Risk-based scope and audit plan
Scope, evidence and responsibilities agreed before work starts.
INTERNAL AUDITS & ONGOING SUPPORT
A useful review. A clear next step.
Understand what is working, where evidence is weak and which actions deserve attention. Agree an internal-audit or review programme around your management system and risk priorities.
Illustrative artwork · not client premises or a completed engagement
THE STARTING POINT
Make the work clearer.
An audit should produce a useful, traceable outcome—not just a completed checklist. We agree the scope, evidence access and responsibilities so the work can inform action and management review.
POTENTIAL DELIVERABLES
Risk-based scope and audit plan
Document review and agreed sampling
Evidence-led findings and practical priorities
Follow-up and management-review inputs
HOW THIS ENGAGEMENT TAKES SHAPE
A management system, not a document exercise.
01
Understand the scope
Risk-based scope and audit plan
02
Review what exists
Document review and agreed sampling
03
Build the next actions
Evidence-led findings and practical priorities
A USEFUL FIRST CONVERSATION
01 Which standards and processes are within scope?
02 What were the last findings and management-review actions?
03 Are there independence or access constraints?
THE OUTPUT, NOT JUST THE CONVERSATION
A clearer picture of the support.
A useful engagement should leave you with agreed outputs and a practical next step. These are example deliverables, not client results.
Document review and agreed sampling
Scope, evidence and responsibilities agreed before work starts.
Evidence-led findings and practical priorities
Scope, evidence and responsibilities agreed before work starts.
Know what is included.
Internal-audit work is scoped around appropriate competence, objectivity and access. Certification decisions remain with the independent certification body.
Independence and objectivity must be considered. We review conflicts and agree an appropriate allocation of work; consultancy is never a substitute for independent certification.
We establish the relevant scope, deliverables, responsibilities and dependencies before proposing a fee. Additional work is agreed rather than silently added.
A short explanation of the requirement, your organisation, what already exists and any deadline. We can agree a suitable route for sensitive evidence later.
START A CONVERSATION
What does your management system need next?
Tell us what you are working towards, what already exists and where you need support. We will use that to clarify the scope—not sell you an off-the-shelf answer.
No sensitive records needed at first contact.