{"id":14992,"date":"2022-09-26T14:56:42","date_gmt":"2022-09-26T12:56:42","guid":{"rendered":"https:\/\/brandcompliance.com\/?post_type=docs&#038;p=14992"},"modified":"2025-06-17T14:52:16","modified_gmt":"2025-06-17T12:52:16","password":"","slug":"initial-audit-stage-1","status":"publish","type":"docs","link":"https:\/\/brandcompliance.com\/en\/docs\/initial-audit-stage-1\/","title":{"rendered":"Initial audit Stage 1"},"content":{"rendered":"<h2><strong>What are the main points of attention for an initial audit Stage 1?<\/strong><\/h2>\n<p>You are about to start the <a href=\"https:\/\/vimeo.com\/679909362\" target=\"_blank\" rel=\"noopener\">certification process<\/a> of a management system audit. In this article, we would like to share our practical experience with these audits, to provide you with optimal information about the certification process.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-12483\" src=\"https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/01\/Header-Blog-Fase-1-ISMS.jpg\" alt=\"Initial audit Stage 1\" width=\"600\" height=\"338\" srcset=\"https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/01\/Header-Blog-Fase-1-ISMS.jpg 1000w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/01\/Header-Blog-Fase-1-ISMS-300x169.jpg 300w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/01\/Header-Blog-Fase-1-ISMS-768x432.jpg 768w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/01\/Header-Blog-Fase-1-ISMS-600x338.jpg 600w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/p>\n<h2><strong>The certification process and the audit cycle<\/strong><\/h2>\n<p>Brand Compliance is an independent audit office that checks whether your organization meets the set standards. For example <a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-27001-certification\/\">ISO 27001<\/a>, <a href=\"https:\/\/brandcompliance.com\/en\/services\/gdpr\/iso-27701-certification\/\">ISO 27701<\/a>, <a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-9001-certification\/\">ISO 9001<\/a> and <a href=\"https:\/\/brandcompliance.com\/en\/services\/nen-7510-certification\/\">NEN 7510<\/a>. We assess whether you have correctly applied the standard\u2019s requirements and implemented it into your organization and whether you operate in accordance with your policy documents, processes, and procedures. If the result is positive, we will issue a certificate.<\/p>\n<p>Management system certifications such as <a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-27001-certification\/\">ISO 27001<\/a>, <a href=\"https:\/\/brandcompliance.com\/en\/services\/gdpr\/iso-27701-certification\/\">ISO 27701<\/a>, <a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-9001-certification\/\">ISO 9001<\/a> and <a href=\"https:\/\/brandcompliance.com\/en\/services\/nen-7510-certification\/\">NEN 7510 <\/a>consist of a cycle comprising three years. Each year we will conduct an audit at your organization. The cycle starts as soon as your organization has obtained a certificate for the first time.<\/p>\n<p>In order to obtain a certificate for the first time, we conduct a so-called \u2018initial audit\u2019. The audit consists of two stages.<\/p>\n<ul>\n<li>Stage 1 audit: during stage 1, we assess whether your organization is ready for stage 2, on the basis of the documented information in your <a href=\"https:\/\/brandcompliance.com\/en\/docs\/what-is-a-management-system\/\">management system<\/a> and your knowledge and understanding of the requirements of the standard.<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/docs\/initial-audit-stage-2\/\">Stage 2 audit<\/a>: during Stage 2, we assess the implementation and effectiveness of the management systems. Are all processes executed as described? Is the policy adhered to? Are employees aware of their contribution to the management system?<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"alignnone wp-image-13621 size-large\" src=\"https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2-1024x200.png\" alt=\"initial audit\" width=\"1024\" height=\"200\" srcset=\"https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2-1024x200.png 1024w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2-300x59.png 300w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2-768x150.png 768w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2-600x117.png 600w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2022\/03\/proces_fase-2.png 1283w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<h2>Focal points in preparation for an initial audit Stage 1<\/h2>\n<p>We are happy to share the following focal points with you. These points are essential in your preparations for the certification process.<\/p>\n<ol>\n<li>Before planning the audit, determine that your organization has a functioning management system with the related processes and working methods.<\/li>\n<li>Ensure that you have integrated the management system processes into your organization\u2019s processes so that they fit in with your business operations.