AVEN
Standards expansion
Reuse an existing management foundation, add specialist controls and manage edition changes through a sourced change map.
Service scope
Understand the work before writing documents
Having ISO 9001 does not mean another standard can be covered by changing a document heading. Shared work such as document control, competence and internal audit can be reused; scope, risk, specialist controls and evidence need separate design. For an edition transition, we map old to new requirements and revise only where impacts are shown.
01
Signals to start
These are illustrative scenarios for discovery, not actual clients or completed outcomes.
Illustrative scenario
Manufacturing
An export customer asks about environment as well as quality. Keep shared processes but add environmental aspects, justified obligations and monitoring; obtain specialist validation.
Illustrative scenario
Services
Two form sets ask for the same thing but have different approval cycles. Integration starts with one owner and calendar, then marks which requirements are shared.
Illustrative scenario
Food
A business has quality controls but partners request ISO 22000/FSSC. PRPs, HACCP, traceability and scheme requirements need food-safety specialist validation.
Illustrative scenario
Software and IT
Operating under 9001, a customer asks for 27001. Reuse audits and document control, but add ISMS scope, information-risk assessment, Statement of Applicability and control records.
Illustrative scenario
Construction
Sites have different crews and contractors; adding 45001 cannot rely on one generic checklist. Hazards, worker consultation and response need safety specialist validation against the actual scope.
02
Phased work with explicit exit conditions
Confirm scope & sources
Identify standards, editions, sites and licensed source documents. Use only publication and transition dates confirmed by official sources.
Deliverable: Expansion scope, source list and applicability decisions.
Move on when: Qualified specialists validate technical sections.
Map shared and specialist work
Link each requirement to an existing control; mark reusable, amend or missing. For 9001:2026, separate changes in quality culture, ethics, risks/opportunities and climate context.
Deliverable: Old-to-new map, transition GAP report and specialist-control list.
Move on when: Process owners confirm existing evidence.
Update & operate
Revise shared documents once, add specialist forms only when necessary. Train by role and obtain records from work after the new version is issued.
Deliverable: New document versions, training plan, action register and operating records.
Move on when: Authorized people approve versions and owners put them into use.
Audit & decide
Independent auditors sample actual work against shared and new requirements; leadership reviews gaps, resources and the transition calendar.
Deliverable: Audit plan/records, management-review minutes and sourced transition evidence pack.
Move on when: Close GAP items only with sources and verifiers; leave the rest open.
03
Deliverables that can be checked
The exact pack follows the agreed scope; records need sources and drafts are clearly marked for approval.
- Process map and handoffs showing inputs, outputs, owners and where records arise.
- Fit-for-scope policy/manual and document register, each with approver, effective date and version history.
- Procedures and forms for work that needs control; undecided fields stay marked for approval rather than filled with guesses.
- Sourced risk–opportunity matrix with owners and actions, without one aggregate risk score.
- Role-based training plan, approved materials and actual attendance records; knowledge checks never automatically become competence conclusions.
- Internal-audit programme, plan and records; auditors do not audit work they designed or performed.
- Management-review minutes record inputs, decisions, resources and follow-up owners; the meeting must actually occur.
- Action/CAPA register separates implementer from effectiveness verifier, retaining change history and post-action evidence.
- Readiness evidence pack by applicable requirement, with source, version and gaps; it does not replace a certification body’s conclusion.
04
Who does what, and how long?
AVEN
We design discovery, facilitate working sessions, map requirements and processes, configure the workflow, prepare versioned templates, train by role and return findings to decision owners. Food, environmental and occupational-safety content requires qualified specialist validation; we do not invent limits or duties.
Your organization
Your organization confirms scope, supplies authorized records, names process owners and approvers, operates controls and records what happened. Leadership decides resources, objectives and changes; internal auditors remain independent from the work they audit.
One additional standard at one site with 10–50 people: an illustrative 4–8 sessions over 1–3 months if the existing system is truly operating. For 50–200 people, multiple sites or standards: an illustrative 8–18 sessions over 3–6 months. A 9001:2026 transition must follow official accredited transition dates and time to generate new records, not only an expiry date.
A session may be an interview, design workshop, document review, training or sample check. Timing is illustrative, not a certification schedule; a formal plan follows discovery.
Platform in the service
One flow from scope to verification
Each step retains the decision, source and owner so a later review does not have to reconstruct the story.
- ScopeConfirm sites, activities, outputs and interfaces; unknowns remain explicitly open.
- Applicable requirementsSeparate standard, legal and contract requirements; each has a source and an approving owner.
- Current stateSample records from work that actually happened; a blank form is never counted as evidence.
- ActionAssign gap-closing work with owner and due date approved by the client.
- EvidenceLink permission-checked, scanned and versioned files or records to the right requirement.
- VerificationAn authorized person checks source and effectiveness and makes the decision; history is retained.
The client portal keeps tasks, document versions and evidence in the right project; server-side permissions apply before viewing, searching or exporting.
Reminders use dates approved by task owners. The one-page report uses the same data source as the screen: due work, open actions and missing evidence are shown as counts, never as one aggregate compliance percentage.
Teams can work remotely on interviews, draft reviews, assignments and authorized records. Work requiring on-site observation is scheduled separately after scope is agreed.
ISO 9001:2026
Transition against confirmed changes
The 2026 edition was published on 16 Sep 2026. From 31 Mar 2028, new certificates use the 2026 edition; 2015 certificates cease to be valid after 30 Sep 2029. Allow time to issue changes, operate and create real records, conduct internal audit and management review, then work with an independent certification body.
The old-to-new map identifies reusable controls, amendments and missing evidence. The transition GAP report sources each finding; quality culture, ethical conduct, risks and opportunities, and climate context are checked against actual operations without inventing obligations. Client decision owners approve changes.
Official transition source06
Completion conditions and boundaries
Completion requires the change map to be validated by specialists and process owners; shared controls are not duplicated without reason; new controls have operating records and independent checks; leadership sees transition dates and open gaps. We do not make certificate-transition decisions for the certification body.
Not included
- Certification-body fees, certification audits and certification decisions are outside the service; the client selects an independent body.
- We do not create measurements, minutes, training records or audit outcomes for events that have not occurred. Specialist legal, safety, food or environmental work needs qualified people and a separate scope.
- Software, equipment, testing or on-site surveys outside the agreed proposal are excluded. Any addition is described by output, owner and cost before work begins.
Next step
Start with a scope that can be checked
Self-check first, or send an outline of your scope so we can agree outputs, sessions and specialist needs. Do not send sensitive records through the public form.
We provide consulting and training; certification decisions are made independently by certification bodies.