Certification Consulting and Audit Support
Certification consulting and audit support for organisations
Are you planning a certification, surveillance audit or approval for a specialised service? 3-core provides technical and organisational support for your project, from interpreting the applicable requirements and managing outstanding actions to planning the audit.
For each engagement, 3-core defines a scope of support tailored to the project. We clarify scope and responsibilities, review existing processes and documents, develop missing evidence and coordinate collaboration with the selected certification body.
- Management systems and audit preparation
- Business Continuity and Corporate Resilience
- Information security, ISMS audits and ISO/IEC 27001 pre-audits
- Risk management
- Security services and VdS approvals
Managing certification projects effectively alongside day-to-day operations
Certification projects combine technical requirements with limited internal resources, multiple stakeholders and fixed audit deadlines. Individual processes are often already in place but are not documented consistently.
Evidence may be held across different locations, responsibilities may not be fully clarified, and queries between business functions, service providers and the certification body can consume unnecessary time. This is where 3-core combines subject-matter consulting with project management. We structure the engagement, translate requirements into specific work packages and keep everyone aligned through to the audit. Each discipline remains within its own scope: a BCM audit requires a different approach from an ISMS certification, a quality management audit or the approval of a security service provider.
What 3-core’s certification consulting covers
Professional certification consulting involves more than checking whether documents are complete. Requirements, operational processes, responsibilities, evidence and audit planning must work together effectively. 3-core helps you assess the current position, address outstanding issues systematically and coordinate the certification project reliably. Depending on your needs, 3-core can deliver individual work packages or support the entire process.
Standards review and certification consulting
We clarify which standard or framework, approval or certification procedure and scope are appropriate for the project. We also review dependencies with existing management systems and external service providers.
Current-state assessment and requirements mapping
Existing processes, governance arrangements, evidence and contracts are captured systematically and mapped against the relevant requirements. The result shows what is already robust and where specific action is required.
Action plan and project management
We convert outstanding issues into a realistic action plan, clarify responsibilities, and track deadlines and required inputs. This keeps the certification project manageable even when several business functions and service providers are involved.
Processes, manuals and evidence
3-core supports the revision or development of the required processes, governance documents, service specifications and evidence. The content is designed to fit operational practice and to be presented clearly and traceably during the audit.
Audit planning and interface coordination
We coordinate the audit process, contacts, documentation and schedule. If required, we manage communication with the certification body and involve external security service providers or other project partners in a targeted manner.
Support through to completion
As part of our certification consulting, audit findings and requests for clarification are captured systematically and incorporated into the action and remediation process. 3-core supports the technical response and clear documentation through to the agreed completion of the project.
Our certification and audit consulting focus areas
The 3-core supports a range of management systems and specialised assurance procedures. The specific scope of support depends on the selected framework, the organisation’s current maturity and whether a system is being established, further developed or prepared for an upcoming audit.
Business Continuity Management and ISO 22301
The 3-core assesses whether governance, the BCM policy, roles, the Business Impact Analysis, risk assessment, continuity strategies, business continuity plans, exercises and continual improvement processes are coherent and adequately documented. Missing or insufficient elements are revised together with the relevant business functions. In preparation for the audit, 3-core structures the evidence, prepares responsible personnel for audit interviews and coordinates outstanding actions through to the audit date.
Information security management and ISO/IEC 27001
In the ISMS context, 3-core supports the establishment and further development of an information security management system. This includes defining the scope, appropriate governance structures, information security policies, risk management, responsibilities and traceable documentation for selected controls. In addition, our qualified auditors conduct ISMS audits and pre-audits based on ISO/IEC 27001. We assess not only whether policies, processes and evidence exist, but also how effectively the ISMS is implemented, applied and continually improved across the organisation.
Security services in accordance with DIN 77200
For security services, 3-core considers areas including the scope of services, organisational structure, personnel qualifications, process descriptions, service instructions, quality controls, reporting and contractual interfaces. We support the gap analysis, the preparation or revision of required evidence and preparation for the certification procedure. Clients, security service providers and other stakeholders are included in the project and audit planning.
Alarm receiving centres and VdS approvals
For alarm receiving centres in accordance with DIN EN 50518 and approval procedures under VdS 3138 and VdS 2172, 3-core supports the assessment of technical and organisational interfaces, process and evidence documentation, and coordination of the service providers involved. This may include arrangements for alarm handling, response chains, qualifications, intervention procedures, evidence of service delivery and defined response times. At the start of the project, the applicable requirements are mapped against the specific approval procedure.
Other standards and assurance procedures
For other certification objectives, 3-core’s certification consulting begins with a technical assessment. We clarify the relevant framework, scope, readiness for certification, required evidence and potential interfaces with existing management systems. 3-core then agrees the appropriate scope of support with you and, where required, involves specialist partners or the intended certification body at an early stage.
What you receive at the end of the project
The specific deliverables depend on the certification procedure and the agreed scope of support. Typical outcomes include:
- a clear definition of the certification objective, scope, sites and stakeholders
- a transparent gap analysis or requirements matrix
- a prioritised action plan and schedule with clearly assigned responsibilities
- revised processes, policies, manuals or service specifications within the agreed scope
- a structured overview of the required documents and objective evidence
- an agreed audit plan with contacts, dates and interview sessions
- preparation of the business functions involved for audit questions and evidence requirements
- transparency regarding outstanding issues, audit findings, corrective actions and next steps
Relevant 3-core projects
The following projects show how 3-core translates requirements into robust processes, traceable documentation and practical measures. They provide insight into services that also form an important basis for preparing certifications and audits.
Optimising BCM for a global tool manufacturer
BCM for an energy service provider
BCM system review
Independent consulting with clearly defined roles
3-core is an independent management consultancy specialising in Corporate Resilience. We support you in preparing, implementing and managing the certification project. The formal audit and the decision to issue a certificate or approval remain the responsibility of the relevant independent certification body.
This separation of roles is important: you receive practical implementation support without compromising the independence of the external assessment. Successful certification cannot therefore be guaranteed, but structured preparation makes the process more predictable and transparent.
Free guide: Smart BCM
The Smart BCM Guide provides a concise introduction to establishing and further developing a Business Continuity Management System. It is particularly suitable for organisations that want to assess their BCM structures, prepare their next steps or plan a future ISO 22301 certification on a more informed basis.
FREE BCM-GUIDE
Start your certification project with 3-core
Would you like to prepare a specific certification, audit or approval procedure and need technical support, audit planning or end-to-end project coordination? During a free, no-obligation kick-off meeting, we first clarify the relevant discipline and scope. We then define the level of support that best fits your project.