ISO Consultant for ISO 9001, ISO 14001, ISO 45001 and ISO 27001
Understand the Requirements. Build the System. Prepare for Assessment.
Being told you need “ISO” is not much help if nobody explains which standard, what it involves or why your customer wants it.
We help businesses understand the relevant ISO requirements, develop compliant management systems and prepare for independent certification.
The process starts with your business and the work you want to do. We look at the customer requirement, your existing arrangements and the changes needed to create a system your team can use.
You do not need to arrive with every answer. Send me what you have been asked for, and we can establish the next step.
Which ISO Standard Do You Need?
Different standards address different parts of the business. The appropriate choice depends on your activities, risks and customer requirements.
ISO 9001: Quality Management
ISO 9001 focuses on a consistent approach to meeting customer requirements and improving the quality of products and services.
It can help structure responsibilities, supplier controls, delivery processes and the way you address problems.
Explore ISO 9001 consultancy.
ISO 14001: Environmental Management
ISO 14001 provides a framework for managing the environmental aspects of your business, relevant obligations and eco-performance.
The system connects your policy to practical controls, objectives and evidence.
Explore ISO 14001 consultancy.
ISO 45001: Occupational Health and Safety
ISO 45001 focuses on managing occupational health and safety risks through a structured management system.
Support can involve reviewing responsibilities, relevant obligations, working arrangements, competence and evidence of how risks are managed.
ISO 27001: Information Security
ISO 27001 focuses on an information security management system, using a risk-based approach to managing information.
We can discuss your information, systems, business requirements and existing arrangements to establish the scope of support.
ISO Certification Is an Assessment of a Working System
An independent certification body assesses whether your organisation’s management system meets the relevant standard.
It needs evidence that the system is implemented and effective. Written policies are part of that evidence, but they cannot show the whole picture.
People need to understand their responsibilities, follow the agreed processes and retain appropriate records.
Eye Bray provides consultancy and preparation. I do not issue ISO certificates or make the independent certification decision, but I can help make the assessment process more efficient and effective.
What does ISO consultancy include?
The scope depends on your starting point, but we may need to address:
- Gap analysis against the relevant requirements.
- The scope of your management system.
- Policies, procedures and document control.
- Responsibilities and competence.
- Risk assessment and relevant registers.
- Practical implementation and staff briefings.
- Monitoring, internal audits and management review.
- Corrective actions and preparation for external assessment.
We explain what needs to happen and then help develop the agreed system. Your team provides information, approves decisions and carries out the activities that demonstrate it is working.
Integrated Management Systems
If you need more than one ISO standard, separate folders and duplicated procedures can create unnecessary work.
An integrated management system can share suitable processes such as document control, competence records, audits and management review. The requirements of each standard still need to be addressed.
We already support clients across ISO 9001, ISO 14001 and ISO 45001. Learning how a business operates across these areas helps identify where a joined-up approach is useful.
ISO Support for Growing Contractors and Service Businesses
Construction businesses, facilities management companies, access providers and building services contractors can encounter ISO requirements as they pursue larger customers or contracts.
The first question is what the buyer actually requires.
ISO certification may not be required for all opportunities. An alternative contractor assessment may be appropriate in some cases. We establish the requirement before committing to a project.
If your immediate need concerns SSIP or Constructionline, we can also discuss contractor accreditation support.
How We Approach an ISO Project
Confirm the Objective
We establish the relevant standard, your business activities and any specific buyer requirements.
Review What You Have
We look at processes, documents, records and responsibilities to identify the gaps.
Agree the Work
We set priorities, responsibilities and a target programme, including the contribution your team will make.
Implement and Review
We develop the system, help people understand it and review evidence of how it operates.
Prepare for Independent Assessment
We address gaps and coordinate preparation around the certification body’s requirements.
Existing Systems and Ongoing Support
You may already hold certification and need help maintaining the system, addressing findings or adapting it to changes in the business.
Support can be scoped around internal audits, documentation updates, team briefings and preparation for assessments.
When standards are revised, we can review the relevant changes and plan the work against your certification body’s transition arrangements.
Timescales and Costs
A business with established processes and an internal administrator will need different support from one starting with little documentation and no available staff time.
We can explain the likely scope after reviewing your starting point. Consultancy and independent certification fees are separate costs.
We can agree a target programme schedule, but progress depends on timely information, business decisions, implementation and the availability of the certification body.
Frequently Asked Questions
Can you help us choose the right ISO standard?
Yes. We start with the outcome you want and any customer requirement, then establish which standard or assessment is relevant.
Can we implement a standard without certification?
Yes. A business can use a management system standard to improve its arrangements without seeking independent certification. A customer may nevertheless require a certificate.
Do you recommend a certification body?
We can discuss the assessment requirements and how to evaluate suitable independent certification bodies. If a buyer requires accredited certification, the details need to be checked before moving forward.
Do we need a full-time compliance manager?
That depends on the business and the work involved. I can support an existing manager or administrator and help you identify how responsibilities should be allocated and work undertaken
Can you guarantee that we will pass?
No. Certification depends on your organisation demonstrating that it meets the requirements. The certification body makes that decision.
Where do you work?
Eye Bray is based in Brentwood, Essex, focusing on Essex and East London. Remote work and projects elsewhere in the South East can be discussed according to scope.
Make Sense of Your ISO Requirements
Tell me which standard has been requested, why you need it and what you have in place.
We can establish a practical route towards assessment.
