ISO self-assessment and audit readiness
This is no longer customer service evaluation. What is being judged here is the organisation itself, and the assessor is whoever is preparing it for certification. For the software nothing changes: a questionnaire scored out of a ceiling is the same arithmetic — only the questions are different.
And this is not a page about one standard. Clauses 4–10 are identical across every modern management system standard, so the same questionnaire shape carries from 9001 to 14001, 45001 and 27001 — what differs is the requirements inside them.
The structure
Seven sections, exactly as the standard has them
These seven are shared: the same numbering in the same order in 9001, 14001, 45001 and 27001, which is what makes one questionnaire a template for the next.
Each clause is a section of its own and gets a score of its own. The “weakest topics” report ranks precisely those, so the answer is not “we are 68% ready”, it is “clause 9 is what is holding us back”.
-
4. Context of the organisation
External and internal issues, interested parties and their requirements, the scope, and the processes with their measures and owners.
-
5. Leadership
Whether top management takes accountability and integrates the system into the business, whether the policy is written down and roles are assigned.
-
6. Planning
Risks and opportunities, how effectively they were addressed, quality objectives, and planning of changes.
-
7. Support
Resources, infrastructure, environment, monitoring and measuring equipment, competence, awareness, communication and documented information.
-
8. Operation
Operational planning and control, requirements on the output, suppliers and external providers, and how nonconformity is handled. The section whose contents differ most between standards.
-
9. Performance evaluation
What is monitored and when, feedback from interested parties, analysis of the data, internal audits and the management review.
-
10. Improvement
Opportunities for improvement, nonconformities and complaints, root cause analysis, corrective action and continual improvement.
-
Evidence beside each section
Every section ends with a field for which document or procedure the rating rests on. At the audit, that is exactly the part you will be asked for.
Maturity scale
Nought to five, not yes and no
A requirement is rarely met or unmet — it is part way. “It is written down but nobody follows it” and “it runs and it gets audited” are two very different situations, and a yes/no question cannot tell them apart.
Every requirement is a 0–5 rating, so the percentage is how far along the certification path you are. Fill the same questionnaire in again and the chart shows whether the work in between moved anything — and the report names the clauses that did not.
- 0
- Absent. The requirement has not been addressed.
- 1
- Recognised. The need is known, nothing has been done yet.
- 2
- Started. Work is under way but not finished.
- 3
- Documented. The procedure is written but not yet in daily use.
- 4
- Implemented. It runs day to day and can be evidenced.
- 5
- Audited. It runs, it has been reviewed, and it is being improved.
Exclusion
You cannot lose points for what you do not do
Every standard has requirements that do not apply to you. ISO 9001, for instance, permits clause 8.3 — design and development — to be excluded from the scope with justification, where an organisation designs nothing itself. A questionnaire that ignores that scores a service company nought on a requirement it need not meet, and it can never reach a hundred.
So a gate question comes first, and 8.3 appears only where it applies. A question that was never shown is not in the denominator either — the ceiling is 230 points where 8.3 applies and 225 where it does not. Either way, a hundred per cent is genuinely reachable.
How it sits in the questionnaire
Is design and development within your scope?
Yes, we design and develop · No, excluded with justification
↓ only if “yes”
Is the design and development process controlled?
0–5 like every other requirement — but only for those it applies to.
Which standard
One shape, several certificates
One of them is written out already and we will load it into your account. The rest carry the same shape — the same sections, the same scale, the same arithmetic — and the requirements inside them you either write yourself or we write together.
-
ISO 9001
Quality management — and the one that is already written out: 46 requirements across seven sections, a ceiling of 230 points. We load it into your account and you can start the same day.
-
ISO 14001
Environmental management. The same seven sections; where 9001 asks about customer satisfaction, this asks about environmental aspects and compliance obligations.
-
ISO 45001
Occupational health and safety. Hazards, worker participation and incident investigation, in the same structure.
-
ISO 27001
Information security. Clauses 4–10 plus its own annex of controls, which goes into the questionnaire as a section of its own.
-
Several at once
Each standard is its own questionnaire with its own percentage and its own chart, inside one team, without any of them mixing together.
Before the audit, and after
A self-assessment that leaves a trace
-
Repeating shows movement
Fill the same questionnaire in once a quarter. Each one is a record of its own with its own date and percentage, and the list shows whether the number is going the right way.
-
The weakest clauses by name
The report ranks the sections by where the points are lost, and any single requirement can be opened up. The action plan falls out of that on its own.
-
A PDF for the review
Every completion has a PDF with the answers, the evidence and the percentage on it — something to put into the management review pack.
-
Several sites, one standard
Where the system covers more than one plant or office, each is a location of its own and the results compare site by site — on the same questionnaire.
See how far along you actually are
The ISO 9001 questionnaire covering clauses 4–10 exists, and we will load it into your account; for the other standards the same shape is there and we write the requirements together — write to us. The account itself is free for seven days.
Get started