The Stage 2 audit is the certification audit. It evaluates whether your management system is implemented and effective across the full scope, and it provides the evidence for the certification decision.
How the Audit Runs
- Opening meeting: confirmation of scope, plan, timetable, confidentiality, safety and reporting.
- Leadership interview: how top management sets direction, objectives and reviews performance.
- Process audits: interviews with process owners and staff, observation of work, and sampling of records.
- Site coverage: all sites in scope, or a representative sample where multi-site sampling rules apply.
- Auditor review: the team evaluates the evidence against every requirement.
- Closing meeting: findings presented, nonconformities explained with evidence, and next steps and deadlines agreed.
How Findings Are Graded
| Finding | Meaning | Required action |
|---|---|---|
| Major nonconformity | A requirement is not met, or the system may not achieve its intended results | Correction and verification before certification; a follow-up visit may be needed |
| Minor nonconformity | A partial or isolated lapse | Accepted correction and action plan; verified at next audit |
| Opportunity for improvement | An observation where no requirement is breached | Optional |
Who Should Be Available
Top management, the management system coordinator, process owners, and staff doing the work being audited. People should explain their own work in their own words. Memorizing policies is not needed.
After the Audit
You send corrective action evidence within the agreed deadlines. A reviewer who was not on the audit team then makes the certification decision, and your certificate is issued and published.
How Many Days?
Audit days depend on headcount, sites, complexity and the standard, and are stated in your proposal.