A pre assessment audit sits between your internal preparation work and the formal certification audit conducted by your certification body. It is sometimes called a pre certification audit, a readiness review, or an informal Stage 1. Whatever the label, the purpose is the same: to find out where your management system actually stands before an external auditor comes in with a formal scope and the power to issue nonconformities that could delay your certificate. Understanding what a pre assessment audit is, how it works, and when it genuinely adds value will help you make a smarter decision about whether to commission one.
On this page
Defining the Pre Assessment Audit
A pre assessment audit is an independent review of your management system conducted prior to a formal certification audit. It is not part of the official three year certification cycle. It carries no formal status with your certification body and produces no certificate. What it does produce is an honest picture of your readiness, along with findings that you can act on before the real thing.
The audit is typically conducted by either an experienced internal auditor, an external consultant, or in some cases the certification body itself. Some certification bodies offer a pre assessment service as an optional add on. Others leave it entirely to the organisation to arrange independently. Either way, the pre assessment audit follows the same basic methodology as a real audit: document review, interviews, process observation, and evidence sampling.
How It Differs from an Internal Audit
An internal audit is a requirement under most ISO standards, including ISO 9001, ISO 14001, ISO 45001, and ISO 27001. It is conducted by your own people, or by a contracted auditor acting on your behalf, and the results feed into your management review process. It is a first party activity, meaning it is done by or for the organisation itself.
A pre assessment audit is different in character even if it looks similar on the surface. It is typically conducted by someone outside your organisation with no stake in the outcome. The intent is to simulate the experience of a certification audit, not to fulfil your internal audit obligations. A well run pre assessment will challenge your system in ways that your internal auditors may not, particularly if your internal auditors are close to the processes they are reviewing. If you want to understand the boundary between these two activities more clearly, the article on internal audit vs certification audit covers the structural differences in detail.
How It Differs from a Gap Analysis
A gap analysis is usually conducted earlier in the implementation journey. It maps your current practices against the requirements of the standard and identifies what you still need to build or document. It is diagnostic rather than evidentiary. A pre assessment audit, by contrast, assumes your system is substantially implemented and tests whether the evidence actually supports that claim. If a gap analysis is the planning tool, a pre assessment audit is the dress rehearsal.
Exemplar Global Certified Training ProviderRTP No. 310970
What a Pre Assessment Audit Covers
The scope of a pre assessment audit mirrors the scope of your planned certification audit. If you are seeking certification to ISO 9001 for your core quality management processes, the pre assessment should cover those same processes, clauses, and sites. Narrowing the scope defeats the purpose.
Document and Record Review
The auditor will review your documented information against the requirements of the standard. This includes your policy documents, procedures, objectives, and records. Common issues that surface at this stage include policies that have never been approved by top management, objectives that are not measurable, and records that exist in theory but cannot actually be produced when requested.
One scenario that comes up regularly in pre assessment audits: an organisation has a beautifully formatted quality manual but the procedures referenced in it describe a process that nobody actually follows. The pre assessment surfaces this before the certification auditor does.
Process Observation and Interviews
The auditor will walk the floor, observe processes, and interview staff at various levels. This is where the gap between the documented system and the lived reality becomes visible. A quality manager might be able to articulate the nonconforming product process perfectly. The person on the production line may have no idea what the procedure requires or where to find it.
Interview findings in pre assessments frequently reveal awareness gaps. Staff cannot explain the quality policy, do not know the organisation's quality objectives, or are unaware of how their work affects the management system. These are exactly the kinds of findings a certification auditor will raise.
Clause by Clause Coverage
A thorough pre assessment will work through every clause of the relevant standard. For ISO 9001, that means covering everything from context of the organisation through to continual improvement. Some clauses get more attention than others based on risk and complexity, but nothing should be skipped entirely. The auditor should be sampling evidence, not just asking whether something exists.
Findings and Recommendations
At the end of the pre assessment, the auditor produces a report. Unlike a formal certification audit report, this document is advisory. It identifies areas of conformity, potential nonconformities, and observations about system effectiveness. The organisation then uses this report to prioritise corrective action before the certification audit takes place.
When a Pre Assessment Audit Makes Sense
Not every organisation needs a pre assessment audit before certification. For a small business with a simple scope and an experienced quality manager who has been through certifications before, a thorough internal audit and management review may be sufficient preparation. But there are circumstances where a pre assessment genuinely earns its cost.
First Time Certification
If your organisation is pursuing ISO certification for the first time, a pre assessment audit is worth serious consideration. The certification audit process has a particular rhythm and rigour that many organisations underestimate. Staff are not used to being interviewed by external auditors. Managers are not used to being asked to produce evidence on the spot. A pre assessment audit gives everyone a realistic experience of what to expect and surfaces the gaps that internal preparation alone might miss.
Complex or High Risk Scopes
Organisations with complex operations, multiple sites, or high risk processes face a greater chance of material nonconformities during a certification audit. A pre assessment audit allows a more experienced eye to assess whether the system is genuinely robust across those complexities. For example, a construction company seeking ISO 45001 certification across multiple project sites has a lot of moving parts. A pre assessment can identify whether the hazard identification process is actually being applied consistently across those sites, or whether it only works well at the main office.
After a Major System Overhaul
If your organisation has recently overhauled its management system, perhaps in response to a failed certification audit or a significant operational change, a pre assessment audit gives you confidence that the new system is actually working before you invite the certification body back in. Rebuilding a system takes time, and it is easy to believe the work is done before the evidence is truly embedded.
