoft Word and Excel in one zip. Every placeholder is in [SQUARE BRACKETS] so you can see at a glance what needs your input. Every guidance box is shaded so you know what to delete before you issue the document.
You may use, edit, adapt and rebrand everything within your own organisation, on as many sites and for as many people as you employ, and give completed copies to your certification body, assessor, clients, insurer or regulator.
You may not resell, share or distribute the blank toolkit outside your organisation, or repackage it as your own product.