New: ISO 42001 and NIS2 Supply Chain are available in the Compliance Tool.Explore standards and requirements →Careers
Audits & assessments

Know what works.
See what needs to improve.

Our Compliance Officers examine whether policies and controls are not only documented properly but also work in practice. You receive an independent, understandable assessment, with clear priorities for improvement.

Our audits and assessments

You may want to know whether your organisation is ready for an audit. A customer may ask for assurance about information security, privacy or suppliers. Or you may want a thorough assessment of a specific risk or process.

Our Compliance Officers help you choose the right assessment. We agree in advance what we will examine, which requirements we will assess against and what outcome you need.

Prepare for an assessment with our guidance on ISO 27001 and NEN 7510. For health and safety at work, we also provide internal audits for ISO 45001.

For quality and environmental management, read what to prepare and what you receive from an ISO 9001 internal audit or ISO 14001.

For energy performance consultancies and certificate holders, we offer BRL 9500 support with quality management systems, processes and audit preparation. Technical project checks and energy performance calculations fall outside that audit service.

Explore our areas of expertise →

DPIAs

Identify and reduce privacy risks in data processing.

Internal audits

Assess the evidence that agreements and controls are working.

Gap analyses

Establish what is already in place and what is still missing.

Supplier assessments

Clarify supplier risks and controls.

Security assessments

Assess the design and operation of information security.

AI assessments

Assess risks, responsibilities and controls relating to AI.

Business impact analyses (BIAs)

Determine which processes are critical and what disruption would mean.

From assessment to direction

We review documents and evidence, speak to the people involved and examine how agreements are implemented in practice. You receive a clear analysis with practical priorities and improvement actions, rather than a generic report.

How we work: we agree the question, carry out the assessment, discuss the findings and decide the next steps together.

Afterwards, you will know:

  • what the evidence shows is well established;
  • where there are risks or missing evidence;
  • which improvements are needed first;
  • who can take each next step.

Do you use the Compliance Tool? Findings, actions and evidence can then be followed up centrally in the Tool.

Frequently asked questions

We agree in advance what we will assess, what information is needed and what you will receive afterwards.

Discuss your question →
What is the difference between a readiness review and an internal audit?+

A readiness review focuses on preparation and shows what is still needed before an external assessment. An internal audit independently examines the evidence that agreements and controls have been implemented and are working.

How do you safeguard independence?+

We agree the assessment criteria, roles and reporting lines in advance. A Compliance Officer assesses the agreed subject without approving their own work.

Does an internal audit lead to certification?+

No. A certification body independently determines the outcome of a certification audit. We make it clear what works and which improvements are still needed.

Do we have to use the Compliance Tool?+

No. The assessment can also be carried out without the Tool. The Tool does make it easier to follow up findings, actions and evidence on an ongoing basis.

Ready for your next step.

Want to know where you stand? Tell us what you would like assessed. We will discuss the audit or assessment that fits your needs.

We remember your cookie choice and display preferences. This storage is necessary for the website and your settings to work.

Clarity records clicks, scrolling and page interactions for usage analysis and session recordings. Form fields are masked. The cookies _clck (up to 1 year) and _clsk (1 day) link page views to a visit or session.

We also use Plausible for aggregated, cookieless statistics. This measurement continues if you reject cookies.

We store your choice in this browser for 30 days. Withdrawing consent may reload the page to stop tracking software that has already loaded. Read our cookie policy.