A Structured, Transparent Path to ISO Certification

The gap analysis is a formal, clause-by-clause assessment of your organisation's current practices, processes, and documentation against the full requirements of the relevant ISO standard. It is conducted by your assigned consultant and produces a detailed written report.

This stage is designed to give you an honest, objective picture of where your management system already meets the standard's requirements, and where development work is needed before the certification audit can proceed. Nothing is glossed over — a thorough gap analysis is what prevents surprises at audit stage.

We also conduct an initial risk assessment at this stage — identifying the key risks and opportunities relevant to your management system scope, which forms the basis for your risk register and subsequent risk treatment planning.

This is the implementation stage — where the gaps identified in Stage 2 are addressed through the development and formalisation of your management system. Your UAEC consultant works alongside your team to develop the documented information required by the standard.

This includes your management system manual (where applicable), policies, procedures, objectives, and the records and evidence needed to demonstrate that the system is operational. Critically, we do not simply hand you template documents — we develop materials that reflect how your organisation actually operates, ensuring they are meaningful, usable, and audit-ready.

We also support the development of internal audit procedures and the first internal audit cycle, and assist in preparing for the management review process required by most ISO standards.

The Stage 1 audit marks the formal beginning of the certification assessment. At this stage, the auditor conducts a thorough review of your documented management system — assessing the scope, policies, procedures, and supporting records against the requirements of the relevant ISO standard.

The purpose of the Stage 1 audit is to determine whether your management system is sufficiently developed and documented to proceed to the Stage 2 certification audit, and to identify any areas that require further attention beforehand. The auditor will produce a formal Stage 1 report detailing findings and any observations or minor non-conformances to be addressed.

The Stage 1 audit is typically conducted remotely, though in-person assessment can be arranged where preferred or required.

The Stage 2 audit is the full certification assessment. The auditor evaluates whether your management system is not only adequately documented — as confirmed at Stage 1 — but genuinely implemented, operational, and effective across the scope of the certification.

Objective evidence is gathered through a combination of document review, process observation, interviews with relevant personnel, and examination of records. Each clause of the standard is assessed against the evidence available. Any non-conformances identified are documented in the audit report, classified as either major or minor, and must be addressed and closed out before the certificate can be issued.

Our auditors conduct Stage 2 assessments with professionalism and respect for your team's time. Findings are discussed openly at the closing meeting, ensuring there are no surprises in the written report.

Upon successful completion of the Stage 2 audit and resolution of any non-conformances, your internationally recognised ISO certificate is issued. The certificate confirms that your management system has been formally assessed and found to meet the requirements of the relevant standard.

ISO certification is valid for a three-year cycle, during which your management system must be maintained and demonstrated to remain effective. UAEC supports you through the full certification lifecycle — including annual surveillance audits and the triennial recertification assessment at the end of each cycle.