Lessons from a Challenging Stage 1 Audit

01The stated scope did not match operations

Auditors need to understand organizational boundaries, sites, products, services and significant processes to plan a valid Stage 2. A broad certification statement can conceal activities without common control, while a narrow one can omit services customers reasonably associate with the system. Scope decisions must be defensible.

Illustrative situation. The company uses a national branding statement, but two regional depots apply different dispatch and calibration rules. A common certificate cannot be evaluated without an intelligible boundary and a picture of shared versus local controls.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. For the stated scope did not match operations, expand the review beyond the individual interviewed. Examine another relevant owner, shift, site or customer transaction if variation could change the credibility of the explanation.

Practical test. Reconcile the scope statement, site list, contracts, process owner matrix and actual service flow before the next audit. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

02Leadership accountability was unclear

A stage one discussion with top management should establish how the system supports direction, priorities and customer obligations. An appointed quality coordinator can administer documents but does not replace leadership accountability for process performance, resources and decisions.

Illustrative situation. The managing director delegates every management system question to a consultant and cannot identify the organization’s most consequential service failure or what the last management review changed.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. The assurance question for leadership accountability was unclear is whether the stated arrangement would still operate if the usual approver were absent or an urgent customer change occurred. Evidence of delegated authority and traceable decisions can be decisive.

Practical test. Ask leaders to show a real decision that links an objective or risk to resources, ownership, and operational results. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

03Interfaces exposed disconnected procedures

Process interaction matters more than the count of approved documents. Quoting, purchasing, scheduling, delivery and complaint handling must transfer accurate requirements and responsibilities. Missing handoffs can produce contradictions even when each departmental procedure looks complete.

Illustrative situation. A purchase order is approved without checking that the required engineer qualification is available for the site visit; scheduling and competence controls exist separately but never intersect.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. Treat interfaces exposed disconnected procedures as a boundary decision rather than a document count. Match the commercial or organizational claim to actual process authority and check whether outsourced interfaces have clear acceptance responsibilities.

Practical test. Walk one live job from accepted order through resource assignment, subcontractor use, delivery acceptance and feedback. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

04An internal audit had not tested reality

Organizations may treat their internal audit as a document index review conducted days before Stage 1. That is a weak readiness signal if significant activities, locations and problem areas have never been sampled or nonconformities remain unexplored.

Illustrative situation. The audit summary says “all procedures checked” but contains no sampled service jobs, interviews, process trails or rationale for concluding effectiveness. Stage 2 planning now carries avoidable uncertainty.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. When testing an internal audit had not tested reality, assess not only whether an activity was completed but whether the resulting output was acceptable and monitored. Evidence of an adverse result is particularly useful for examining system learning.

Practical test. Demonstrate objective, criteria, sample rationale, evidence and follow up in the internal audit records; identify blind spots explicitly. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

05Management review was ceremonial

A useful management review synthesizes system performance, risks, customer feedback, improvement needs, resources and decisions. Meeting minutes that merely approve the policy will not show that leaders evaluated whether the system is suitable and effective.

Illustrative situation. Minutes list attendees and “QMS satisfactory” yet leave recurring delivery delays and supplier failures untreated. The next readiness meeting should make those issues decision items.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. For management review was ceremonial, distinguish a verified fact from a plausible explanation. An unresolved inconsistency should lead to additional evidence, a qualified conclusion or documented corrective action, not a convenient assumption.

Practical test. Trace management review inputs to decisions, owners, deadlines and later evidence of follow through. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

06Stage 1 should change the Stage 2 plan

Readiness issues are valuable only when resolved before intensive operational sampling. The organization and certification body need an accurate basis for scope, audit objectives, site coverage and available evidence; audit duration and timing should not be chosen as a marketing target.

Illustrative situation. A proposed Stage 2 date becomes unrealistic after a newly acquired site and an outsourced IT function are added to the declared scope. Keeping the original plan would undermine coverage.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. A sound decision on stage 1 should change the stage 2 plan identifies its owner, affected population, the relevant requirements and the review date. Without those elements, even a genuine improvement can be difficult to verify later.

Practical test. Document readiness actions and agree revised audit arrangements through the certification body; do not promise a certificate date. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

07Turn a hard readiness review into a work programme

An effective response distinguishes immediate evidence collection from system changes requiring implementation. Assign process owners and verification criteria, rather than making the quality coordinator the person who writes everything.

Illustrative situation. The organization redesigns dispatch authorization, pilots the control on five jobs, confirms competence and reports the results to leadership before confirming the Stage 2 plan.

At this readiness stage, a gap is valuable when it changes the planned Stage 2 scope, timing, resources or sampling approach before the main assessment begins. To evaluate turn a hard readiness review into a work programme, compare the written rule with at least one credible operation record and an exception. The resulting conclusion should explicitly state where it applies and where available evidence cannot support broader assurance.

Practical test. Accept Stage 2 readiness when processes operate, records exist and issues have been reviewed, not because every file has a signature. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

Conclusion: Evidence before assumptions

A demanding Stage 1 audit often reveals unclear scope, weak process interfaces and insufficient readiness, not simply a shortage of procedure documents. A responsible organization should use the specific situation, the applicable standard and the certification body’s formal process to determine next steps. The most reliable conclusions are those linked to named owners, verifiable records and the declared scope rather than promotional timelines or template completion.

For management, the practical decision is to identify remaining uncertainty, assign responsibility and plan a verification event. That allows the organisation to improve its system even where no new external finding is raised, while preserving an accurate description of what certification does and does not establish.