Skip to main content

Certification you can stand behind.

Healthcare

Certification audited around the clinical day

Quality, information security, continuity and safety certification for providers, suppliers and health-tech, assessed from the records care already generates and scheduled so that no patient waits for an auditor.

Glass-walled hospital laboratory with precision diagnostic equipment

Explore the controls

The operational pressures the audit is read against

Your auditor works from the pressures your teams already carry, not from a blank template.

Patient safety and clinical governance

Clinical governance already exists. Anything certified alongside it has to reinforce it rather than duplicate or contradict it.

Health data sensitivity

Patient information carries the highest regulatory and ethical stakes.

Inspection and commissioning scrutiny

Regulators and commissioners expect systematic, evidenced management.

Service continuity

Care cannot stop for system outages, supply failures or site incidents.

Field view

Walk the campus. Meet the evidence.

Scroll from the helipad to the plant yard. Every stop is somewhere an auditor asks a service to show what it already records.

Aerial dusk view of a hospital campus with a lit helipad

Stop 01 / 04

One campus, constant care

Care does not pause for audits, outages or inspections. The audit is planned onto the clinical day rather than against it, and the evidence it needs is mostly evidence the day already produces.

Certification services for this sector

  • Certification to ISO 9001, 27001, 22301, 45001 and 45003

    Stage 1, Stage 2 and an independent certification decision covering the services, sites and supply activities inside your scope of certification.

  • Combined audits across quality, security and continuity

    One audit team covering the standards you hold, so the shared clauses are examined once and a service is visited once rather than repeatedly through the year.

  • Multi-site sampling and transfer

    Central functions audited every cycle plus a rotating sample of sites where the system is genuinely common, and transfer of an active accredited certificate without restarting your cycle.

  • Pre-assessment, surveillance and training

    An optional pre-assessment that reports gaps without prescribing fixes, surveillance in Years 1 and 2, recertification in Year 3, and public training courses.

How the audit runs here

  1. Scope and duration set before the visit

    Effective headcount including clinical, bank and agency staff, the services inside scope and the risk category fix audit time by formula, not by negotiation.

  2. The auditor works around the clinical day

    Access to wards, labs and clinical systems is arranged with the service and planned onto hours that do not displace care. Where an auditor's presence would affect a patient, the sample moves.

  3. Evidence taken from the records care already makes

    Incident reports, clinical audit output, calibration logs, competence files and supplier controls are sampled, and one report is traced through to whatever changed as a result.

  4. Findings graded, decision separated

    Majors, minors and opportunities for improvement are reported in writing after the visit. The certification decision is taken by a reviewer outside the audit team.

Sector evidence

Healthcare examples will appear here only where a certified organization has approved publication in writing. CORE does not publish client names, service details or audit findings without that consent, and never publishes anything from which a patient could be identified.

How case studies work

Healthcare questions, answered straight

Ready to certify your healthcare operation?

Tell us the standards, scope, headcount and sites. You will get a clear scope statement, an audit duration set by the accreditation body's formula, and a fixed quotation.