Managed compliance
ISO 9001 and ISO 27001, run as one system
Quality and information security combined into one integrated management system, with one internal audit, one management review, and one audit calendar.
- Client
- Quality-regulated organization
- Industry
- Quality-regulated industry
2
Standards in one system
1
Internal audit and management review
1
Audit calendar instead of two
The challenge
Customers required ISO 9001 and a key contract now required ISO 27001. Two parallel systems meant duplicated policies, audits, and reviews.
What Golonex did
- A named Golonex lead owned both standards as one system, built on the structure they share
- Merged the common parts once: scope, leadership, document control, internal audit, corrective action, and management review
- Built what is unique to each: process control for 9001; risk assessment, Statement of Applicability, and Annex A controls for 27001
- Prepared the organization for its certification audit
The outcome
- Far less duplicated paperwork than two separate systems
- One team, one calendar, one review
- Evidence ready for the certification body
Certificates are issued by an accredited certification body. Golonex prepares organizations and does not certify.
ISO 27001 readiness →