Evidence, presented honestly

• Sample scenarioManufacturing

  From three audit calendars to one integrated certification cycle

  A mid-sized precision-engineering manufacturer, two sites, about 180 staff

  The manufacturer held ISO 9001 and applied to add ISO 14001 and ISO 45001 to the same certificate, to hold a major OEM contract. Three sets of documentation had been produced separately, each on its own review calendar, and the application described a scope that covered both sites without saying how the two differed.

  ISO 9001ISO 14001ISO 45001
• Sample scenarioIT & Software

  An ISMS audited against the scope it actually claimed

  A B2B SaaS scale-up, about 90 staff, cloud-native, selling into enterprise

  The scale-up applied for ISO/IEC 27001 certification after enterprise procurement began asking for it. The application defined a scope covering the platform and the corporate functions supporting it, and the Statement of Applicability had been prepared in-house. The question for the audit was whether the controls claimed in that document were operating, and whether the scope boundary matched how the platform is actually built and run.

  ISO 27001
• Sample scenarioConstruction

  Certifying a safety system across live construction sites

  A regional principal contractor, about 240 direct and subcontract staff

  The contractor applied for ISO 45001 certification with a scope covering principal contractor activity across multiple concurrent projects. Sites open and close inside a certification cycle, so the scope statement, the sampling plan and the surveillance schedule all had to account for work that would not exist by the time of the next audit.

  ISO 45001ISO 9001

Every scenario on this page is illustrative and labelled as such, and no figure on it is a measured result. What is real is the method: the scope statement, the audit duration calculated from the accreditation body’s formula, the graded findings, and the decision taken by a reviewer who was not on the audit team. Once we certify an organization, its certification status can be confirmed on request.