<\/li>\n<li>In addition to the mandatory <a href=\"https:\/\/brandcompliance.com\/en\/docs\/the-brand-compliance-glossary\/\">documented information<\/a> ensure that you maintain sufficient documentation to demonstrate that you are carrying out the management system processes effectively.<\/li>\n<li>Document where you deviated from your \u2013 planned \u2013 processes due to circumstances.<\/li>\n<li>Be familiar with the standard\u2019s requirements and make sure that your staff knows how they contribute to fulfilling these requirements. You and your employees are able to identify this in the interview with the auditor.<\/li>\n<li>You are familiar with the key performances of the management system and significant aspects, processes and objectives.<\/li>\n<li>You can explain the specific circumstances that apply to the site or the entire organization.<\/li>\n<li>You and your staff can clarify the <a href=\"https:\/\/brandcompliance.com\/en\/docs\/tips-for-describing-a-proper-scope\/\">scope<\/a> of the management system, aimed at:\n<ol>\n<li>The activities, products and services;<\/li>\n<li>The sites where these activities, products and services are performed;<\/li>\n<li>The processes that enable the execution of these activities, products and services;<\/li>\n<li>The assets required to carry out these processes.<\/li>\n<\/ol>\n<\/li>\n<li>Ensure that the internal audit and management review have been fully completed prior to stage 1 of the initial audit.<\/li>\n<\/ol>\n<h2><strong>Completion Stage 1<\/strong><\/h2>\n<p>During stage 1, it was assessed whether your organization is ready for stage 2. During the closing meeting of the Stage 1 audit, the <a href=\"https:\/\/brandcompliance.com\/en\/certification-body\/vacancies\/information-security-auditor\/\">auditor<\/a> will clarify any areas of concern in your management system that could lead to a <a href=\"https:\/\/brandcompliance.com\/en\/docs\/nonconformities-within-the-management-system\/\">nonconformity<\/a> during stage 2. You can get started with this in time to start stage 2 well prepared. For this reason, it is essential to schedule sufficient time between the stage 1 and <a href=\"https:\/\/brandcompliance.com\/en\/docs\/initial-audit-stage-2\/\">stage 2 audit<\/a>.<\/p>\n<h3>Questions?<\/h3>\n<p>If you have any further questions regarding the stage 1 audit or other questions, you can contact us at any time via:<\/p>\n<script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n\/* ]]> *\/\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gform_legacy_markup_wrapper gform-theme--no-framework' data-form-theme='legacy' data-form-index='0' id='gform_wrapper_44' ><form method='post' enctype='multipart\/form-data'  id='gform_44'  action='\/en\/wp-json\/wp\/v2\/docs\/14992' data-formid='44' novalidate>\t\t\t\t\t<div style=\"display: none !important;\" class=\"akismet-fields-container gf_invisible\" data-prefix=\"ak_\">\n\t\t\t\t\t\t<label>&#916;<textarea name=\"ak_hp_textarea\" cols=\"45\" rows=\"8\" maxlength=\"100\"><\/textarea><\/label>\n\t\t\t\t\t\t<input type=\"hidden\" id=\"ak_js_1\" name=\"ak_js\" value=\"16\" \/>\n\t\t\t\t\t\t<script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\ndocument.getElementById( \"ak_js_1\" ).setAttribute( \"value\", ( new Date() ).getTime() );\n\/* ]]> *\/\n<\/script>\n\n\t\t\t\t\t<\/div>\n                        <div class='gform-body gform_body'><ul id='gform_fields_44' class='gform_fields top_label form_sublabel_below description_below validation_below'><li id=\"field_44_16\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_16'>X\/Twitter<\/label><div class='ginput_container'><input name='input_16' id='input_44_16' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_44_16'>This field is for validation purposes and should be left unchanged.<\/div><\/li><li id=\"field_44_9\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield--width-full field_sublabel_below gfield--no-description field_description_above field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_9'>What is your question about?<\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_9' id='input_44_9' class='textarea small'      aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/li><li id=\"field_44_15\" class=\"gfield gfield--type-text gfield--input-type-text gfield--width-full field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_15'>Your name<\/label><div class='ginput_container ginput_container_text'><input name='input_15' id='input_44_15' type='text' value='' class='large'      aria-invalid=\"false\"   \/><\/div><\/li><li id=\"field_44_2\" class=\"gfield gfield--type-text gfield--input-type-text gfield--width-full field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_2'>Company Name<\/label><div class='ginput_container ginput_container_text'><input name='input_2' id='input_44_2' type='text' value='' class='large'      aria-invalid=\"false\"   \/><\/div><\/li><li id=\"field_44_8\" class=\"gfield gfield--type-email gfield--input-type-email gfield--width-full field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_8'>Email address<\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_8' id='input_44_8' type='email' value='' class='large'     