Management systems your team can run
We build the system with your people, audit it the way your assessor will, and hand it over ready for certification.
ITF Consult · the instrument
Clause to evidence
A certificate is not won in the audit. It is won in whether the record layer exists before anyone asks for it. Here is the whole chain, and the two links that actually break.
- 01ClauseWhat the standard requires
- 02DocumentWhat you said you would do
- 03RecordWhat actually happened
- 04EvidenceWhat the auditor opens
- 05The trailWalked backwards
What exists six months after we leave
Every consultancy in this market will write you a manual. The test of the work is what still exists in the building six months later, when we have stopped invoicing.
Procedures written with the person who does the job
A procedure written in a consultant's office describes the consultant's assumptions. Yours describes your process, and your staff can follow it.
You run the system before certification
Registers reach handover with entries in them. You produce real records first, because records are what an assessor actually samples.
The internal audit is run as an external one
By people who carry out external assessments for a living. You see the findings before the assessor writes them.
Your next internal audit runs without us
That is the measure of the job. A system that needs its consultant to keep running has not been handed over.
Standards, and the work underneath them
Each standard card shows its current edition. The six services below them are the actual work, whichever standard you hold.
ISO 9001:2026 transition
Published on 16 September 2026. Every certified company has a transition to make, expected to close in September 2029. See what changes.
Read moreTransitionISO 14001:2026 transition
Published on 15 April 2026. If quality and environment share one document set, move both in one pass.
Read more2026ISO 9001
Quality management, built around how your business already runs.
Read more2026ISO 14001
Environment, driven by an aspects register built on site.
Read more2018ISO 45001
Occupational health and safety, with the worker consultation evidence most systems lack.
Read more2018ISO 22000
Food safety management for the production floor.
Read moreV7FSSC 22000
ISO 22000 plus prerequisites plus scheme requirements, recognised by GFSI.
Read moreCodexHACCP
The plan and records behind an SFDA food manufacturer licence.
Read more2022ISO 27001 readiness
Information security scope, risk assessment and Statement of Applicability.
Read more2018ISO 41001
Facility management run as a management system, for owners and FM contractors.
Read more2023ISO 42001
Governance for how your organisation builds, buys and uses AI.
Read more2019ISO 22301
Business continuity, built on an impact analysis of what can stop and for how long.
Read more2018ISO 50001
Energy management from a metered baseline and the uses that dominate the bill.
Read moreAnyIntegrated system
One document set and one audit programme across several standards.
Read moreServiceGap analysis
Two days on site against every applicable clause, and a report you keep whatever you decide.
Read moreServiceDocumentation and implementation
Procedures, registers and forms written with your people and cut to the size the job needs.
Read moreServiceInternal audit
Sampled records, interviews on the floor, and findings written in three parts.
Read moreServiceManagement review
The meeting prepared and run so it produces decisions with owners and dates.
Read moreServiceSupplier and contractor audits
Your suppliers audited on site against your requirements, with a scored report.
Read moreServiceSupport between audits
A quarterly rhythm that keeps the system running between certification visits.
Read moreMost clients come to us because someone asked
Very few companies start a management system for its own sake. A regulator, a customer or a tender usually asks first, and the wording of that request decides which standard you need. These are the requests that come up most often in the Kingdom.
- SFDA names a HACCP certificate from an accredited certification body as a required document for a food manufacturer operating licence
- Buyers in the Aramco supply chain routinely require ISO 9001 and a documented quality system
- A retailer or multinational food buyer asks for FSSC 22000 or another GFSI-recognised scheme
- A government or large corporate tender asks for ISO 9001, often with ISO 14001 and ISO 45001 alongside
The readiness cycle
Readiness is a sequence, not a document drop. Each step hands you something you keep whether or not you continue to the next one.
- 01
Enquiry
Which standard, which sites, which deadline.
You receiveA scoping call.
- 02
Gap analysis
We audit what exists against the standard, clause by clause.
You receiveA gap report against every clause.
- 03
Plan
The gaps sequenced into phases with owners on your side.
You receiveAn implementation plan with dates.
- 04
Build
Policies, procedures, registers and records built with your people, not handed to them.
You receiveThe documented management system.
- 05
Embed
Training, trials and the first real records produced by your own team.
You receiveAwareness training and live records.
- 06
Internal audit
A full internal audit run the way an external auditor will run it.
You receiveAn internal audit report with findings.
- 07
Close out
Corrective actions raised, actioned and verified.
You receiveA closed corrective action log.
- 08
Management review
The review meeting held and minuted to the standard's requirements.
You receiveManagement review minutes.
- 09
Handover
The system handed over, with the evidence an assessor will ask for already in place.
You receiveA readiness pack for your assessor.
Before you call
Has ISO 9001 changed?
Yes. ISO 9001:2026 was published on 16 September 2026, with a three-year transition expected to run to September 2029. Certificates to the 2015 edition stay valid while you transition, and a new system should be built to 2026 from the start.
Do you guarantee certification?
No, and be careful with anyone who does. The certificate is issued by a certification body after its own assessment, which is why a guarantee from a consultant is worth nothing. What we control is whether you are ready, and readiness can be checked before the assessor arrives.
How long does readiness take?
Your documentation (manual, procedures, forms): within a week of the gap analysis. Then your team runs it. Before the certification audit, that means at least one internal audit and one management review, with the records to show them. You and your certification body set the pace.
Where do you work?
On site across Riyadh and the Eastern Province, including Dammam, Khobar and Jubail. Sites in Jubail and Ras Al Khair answer to the Royal Commission as well as national rules, and the registers we build carry both.
Part of one system
Every division keeps records to the same standard, so the second one you need works the way the first one did.
Start with the gap analysis
It is the cheapest step and the one that tells you whether the rest is worth doing. You keep the gap report whatever you decide.