When Internal Audit Capacity Is Limited
Some organisations struggle to run genuinely independent and rigorous internal audits. This might be because the internal audit team is too small, too close to the processes being audited, or simply not experienced enough to challenge the system the way a certification auditor would. In these cases, a pre assessment audit by an external practitioner provides a level of scrutiny that internal resources cannot.
Who Should Conduct a Pre Assessment Audit
The value of a pre assessment audit depends almost entirely on who conducts it. An auditor who is not genuinely independent, or who lacks practical experience with the relevant standard, will not surface the findings that matter. You need someone who has actually conducted certification audits under the standard in question, who understands what certification bodies look for, and who will give you an honest report rather than a reassuring one.
Using Your Certification Body
Some certification bodies offer pre assessment services. The advantage is that the auditor will be familiar with the body's own audit approach and expectations. The potential downside is cost, and some organisations feel uncomfortable having their certification body identify gaps, as it creates a perception that the body is consulting rather than auditing. This is a legitimate concern worth discussing with your certification body before proceeding.
Using an Independent Consultant or Auditor
An experienced ISO consultant or lead auditor with a background in conducting third party audits can provide an effective pre assessment. The key is to verify their credentials and experience. Look for someone with a current lead auditor qualification under the relevant standard and a track record of conducting certification or surveillance audits, not just internal audits. If you are unsure what credentials to look for, the article on what to look for when choosing an ISO training provider gives useful context on evaluating auditor credentials more broadly.
Using a Senior Internal Auditor
In some larger organisations, a senior internal auditor from a different business unit can conduct a pre assessment of a site preparing for certification. This works best when the internal auditor has genuine lead auditor level competence and is truly independent of the processes being reviewed. It is not ideal for first time certifications where the entire organisation is unfamiliar with the audit process.
Common Findings in Pre Assessment Audits
After conducting pre assessment audits across a range of industries and standards, certain patterns of finding come up repeatedly. Knowing these in advance helps you focus your preparation.
Context and Interested Parties
Organisations frequently document their context and interested parties during implementation and then never revisit them. The pre assessment auditor will ask how these have been reviewed and updated. If the answer is that nothing has changed since the initial implementation, that is usually a flag worth investigating.
Objectives Without Plans
ISO standards require that quality, environmental, or OH and S objectives be supported by plans that address what will be done, who is responsible, when it will be completed, and how results will be evaluated. Organisations often set objectives but never build the supporting plans. The pre assessment surfaces this quickly.
Competence Records
Competence is a recurring finding. The standard requires evidence that people doing work affecting the management system are competent. Training records exist in most organisations, but evidence of evaluated competence is often missing. There is a difference between attending a course and demonstrating competence in the role.
Internal Audit Programme Gaps
The internal audit programme should cover all processes and clauses over a defined period, with frequency based on risk and previous results. Pre assessments frequently find that some clauses have never been audited, that audit reports lack specific findings, or that corrective actions from previous audits have not been closed. These are findings that a certification auditor will pursue.
Management Review
Management review is one of the most commonly mishandled clauses in any ISO standard. The pre assessment will check that the review covered all mandatory inputs, that outputs included decisions and actions, and that records demonstrate genuine engagement from top management rather than a box ticking exercise.
Exemplar Global Certified Training ProviderRTP No. 310970How to Get the Most From a Pre Assessment Audit
A pre assessment audit is only as useful as the actions it drives. Commissioning the audit and then shelving the report is a waste of resources. To get genuine value from the process, approach it with the same seriousness you would bring to the real certification audit.
Brief your team honestly. Tell them the purpose of the pre assessment is to find problems, not to demonstrate perfection. Staff who understand this are more likely to give honest answers during interviews rather than trying to perform for the auditor.
Allow the auditor genuine access. Do not restrict the scope, limit the time available for interviews, or steer the auditor away from sensitive areas. The whole point is to find the gaps before the certification body does.
Act on the findings systematically. Treat the pre assessment report like a corrective action input. Assign owners to each finding, set realistic timescales, and verify that actions have been effective before the certification audit takes place. A pre assessment that generates a list of findings but no follow through has not achieved anything.
Allow enough time between the pre assessment and the certification audit to actually address the findings. A pre assessment conducted two weeks before the certification audit does not leave enough time to make meaningful improvements. Four to eight weeks is a more realistic gap for most organisations.
Pre Assessment Audits and Auditor Development
For auditors in training or early in their careers, participating in a pre assessment audit as part of the audit team is an excellent development opportunity. Pre assessments often have a slightly less formal atmosphere than certification audits, which allows newer auditors to practice their interview technique, document review skills, and finding classification without the pressure of a formal outcome hanging over the day.
If you are working toward your lead auditor qualification and building your audit log, participating in pre assessment audits under the supervision of an experienced lead auditor can count toward your practical experience hours, depending on the requirements of your certification scheme. Check the specific requirements of your scheme before assuming this, but it is worth discussing with your training provider.
Audit Workshop delivers practical lead auditor and internal auditor training across ISO 9001, ISO 14001, ISO 45001, ISO 27001, and other standards. The training is designed by practitioners who have conducted hundreds of real certification audits, and the content reflects the kind of real world scenarios you will encounter in pre assessments and beyond. If you are preparing to conduct or commission a pre assessment audit and want to sharpen your practical skills first, explore the Stage 1 and Stage 2 audit process to understand what the certification body will be looking for, and consider how a pre assessment can close the gap between where your system is today and where it needs to be.
