Five representative scenarios showing how a gap analysis becomes a certificate — for ISO 9001, IATF 16949, ISO 14001, ISO 45001 and AS9100.
Sector: precision manufacturing, automotive & industrial heat-exchange components. Trigger: a key OEM customer made ISO 9001 a condition of continued supply.
Quality control ran on individual inspectors' experience rather than a documented system. No formal internal audit programme, no structured non-conformance process, and document control was scattered across shared drives.
An eight-week gap analysis and documentation phase, lean process maps built around the existing shop-floor routine rather than a generic template, an internal audit programme trained into two production supervisors, and a mock audit before the real thing.
Benchmarked current practice against ISO 9001, prioritised the gaps that actually mattered to the customer's expectations.
Lean documentation and a risk register that reflected real production risk, not paperwork for its own sake.
Trained internal auditors found and closed the real non-conformities before the certification body ever arrived.
Stage 1 and Stage 2 audits with a UKAS-accredited body, typically within a five-to-six-month window from project start.
Certification achieved within the timeframe the OEM customer required, with the internal audit programme handed over so the business could sustain the system without ongoing consultancy support.
Sector: automotive powertrain components. Trigger: an existing ISO 9001-certified supplier needed IATF 16949 to retain automotive OEM business.
ISO 9001 certified, but no formal APQP, PPAP or control plan process — customer-specific requirements (CSRs) were being met informally, case by case, which created risk at every new-model launch.
A core-tools gap analysis against each customer's CSRs, a structured APQP framework built into the launch process, control plans and PPAP submissions standardised, and FMEA/MSA/SPC training coached into the engineering team rather than outsourced permanently.
Mapped APQP, PPAP, FMEA, MSA and SPC maturity against IATF 16949 and live customer CSRs.
Control plans, PPAP packages and FMEAs built alongside the engineering team, not handed over as a finished document nobody owns.
Internal audits against IATF 16949's process-approach requirements, not just ISO 9001's.
Two-stage certification audit with an IATF-recognised certification body, typically nine to twelve months from project start given existing ISO 9001 maturity.
Certification retained the OEM contract, and the engineering team came out able to run APQP and PPAP independently for future model launches.
Sector: solar and battery-storage project delivery. Trigger: tender requirements on major framework contracts increasingly specified ISO 14001.
Strong environmental practice on the ground (the business's whole product is renewable energy) but no formal environmental management system — aspects and impacts weren't documented in a way an auditor could verify.
An aspects-and-impacts register covering multi-site project work (waste, transport, subcontractor management), integrated with the existing ISO 9001 system already in place to avoid duplicating audits and management review.
Identified and prioritised the environmental aspects that actually mattered across multiple live project sites.
Built into the existing ISO 9001 management system rather than run as a separate parallel system.
One combined internal audit programme and management review covering both standards.
Certification audit extended to cover ISO 14001 alongside the existing ISO 9001 surveillance cycle.
ISO 14001 added at a fraction of the cost of a standalone project, meeting tender requirements ahead of framework renewal deadlines.
Sector: infrastructure modernisation — engineers working on live sites in occupied buildings. Trigger: principal contractors increasingly required ISO 45001 for site access.
Good day-to-day safety discipline among field engineers, but risk assessments and method statements (RAMS) varied by author, and there was no structured incident-investigation or near-miss process to learn from.
Standardised RAMS templates for common lift and escalator modernisation tasks, a near-miss reporting process field engineers would actually use, and worker consultation built into hazard identification rather than done to them.
Reviewed live RAMS, incident history and worker consultation practice against ISO 45001.
Standardised RAMS, a usable near-miss and incident-investigation process, and legal-register tracking for site-access requirements.
Site-based internal audits, not just office paperwork reviews.
Certification audit including live site visits alongside document review.
Certification met principal contractors' site-access requirements, and near-miss reporting increased as field engineers gained a process they trusted rather than feared.
Sector: aerospace & defence precision machining. Trigger: an aerospace prime required AS9100 certification to qualify as an approved subcontractor.
ISO 9001 certified with a mature quality culture, but no formal configuration management, first-article inspection process, or traceability system to the level aerospace primes require.
Building on the existing ISO 9001 system rather than starting again — adding first-article inspection (AS9102), configuration management, counterfeit-parts prevention and the additional traceability and risk-management clauses AS9100 requires.
Focused only on what AS9100 adds on top of the existing ISO 9001 system, not a rebuild from zero.
First-article inspection, configuration management, risk management and counterfeit-parts prevention processes.
Internal audits extended to cover the AS9100-specific clauses.
Certification audit with an aerospace-recognised certification body, typically three to six months given the mature starting point.
Approved subcontractor status achieved with the aerospace prime, built on the existing ISO 9001 foundation rather than a parallel system.
Standards & methodologies we work to
Sectors we work in
Tell us your sector and where you are today, and we'll map out what your project would actually involve.
Book a free scoping call →