ISO 9001 & ISO 45001 Audit Preparation Ireland
Gap Analysis - Documentation Review - Management System Development - Internal Audit Support - PI Insured
Request ISO Audit Preparation Support
Contact Phoenix STS for expert ISO 9001 and ISO 45001 audit preparation services. Practical support to get you certification-ready.
Expert ISO 9001 & ISO 45001 Audit Preparation
Phoenix STS prepares organisations for ISO 9001 (Quality Management) and ISO 45001 (Occupational Health and Safety Management) certification. Our experienced consultants guide you through every stage, from first gap analysis to mock audit. You arrive at your certification audit ready. We take a practical, business-focused approach. We do not build paper systems that exist only to satisfy auditors. We build management systems that improve your quality and safety performance. Our documentation is clear and practical, and your team can use it every day. Perhaps you are seeking certification for the first time. Perhaps you are moving from an older standard, or facing a surveillance or recertification audit. Whatever the stage, Phoenix STS provides the support you need to achieve and keep ISO certification.
Why You Need ISO Audit Preparation
Certification Success
First-time certification audits have a significant failure rate. Professional preparation greatly improves your chances of certifying at the first attempt. That saves both time and money.
Tender Requirements
Many public and private sector tenders require ISO 9001 or ISO 45001. Certification opens new business and shows your commitment to quality and safety.
Customer Confidence
ISO certification gives customers confidence in your quality and safety standards. Larger clients and supply chain partners increasingly expect it.
Legal Compliance
ISO 45001 requires you to identify and comply with the legal requirements that apply to you. Our preparation makes sure your system covers Irish health and safety law properly.
Operational Improvement
A well-implemented management system improves how you operate. ISO preparation is a chance to streamline processes, cut waste and improve safety outcomes.
Reduced Costs
Professional preparation avoids the costly mistakes of going it alone. You certify sooner, and you end up with a system that is efficient and sustainable.
What We Deliver
Practical, thorough ISO audit preparation tailored to your organisation.
Gap Analysis
A full gap analysis of your current systems against ISO 9001 or ISO 45001. It shows what you already have in place and what still needs to be built.
Documentation Development
All the management system documents you need: policies, procedures, work instructions, forms and records. Everything is tailored to your organisation.
Management System Design
A management system designed around your size, complexity and culture. It is practical, and it lasts.
Internal Audit Support
We train your team to run internal audits. We support the first audit programme so issues surface and get fixed before the certification audit.
Mock Audits
A full mock certification audit, run to the same standard as the real thing. It finds any remaining gaps and gives your team experience of the audit process.
Management Review Preparation
Support for management reviews that meet ISO requirements. The review shows top management is genuinely behind the management system.
Our ISO Preparation Process
Gap Analysis
We compare your current systems against the ISO standard, clause by clause. You get a clear report of what exists and what needs to be developed.
System Development
We work with your team to build the documents, processes and records the standard requires. Everything fits your organisation.
Implementation Support
We support the rollout of new processes and documents. We train your team and embed the management system into daily operations.
Internal Audit & Mock Audit
We train internal auditors and support the first audit cycle. We then run a full mock certification audit to test readiness.
Certification Audit Support
We support you during the certification audit itself. If findings arise, we help you respond and close them out.
Gap Analysis
We compare your current systems against the ISO standard, clause by clause. You get a clear report of what exists and what needs to be developed.
System Development
We work with your team to build the documents, processes and records the standard requires. Everything fits your organisation.
Implementation Support
We support the rollout of new processes and documents. We train your team and embed the management system into daily operations.
Internal Audit & Mock Audit
We train internal auditors and support the first audit cycle. We then run a full mock certification audit to test readiness.
Certification Audit Support
We support you during the certification audit itself. If findings arise, we help you respond and close them out.
ISO Standards and Irish Legislation
ISO 9001:2015 (Quality Management Systems - Requirements) is the international standard for quality management. It gives organisations a framework for consistently meeting customer and regulatory requirements. Certification shows a commitment to quality and continual improvement.
ISO 45001:2018 (Occupational Health and Safety Management Systems - Requirements with Guidance for Use) is the international standard for safety management. It helps organisations manage health and safety risks, prevent work-related injury and ill health, and provide safe workplaces.
In Ireland, ISO 45001 sits alongside the Safety, Health and Welfare at Work Act 2005 and its regulations. They set the statutory baseline for workplace safety. In plain terms: the Act applies whether or not you certify, and a properly built ISO 45001 system keeps you compliant with it.
