Certification is only worth holding if it survives surveillance. We keep systems running for businesses that would rather not tie up staff doing it.
What ongoing support covers
Arranged on a regular basis or around your own timetable. We support your in-house staff, or take responsibility for the routine work entirely if you have nobody to allocate to it.
- Internal audits across the full cycle
- Preparing for and supporting your management review
- Logging and investigating issues and complaints
- Supplier appraisals and keeping the approved supplier list current
- Collecting and analysing customer feedback
- Keeping registers current, including legal and other requirements
- Preparing for surveillance and recertification audits
Internal audits
Auditing should be done by someone independent of the area being audited. In a smaller company there often is nobody who qualifies, and the person who wrote the procedure ends up auditing their own work.
Acting as your ISO representative we can carry out your internal audits properly, across the whole standard and the whole business, spread through the year rather than crammed in before the assessor arrives.
An audit programme that never raises anything is not evidence of a perfect business. It is evidence of a programme that is not looking, and assessors read it that way. Ours find things, which is the point.
Keeping up with the standards
Standards get revised, and a certificate to a superseded version eventually stops being valid. ISO 9001 and ISO 14001 were both revised in 2026, each with a three-year transition period. ISO 37001 was revised in 2025. ISO 27001 changed in 2022.
Support clients get our ISO and legal update service, so you hear about changes that affect you from us rather than from your certification body at a surveillance visit. We handle transitions as part of the service, timed to fall at a scheduled audit rather than as a separate exercise, which is considerably cheaper.
See our guides to the ISO 9001:2026 and ISO 14001:2026 transitions for what one of these actually involves.
When a system has drifted
If internal audits have been skipped, the management review has not happened this year, or the last audit produced findings nobody closed, that is recoverable and it is a common reason people call us.
Often the underlying problem is that the system is over-documented. It was built to satisfy an auditor rather than to be used, so nobody uses it and it decays between visits. Cutting it down is usually a bigger win than adding to it.
Handing it back
The cheapest long-term outcome for you is not needing us. Where you want your own team to take it on, we train them to run the audits and the review themselves, and step back to a lighter role. See ISO training for how that works.
What it costs
Support is quoted as a fixed price for an agreed scope, or at our day rate of £630 plus VAT for ad-hoc work such as a one-off internal audit, a system health check or surveillance preparation. No rolling retainer with a notice period.
Our costs page has the detail.