Resources

Route to Certification

• Read and become familiar with the Specification and Guidance Documents available for specific Management System Standard;
• Determine the scope of your Management System (based on your key products and services);
• If appropriate, review existing system arrangements and undertake analysis in line with the Specification requirements;
• Commence work on your Management System aligning this with any existing Management Systems that are in place to save unnecessary duplication of work. Familiarise yourself with the contents of Annex SL (ISO Guidance Document);
• Identify internal training needs for specific Management System roles as well as your companywide communications process;
• Consider arranging an independent Gap Analysis to identify how your Management System meets the ISO requirements;
• Identify your preferred Certification Body and make formal application to them. (Allow 3-6 months prior to when you wish to be certified);
• Consider arranging an independent Pre Certification Assessment to review your progress towards readiness for formal certification;
• Stage 1 certification audit is undertaken by Certification Body. This is a review of the fundamental requirements of your chosen Specification Standard and will provide a clear indication of preparedness for full certification. Stage 2 certification audit is likely to be 1-3 months later, based on audit findings;
• Stage 2 certification audit is undertaken by Certification Body. This will include a full assessment of all critical locations or a 33% sample, as required by the Management System Standard you are seeking certification to; and
• Certification achieved and certificate issued.

What to expect after the certification audit

• Ongoing surveillance audits by the Certification Body to ensure that your BCMS is being maintained. These will most likely be annually but may be more frequent depending on the nature of your business or the Certification Body’s individual requirements
• A full re-certification audit is likely to take place every three years from original certification date. This will follow a similar format and duration as the initial audit.

Internal maintenance of the Management System is required on an ongoing basis. This will include internal audits, Management Review meetings and documentation reviews. This will be in addition to the maintenance of your operational arrangements (clause 8 requirements) which must also be maintained.

If you would like to discuss how to conduct exercises or any other aspects of exercising your business continuity arrangements then please contact Perpetual Solutions and we will be pleased to help you.