Both standards share the High Level Structure (HLS) common to ISO management system standards. That makes it straightforward to run ISO 9001 and ISO 45001 as one integrated system. Phoenix STS has extensive experience building integrated systems.
Professional indemnity (PI) insurance covers all our ISO audit preparation work. Our advice is expert and insured throughout your certification journey.
Current ISO status for 2026 planning
As of April 2026, ISO 9001:2015 remains the published edition. It includes ISO 9001:2015/Amd 1:2024, the climate action amendment. A new edition (ISO/FDIS 9001) will replace it once finalised. ISO 45001:2018 also remains current. It includes ISO 45001:2018/Amd 1:2024, and a revision is under development. Before an audit, check your certificate scope, the amendment requirements and any transition plans once a new edition is formally published.
Preparing for ISO 9001:2015 Certification
ISO 9001:2015 certification takes more than a folder of procedures. The standard centres on a quality management system (QMS) that is genuinely embedded in how you operate. A parallel paper system built only for audit will not pass. Start with an honest look at current practice, and fix gaps rather than disguise them.
A gap analysis against the ISO 9001:2015 clauses is the logical starting point. We compare your processes, documents and practice against each clause. Common gaps include:
- no formal quality policy
- unclear process ownership
- thin records of management review
- no systematic way of identifying risks and opportunities
Documentation demands are lighter than in earlier versions of the standard. A quality manual is no longer mandatory, although many organisations keep one. You must document the quality policy, the quality objectives, the QMS scope, and any process where missing documents could cause inconsistency. Keep procedures, work instructions, forms and records in proportion to your size and complexity.
Management commitment sits in Clause 5, and auditors flag it often. Top management must set the quality policy, assign roles, resource the system and take part in management review. Auditors want to see senior leaders engaged with the QMS, not delegating it wholesale to a quality manager.
Risk-based thinking entered the standard in 2015 through Clause 6. You must identify risks and opportunities that could affect the QMS and plan actions to address them. A formal risk management framework is not required. What counts is evidence that risk shapes your planning, decisions and responses to change. Clause 8 then covers operational planning and control. These are the processes that deliver your products and services, with criteria and controls to keep them on track.
Clause 9 covers performance evaluation: monitoring, measurement, analysis and management review. It includes customer satisfaction monitoring and internal audits. Plan the audit programme, use trained auditors and follow up non-conformities with corrective action. Clause 10 closes the loop with continual improvement. Show that audit findings, data and management review outputs drive real improvement in the QMS.
Preparing for ISO 45001:2018 Certification
ISO 45001:2018 sets the requirements for an occupational health and safety (OH&S) management system. For Irish organisations, preparation means aligning current safety practice with the standard's framework. It also means staying compliant with Irish law, mainly the Safety, Health and Welfare at Work Act 2005 and the General Application Regulations 2007. In short: the standard organises what the law already requires of you.
Worker participation and consultation, covered in Clause 5.4, marks ISO 45001 out. Workers at every level must be consulted on safety matters and able to take part in the management system. In Ireland, this lines up with the 2005 Act's rules on safety consultation and safety representatives. Auditors look for genuine, ongoing consultation, not an annual survey or the odd toolbox talk.
Hazard identification and risk assessment, under Clause 6.1.2, must be systematic. Cover routine and non-routine work, everyone with access to the workplace, and the design of work areas and processes. Use one documented method, and review assessments after incidents, legal changes or process changes. Irish organisations must also meet the General Application Regulations, which name specific hazards to assess, including manual handling, display screen equipment and work at height.
Legal and regulatory compliance, under Clause 6.1.3, requires a register of the legal requirements that apply to you, checked at planned intervals. In Ireland, that register must include the 2005 Act and the General Application Regulations. Add any sector rules, such as the Chemical Agents Regulations or Construction Regulations, plus the HSA's codes of practice.
Clause 8 covers operational controls and emergency preparedness. Build processes that remove hazards and reduce OH&S risks. Prepare emergency procedures, test them through drills and make sure workers know what to do. Clause 10 requires structured incident investigation: find root causes and act to stop recurrence.
Integration with existing safety management systems is a practical question for many organisations. ISO 45001 shares the High Level Structure (Annex SL) with ISO 9001 and ISO 14001. If you already hold ISO 9001, moving to an integrated quality and safety system is a natural step. It cuts duplication and improves efficiency.
