Key takeaways
- Three different people get called ISO auditors and they do very different jobs: the accredited certification body's auditor, your own internal auditors, and the specialists who prepare the system.
- Only an independent, accredited certification body can issue your ISO certificate. We do not issue certificates, and we keep that role independent on purpose.
- Internal audits are a requirement of every ISO management system standard. We set them up and run them as part of an implementation, and carry them out on their own for clients who need an internal audit or audit-readiness review.
- Our strength is the whole system: design, build, maintain and get you audit-ready, so the certification body's auditor finds a system that holds together.
- Whether you need a full system built or a focused internal audit and readiness review, we shape the engagement around where your business actually is.
If you have searched for ISO auditors in South Africa, you have probably noticed the word does more than one job. Three quite different people get called an ISO auditor, and knowing which one you actually need saves a lot of confusion and, sometimes, a lot of money. This is a short, plain guide to who audits your ISO management system, what each role does, and where a consulting partner like us fits.
Three roles, one confusing word
An ISO audit is not a single event carried out by a single kind of person. There is the external audit run by an independent certification body, the internal audits your own business runs between those, and the preparation that gets the system ready in the first place. They are done by different people for different reasons, and keeping them separate is part of what makes a certificate trustworthy.
The certification body's auditor
This is the auditor most people picture. An independent certification body sends a lead auditor to examine your management system against the standard and decide whether certification can be issued. In South Africa, what makes that certificate worth having is accreditation: the certification body should be accredited by SANAS or another IAF signatory, so the certificate is recognised by clients, tenders and regulators. We do not play this role and we never issue certificates. That independence is the whole point of the system, and we explain how it works on our accredited certification page.
Your internal auditors
Every ISO management system standard requires internal audits: a structured check that your own system is being followed and is working, carried out between the external audits. These can be run by trained people inside your business or supported from outside. Internal audits are not a formality; they are how problems get found and fixed before the external auditor ever sees them. When we implement a system, we build the internal audit programme into it and run those audits as part of the work, so the discipline is real rather than a box ticked the week before an audit.
Where we fit: getting the system audit-ready
Our job sits before and around both of those audits. We design and build the management system, prepare your people, structure the evidence, and run internal audits so that by the time the certification body's auditor arrives, the system holds together and the audit is a confirmation rather than a scramble. That is what we mean by audit-ready. You can see how the whole engagement works on our ISO certification consultants and ISO consulting and implementation pages.
Internal audits and audit-readiness reviews
Internal audits are one of the most useful things you can do between certification audits, and they are a requirement of the standard. We run them as part of every implementation, and we also carry out internal audits and audit-readiness reviews for clients who already have a system in place and want an experienced, independent pair of eyes before the external audit. What we look for is the same either way: is the system being followed, is it working, and is the evidence there before the certification body's auditor arrives. Our preference is to build and maintain the whole system, because that is where the results last, and where an internal audit or a readiness review is the right next step, that is exactly what we deliver.
Talk to us about your ISO audit
Whether you need us to build the system, run your internal audits, or get you ready for the external audit that decides your certificate, a short conversation is usually enough to point you the right way. Tell us where your business is and we will shape the work around it.