aria-invalid=\"false\"  \/>\n                        <\/div><\/li><li id=\"field_44_7\" class=\"gfield gfield--type-phone gfield--input-type-phone gfield--width-full field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_7'>Phone number<\/label><div class='ginput_container ginput_container_phone'><input name='input_7' id='input_44_7' type='tel' value='' class='large'    aria-invalid=\"false\"   \/><\/div><\/li><li id=\"field_44_10\" class=\"gfield gfield--type-captcha gfield--input-type-captcha field_sublabel_below gfield--no-description field_description_below hidden_label field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_44_10'>CAPTCHA<\/label><div id='input_44_10' class='ginput_container ginput_recaptcha' data-sitekey='6LfQXsQZAAAAADnWRIxONY6yeLEJkbC5hTqPCCWB'  data-theme='light' data-tabindex='-1' data-size='invisible' data-badge='bottomright'><\/div><\/li><\/ul><\/div>\n        <div class='gform-footer gform_footer top_label'> <input type='submit' id='gform_submit_button_44' class='gform_button button' onclick='gform.submission.handleButtonClick(this);' data-submission-type='submit' value='Submit your question'  \/> \n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_44' value='postback' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_44' id='gform_theme_44' value='legacy' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_44' id='gform_style_settings_44' value='[]' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_44' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='44' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='EUR' value='Xqg7vwuoyCdMwLKP\/GPx7lWGAK2ijAvAFinNMvlqxQ6tu7gyCYEuEjCHbGbXodczHK0Dqyi589QH1DZ84oSIkzRU0PCLyJiNWLsFiM5tFI2J3Zs=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_44' value='WyJbXSIsIjM5YzdlY2E2OTI1ZmE0YjAxMDJlNDBmYmZjMjY5YzcwIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_44' id='gform_target_page_number_44' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_44' id='gform_source_page_number_44' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div><script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\n gform.initializeOnLoaded( function() {gformInitSpinner( 44, 'https:\/\/brandcompliance.com\/wp-content\/plugins\/gravityforms\/images\/spinner.svg', true );jQuery('#gform_ajax_frame_44').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_44');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_44').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){jQuery('#gform_wrapper_44').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_44').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_44').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/  }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_44').val();gformInitSpinner( 44, 'https:\/\/brandcompliance.com\/wp-content\/plugins\/gravityforms\/images\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [44, current_page]);window['gf_submitting_44'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_44').replaceWith(confirmation_content);jQuery(document).trigger('gform_confirmation_loaded', [44]);window['gf_submitting_44'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_44').text());}else{jQuery('#gform_44').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"44\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_44\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_44\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_44\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 44, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} ); \n\/* ]]> *\/\n<\/script>\n\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What are the main points of attention for an initial audit Stage 1? You are about to start the certification process of a management system&#8230;<\/p>\n","protected":false},"author":6,"featured_media":13357,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"doc_category":[2338],"doc_tag":[],"class_list":["post-14992","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-certification-process"],"acf":[],"year_month":"2026-04","word_count":600,"total_views":"5891","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Anika","author_nicename":"anika","author_url":"https:\/\/brandcompliance.com\/en\/author\/anika\/"},"doc_category_info":[{"term_name":"Certification process","term_url":"https:\/\/brandcompliance.com\/en\/docs-category\/certification-process\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/14992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/comments?post=14992"}],"version-history":[{"count":1,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/14992\/revisions"}],"predecessor-version":[{"id":24414,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/14992\/revisions\/24414"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/media\/13357"}],"wp:attachment":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/media?parent=14992"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/doc_category?post=14992"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/doc_tag?post=14992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}