02 — Methodology
Methodology
Our methodology turns regulatory requirements into a concrete work plan, with owners, timelines and verifiable evidence.
01
Assessment
We evaluate your current state against the standard or program requirements.
02
Planning
We define scope, owners, schedule and deliverables.
03
Implementation
We document, implement controls and train your team.
04
Internal audit
We verify everything works before the external review.
05
Certification support and maintenance
We accompany you before the certification body or authority, and afterwards.
- 01
Assessment
We review documents, processes, controls and infrastructure. We interview owners and measure the gap between what exists and what is required.
Stage outputs
- Gap report
- Maturity level by requirement
- Scope and timeline estimate
- 02
Planning
We turn gaps into a work plan prioritized by risk and impact, with milestones agreed with leadership.
Stage outputs
- Work plan
- Responsibility matrix
- Schedule with milestones
- 03
Implementation
We draft policies and procedures, coordinate technical controls and train the people who will operate the system.
Stage outputs
- System documentation
- Implemented controls
- Trained staff
- 04
Internal audit
An auditor independent from the implementation team evaluates the system, records findings and supports corrective actions.
Stage outputs
- Internal audit report
- Corrective action plan
- Management review
- 05
Certification support and maintenance
We are present during the certification audit or inspection visit, support the closing of findings and help you keep the system current.
Stage outputs
- Audit or visit preparation
- Closing of findings
- Maintenance and renewal calendar
Let's talk about your company
An initial assessment will show you where you stand and what you need to get certified.