Certified people.Certified processes.
Certistaff places ISO-certified professionals in your team and takes your organisation through ISO certification, from the first gap assessment to the Stage 2 audit.
Two services that meet in the middle.
Certification sets up the system. Certified people keep it running. Use one service, or let us handle both so the audit and the hire line up.
Certified recruitment
Hire people who already hold the credential your standard, client or regulator asks for. Every credential is checked with its issuing body before we put a name forward.
- ISO/IEC 27001 Lead Implementers and Lead Auditors Information security
- ISO 9001 quality managers and internal auditors Quality
- Data Protection Officers Data Privacy Act
- ISO 22301 continuity leads Resilience
- Compliance and GRC analysts Ongoing operations
ISO certification support
Get certified without building a compliance team first. We scope, write, implement and rehearse with you, then stay in the room through the certification body’s audits.
- Gap assessment and scope statement Where you stand
- Policies, procedures and risk register Documentation
- Statement of Applicability ISO/IEC 27001
- Internal audit and management review Audit readiness
- Audit-day support and corrective actions Stage 1 and 2
The certification path, and who does what.
Seven steps from first call to a maintained certificate. The right-hand column shows who owns each step.
| Step | Step | What happens | Owner |
|---|---|---|---|
| 1 | Scope and gap assessment | We agree what the certificate will cover and measure your current practice against every clause and control. | Certistaff |
| 2 | Documentation | Policies, procedures, risk assessment and treatment plan, written to match how your team actually works. | Certistaff |
| 3 | Implementation | Your team runs the controls and builds evidence. We coach, check and fill gaps, including with placed staff. | You, with us |
| 4 | Internal audit and management review | A full rehearsal of the external audit, followed by a management review that leadership signs off. | Certistaff |
| 5 | Stage 1 audit | The certification body reviews your documentation and readiness. We prepare you and close any findings. | Certification body |
| 6 | Stage 2 audit | The certification body tests whether the system works in practice and, if it does, issues the certificate. | Certification body |
| 7 | Surveillance and recertification | Annual surveillance audits, then recertification in year three. We can staff the role that keeps it all current. | You, with us |
We prepare you. An accredited certification body certifies you. ISO/IEC 17021-1 requires the auditor to be independent of whoever helped build the system, so Certistaff never issues certificates. We help you pick an accredited body and get you ready for it.
Standards we work with.
Not sure which one your client or tender is asking for? Send us the requirement and we’ll tell you.
- ISO 9001Quality management
- ISO/IEC 27001Information security
- ISO/IEC 27701Privacy information
- ISO 14001Environmental management
- ISO 45001Occupational health and safety
- ISO 22301Business continuity
- ISO/IEC 42001AI management
Why one firm for both.
The certificate needs an owner
Most systems slip in the year after the audit, when nobody is assigned to run them. We can place that person before the surveillance audit arrives.
Credentials, verified
Certification numbers are checked with the issuing body, not taken from a CV. You see what was checked and when.
One brief, one contact
The person scoping your certification also knows which roles it will create, so hiring starts before the gap shows up.
Certified? Join the bench.
We’re building a pool of certified practitioners for full-time, contract and fractional roles. Tell us what you hold and how you want to work.
- Lead auditors and lead implementers
- Internal auditors and DPOs
- Quality, safety and continuity specialists
Tell us the standard, or the role.
A 30-minute scoping call covers where you stand, what the certificate or hire involves, and what we’d do first.