Integrated Management System Audits (IMS)
We conduct coordinated audits of multiple management systems, addressing each standard’s requirements and shared processes to evaluate implementation and integration, with audit activities planned around organizational scope and integration levels.
Service Steps
We conduct coordinated audits of multiple management systems, addressing each standard’s requirements and shared processes to evaluate implementation and integration, with audit activities planned around organizational scope and integration levels.
-
1
Request Submission
Identify the required standards, activities, locations, and audit objectives
-
2
Scope Review
Define audit boundaries, system integration level, and required resources
-
3
Audit Planning
Prepare a coordinated plan covering processes, auditors, schedule, and audit criteria
-
4
Audit Execution
Review documents, conduct interviews, observe processes, and gather evidences
-
5
Findings Evaluation
Evaluate evidence and identify conformity, gaps, and the requirements related to each finding
-
6
Reporting & Follow-up
Issue the report and review corrective actions within the agreed service scope
Integrated Quality, Environmental & OH&S Audits
Integrated audits of ISO 9001 quality management, ISO 14001 environmental management, and ISO 45001 occupational health and safety management systems, or an agreed combination of these standards. Audits examine shared processes, including leadership, planning, competence, documented information, performance evaluation, and corrective action, alongside system-specific requirements. These include customer requirements and operational controls for products and services, environmental aspects and impacts, and occupational health and safety risks and controls. Findings show how consistently the systems operate within day-to-day business activities
Integrated Quality & Information Security Audits
Coordinated audits of ISO 9001 quality management and ISO/IEC 27001 information security management systems, suited to organizations seeking to connect service quality with the protection of supporting information. Audits examine process interfaces, responsibilities, customer and interested-party requirements, information security risk assessment and treatment, and the Statement of Applicability and its selected controls. They also review supplier management, competence, performance measurement, and nonconformity handling, providing an integrated view of service quality and related information protection
Integrated Business Continuity & Information Security Audits
Integrated audits of ISO 22301 business continuity and ISO/IEC 27001 information security management systems, evaluating the connection between information protection and the continuity of prioritized activities during disruption. Audits cover business impact analysis, risk assessment, continuity strategies and solutions, response and recovery plans, exercises and testing, alongside relevant information security requirements. They also examine responsibilities, communication arrangements, and dependencies on suppliers and technology, identifying gaps that could affect the organization's ability to respond and recover
Integrated Audits for Tailored Standard Combinations
For organizations operating a different combination of management systems, we define an audit scope around the standards relevant to their activities, objectives, and customer requirements. Opportunities to combine audit activities are reviewed against process relationships and the actual level of integration, while maintaining coverage of each standard and the necessary technical competence. The audit plan identifies the processes, locations, and standards covered. Reporting distinguishes shared findings from system-specific findings, helping management understand overall performance and improvement priorities