The Audit Process - What to Expect
Knowing how the certification audit works removes most of the anxiety. The process is structured and predictable. It tests two things: does your system meet the standard, and does it work in practice.
The Stage 1 audit is a documentation review. The certification body reads your management system documents and checks they address every requirement. That includes the scope statement, policy, objectives, risk assessments, procedures and management review records. Stage 1 can happen off-site or on-site. Its purpose is to confirm you are ready for Stage 2. Close any gaps it finds before Stage 2 goes ahead.
The Stage 2 audit is the on-site assessment. Auditors visit your premises, interview staff at all levels, review records and watch processes in action. They cover every clause of the standard. They check conformity (does the system meet the requirements?) and effectiveness (does it work in practice?). Expect one to three days on site, depending on your size and complexity.
Audit findings fall into three groups: major non-conformities, minor non-conformities and observations. A major is a significant failure, such as a missing required process or a critical process being ignored. A minor is a smaller departure that does not undermine the whole system. Observations are improvement suggestions. Majors must be resolved before certification. Minors need a corrective action plan with agreed timelines.
After certification you enter a three-year cycle. Surveillance audits run annually, typically at months 12 and 24, to confirm the system still operates effectively. They are shorter than the first audit and focus on selected areas. At the end of the cycle comes a full recertification audit, similar in scope to the original Stage 2.
The common pitfalls are predictable. Management review records are thin. Corrective actions from earlier audits stay open. Procedures do not match real practice. Evidence of continual improvement is missing. Top management matters here too. Auditors interview senior leaders about their understanding of and commitment to the system, so prepare them for those interviews.
Phoenix STS provides audit preparation support for organisations seeking ISO 9001 and ISO 45001 certification. We run gap analyses, develop documentation, train internal auditors and support you through the audit itself. Contact us to discuss your certification goals.
ISO Audit Preparation Services Across Ireland
Phoenix STS delivers ISO 9001 and ISO 45001 audit preparation across all 26 counties. From our midlands base, our consultants give practical, hands-on support to organisations of every size.
We work with manufacturers in Cork, construction firms in Dublin, healthcare organisations in Galway and professional services firms in Limerick. Whatever your industry, the support fits your organisation. Our pricing includes all travel costs, wherever you are.
Related Services
Health & Safety Consultancy
Complete health and safety consultancy for businesses across all sectors.
Health & Safety Risk Assessments
Professional risk assessments for workplaces and activities.
Frequently Asked Questions
ISO 9001 is the quality management standard. It is about meeting customer requirements consistently and improving satisfaction. ISO 45001 is the occupational health and safety standard. It is about preventing work-related injury and ill health. Both share the same high-level structure, so they integrate well into a single management system.
Preparation typically takes three to six months. The timeline depends on your size, the state of your current systems and the resources you can commit. Organisations with documented processes get there sooner. We give you a realistic timeline at the gap analysis stage.
It depends on your business needs. Many organisations benefit from both: ISO 9001 for quality and ISO 45001 for health and safety. Some tenders specify one or both. We help you decide which standards add value and implement them as one integrated system.
A gap analysis is a systematic comparison of your current systems, processes and documents against the ISO standard. It shows what already meets the requirements, what needs changing and what must be created. The report gives you a clear roadmap to certification.
ISO standards require certain documented information, but the volume depends on your size, complexity and processes. We write practical, useful documents, not bureaucracy. The goal is a system your team uses, not one that exists for the audit.
A mock audit simulates the real certification audit. Our consultant audits your system using the same method and criteria as the certification body. It finds any remaining gaps, gives your team audit experience and lets you fix findings before the real thing.
No. Certification audits must be carried out by an accredited certification body. Phoenix STS prepares and supports you. We help you choose a certification body and get ready for their audit. Consultancy and certification stay separate to protect the integrity of the process.
Our preparation is designed to prevent that. Gap analysis, mock audits and corrective action support all reduce the risk. If the certification body does raise findings, we help you build corrective actions and prepare for the follow-up audit. Minor non-conformances are common, and corrective action deals with them. They do not mean a failed audit.
Yes. After initial certification, you face annual surveillance audits and a recertification audit every three years. We support all of them with pre-audit reviews, documentation updates and corrective action help.
Phoenix STS covers all 26 counties in Ireland. Our midlands base gives us efficient access to the whole country, and our pricing includes all travel costs.
Start Your ISO Certification Journey
Contact Phoenix STS today to discuss your ISO 9001 or ISO 45001 certification goals. Expert preparation from experienced consultants, nationwide coverage.