Run each ISO engagement from gap assessment to certification audit on one record.

An ISO consultancy sells a management system that an outside certification body will test. The client may want ISO 9001, ISO 14001, ISO 45001 or ISO 27001, and every standard brings its own clauses, its own mandatory records and its own audit questions. Most of the work is documents.

Engagements overlap. One consultant may run a gap assessment at a factory, a document review for an office and a surveillance preparation for a third client in the same week. Each of them ends at an audit date that cannot move. The software holds each engagement’s clause checklist, document set, findings and audit date, so no consultant works from a private copy of the plan.

Work starts after a proposal that names the standard, the sites and the headcount. On site, the consultant walks the process and fills a clause checklist marking what exists, what is partial and what is missing. Each missing clause in the gap report turns into a task for one named person, carrying a due date, and that list is the working plan. Documents follow: quality or environmental manual, procedures, work instructions, forms and a register of external documents. Each is drafted, reviewed by the client and issued at a revision number.

Then come training sessions for the client’s staff and an internal audit by the consultant or a client auditor. Findings are raised as nonconformities with a root cause and a corrective action. A management review is minuted. The certification body runs its stage 1 and stage 2 audits, and later its surveillance visits. The consultant stays on call for each. When a certificate is issued, its expiry and the next audit become dates the consultancy must remember for years.