First Move

Win the contracts that are closed without it.

Certification opens doors that stay shut otherwise — enterprise procurement, government tenders, regulated buyers. We get you ready, document the systems properly, run the internal audit, and stand beside you when the certification body arrives. Done right, passing an audit stops being an annual event and becomes a normal Tuesday.

Book a conversation

WHAT THIS USUALLY LOOKS LIKE

You only need one of these to be worth fixing

A customer sent a governance questionnaire

Ninety questions about your security, your processes and your controls. Nobody owns it, so it lands on whoever is least busy, and the deal waits.

A customer sent a governance questionnaire

Ninety questions about your security, your processes and your controls. Nobody owns it, so it lands on whoever is least busy, and the deal waits.

Audit preparation is an annual fire drill

Weeks spent assembling documents once a year, because the evidence was never captured while the work was being done.

Audit preparation is an annual fire drill

Weeks spent assembling documents once a year, because the evidence was never captured while the work was being done.

Your risk register is a spreadsheet nobody opens

It was built for an audit, it has no owners, nothing escalates, and it hasn’t changed in two years.

Your risk register is a spreadsheet nobody opens

It was built for an audit, it has no owners, nothing escalates, and it hasn’t changed in two years.

Tenders ask for certification you don’t have

The work is well within your capability. The certificate isn’t, so you don’t bid.

Tenders ask for certification you don’t have

The work is well within your capability. The certificate isn’t, so you don’t bid.

You use AI and don’t know what you’re liable for

Something in your business is making or shaping decisions. Nobody has written down which model, trained on what, reviewed by whom.

You use AI and don’t know what you’re liable for

Something in your business is making or shaping decisions. Nobody has written down which model, trained on what, reviewed by whom.

Policies exist, but nowhere anyone looks

Written once for a reason nobody remembers, stored somewhere nobody checks, followed by nobody in particular.

Policies exist, but nowhere anyone looks

Written once for a reason nobody remembers, stored somewhere nobody checks, followed by nobody in particular.

WHAT’S INCLUDED

Four parts — built so the evidence exists before anyone asks for it

Certification readiness

ISO 9001 — including the transition to the 2026 edition

ISO 42001 for businesses using AI in how they operate

Gap assessment against the standard you actually need

Support through the certification audit itself

Certification readiness

ISO 9001 — including the transition to the 2026 edition

ISO 42001 for businesses using AI in how they operate

Gap assessment against the standard you actually need

Support through the certification audit itself

Risk and controls

A risk register with real owners, thresholds and escalation

Controls designed into the process, not bolted on after

Business continuity and incident response that has been tested

Supplier and third-party assurance

Risk and controls

A risk register with real owners, thresholds and escalation

Controls designed into the process, not bolted on after

Business continuity and incident response that has been tested

Supplier and third-party assurance

Governance

Policy framework people can actually find and follow

Delegation of authority and decision rights, written down

Management review that produces decisions, not minutes

Data protection and AI obligations mapped to what you really do

Governance

Policy framework people can actually find and follow

Delegation of authority and decision rights, written down

Management review that produces decisions, not minutes

Data protection and AI obligations mapped to what you really do

Evidence and audit

Audit trail generated as the work happens

Internal audit run before the certifier ever sees it

A maintained answer library for procurement questionnaires

Documentation that survives someone leaving

Evidence and audit

Audit trail generated as the work happens

Internal audit run before the certifier ever sees it

A maintained answer library for procurement questionnaires

Documentation that survives someone leaving

The part nobody else does

How you’ll know it worked

This service has the cleanest proof of the four, because somebody external delivers the verdict. You either hold the certificate or you don’t. You either passed the audit or you didn’t.

Between those milestones the measures are practical: how long a questionnaire takes to return, how many findings came out of the internal audit, how long it takes to produce evidence on request.

What we can’t promise is a date for a certificate, because accreditation timelines sit with the certification bodies and not with us. Anyone promising you one is guessing.

HOW IT RUNS

Six steps, and the fifth is why the sixth goes well

Assess

Gap analysis against the standard, honestly scoped — including whether you need it at all.

Assess

Gap analysis against the standard, honestly scoped — including whether you need it at all.

Design

Controls and processes built around how you actually work.

Design

Controls and processes built around how you actually work.

Document

Policies, procedures and records, written to be used rather than filed.

Document

Policies, procedures and records, written to be used rather than filed.

Implement

Embedded into daily operations, with the evidence captured automatically.

Implement

Embedded into daily operations, with the evidence captured automatically.

Internal audit

We find the findings before the certification body does.

Internal audit

We find the findings before the certification body does.

Certify

We prepare you for the external audit and sit with you through it.

Certify

We prepare you for the external audit and sit with you through it.

Find out what you’d actually need.

A gap assessment tells you which standard is relevant, what’s already in place, and what it would genuinely take — including if the answer is that you don’t need it yet.

Book a conversation