Consulting

ISO and sector scheme implementation

Development, implementation, and certification preparation for management systems — quality, food safety, information security, environment, and occupational health and safety.

9001 · 37001 · 22000 · FSSC 22000 · IFS · HACCP · GDP · 27001 · 27701 · 27017 · 27018 · 14001 · 45001 · 50001 · 22301 · 39001

Quality

Quality management systems

ISO 9001 and ISO 37001 implementation — processes, supplier control, anti-bribery, and certification preparation.

ISO 9001

The international standard for quality management systems. Fit for manufacturing, construction, and services when you need clear processes, supplier control, and measurable improvement.

  • Process map and responsibilities
  • Nonconformity and complaint handling
  • Internal audits and management review
  • Certification and surveillance preparation

ISO 37001

An anti-bribery management system. Policies, risk assessment, controls over partners, and audit evidence — when clients and regulators expect a clear anti-corruption frame.

  • Policy and leadership role
  • Bribery risk assessment
  • Controls over suppliers, agents, and donations
  • Investigations, whistleblowing, and certification readiness
Food

Food safety

ISO 22000, FSSC 22000, IFS, HACCP, and GDP for producers, processors, logistics, and distribution.

ISO 22000

A food safety management system. It connects prerequisites, operational control, and HACCP into one working framework.

  • Hazard analysis and CCPs
  • PRPs and operational PRPs
  • Traceability and incident response
  • Training and audit readiness

FSSC 22000

A GFSI-recognised scheme: ISO 22000 plus extra requirements for manufacturing and packaging. Often expected by international buyers.

  • Gap analysis against FSSC
  • Additional PRPs and specific controls
  • Documentation aligned with GFSI expectations
  • Certification audit preparation

IFS

International Featured Standards — food safety, quality, and compliance with clear audit criteria.

  • Readiness against IFS Food and related standards
  • Process and hygiene control
  • Specifications and labelling
  • Corrections before the external audit

HACCP

Hazard analysis and critical control points — the foundation of food safety. Works alone or inside ISO 22000 / FSSC / IFS.

  • Product and process-flow description
  • Hazard identification and CCP selection
  • Critical limits, monitoring, and corrections
  • Documentation and team training

GDP · Good Distribution Practices

Good Distribution Practices — control of storage, transport, and traceability along the chain. For distributors and logistics in food and related products.

  • Storage and transport conditions
  • Batch traceability and documentation
  • Hygiene, access, and carrier qualification
  • Internal checks and audit readiness
Information security

Information security and data protection

ISO 27001, ISO 27701, ISO 27017, and ISO 27018 for IT services, cloud, and personal-data processing.

ISO 27001

An information security management system. Risks, assets, and controls — a management frame, not an IT task list.

  • Asset inventory and risk assessment
  • Statement of Applicability and controls
  • Policies, access, and incident response
  • Internal audit and certification readiness

ISO 27701

An extension for personal data protection. Links information security with controller and processor roles — in the spirit of GDPR.

  • Personal data processing map
  • Roles, contracts, and data-subject rights
  • Integration with ISO 27001 controls
  • Evidence for audits and inspections

ISO 27017

Cloud security guidance for providers and customers. Clarifies who owns what in the shared responsibility model.

  • Cloud / customer responsibility split
  • Controls for virtual environments and admin
  • Contracts and SLAs with a security focus
  • Alignment with ISO 27001

ISO 27018

Protection of personal data in public cloud. Suited to SaaS and processors holding customer data on cloud infrastructure.

  • Controls for personal data in the cloud
  • Transparency toward clients and sub-processors
  • Link to ISO 27001 and ISO 27701
  • Preparation for client and certification audits
Operations and sustainability

Environment, OHS, energy, and continuity

ISO 14001, ISO 45001, ISO 50001, ISO 22301, and ISO 39001 — operational systems linked to ESG reporting.

ISO 14001

An environmental management system. Control impacts, meet requirements, and improve measurably over time.

  • Aspects, impacts, and legal requirements
  • Objectives, programmes, and operational control
  • Emergencies and communication
  • Link to ESG and EU Taxonomy

ISO 45001

Occupational health and safety. Hazard identification, worker participation, and a culture of prevention — especially in construction and manufacturing.

  • Risk and opportunity assessment
  • Procedures, instructions, and PPE
  • Incidents, investigations, and improvement
  • Integration with ISO 9001 and 14001 when needed

ISO 50001

Energy management. Measurement, targets, and efficiency projects — when energy is both cost and climate reporting.

  • Energy review and significant uses
  • Baseline, indicators, and monitoring
  • Improvement plans
  • Alignment with environmental and ESG goals

ISO 22301

Business continuity. Preparation for disruption — from cyber incident to physical event — with plans, drills, and recovery.

  • Impact analysis and continuity strategies
  • Plans, roles, and crisis communication
  • Testing and exercises
  • Link to ISO 27001 for IT continuity

ISO 39001

A road traffic safety management system. For organisations with fleets, transport, or significant road risk — targets, indicators, and fewer incidents.

  • Road-related context and risks
  • Indicators and targets to cut incidents
  • Driver training and transport controls
  • Monitoring, investigations, and improvement
Stages

Work stages

Gap diagnosis, documentation, training, internal audit, and preparation for the certification audit.

01

Diagnosis

Review of processes, documents, and risks against the chosen standard, with a nonconformity list.

02

Development

Procedures, roles, and indicators matched to the scope and how the organisation works.

03

Implementation

Documentation, staff training, and putting records into daily work.

04

Audit preparation

Internal audit, corrections, and preparation for the certification audit.

05

Maintenance

Management reviews, improvements, and support at surveillance audits.

ESG

Link to ESG and EU requirements

ISO 14001, ISO 50001 and related systems often provide part of the evidence for EU Taxonomy, CSRD, and ratings such as EcoVadis. We connect consulting to ESG preparation when needed.

Go to ESG

Looking for implementation or certification preparation?

Get in touch