ISO 9001 Consultation NZ: Preparing Evidence for Your Audit

ISO 9001 audit preparation works best when your team can show how the quality management system operates in everyday work. A tidy set of procedures is useful, but it does not show whether customer requirements were understood, a process was controlled or an agreed improvement actually worked.

For New Zealand food businesses, an ISO 9001 consultation can help turn an upcoming audit into a manageable evidence review. Start with the activities and sites being assessed, the audit type and the applicable edition of the standard. Then check a small number of real work examples before producing more documents.

What can ISO 9001 consultation achieve before an audit?

ISO 9001 is a quality management system standard. It addresses how an organisation manages processes and meets relevant requirements; it should not be presented as a food-safety scheme or a certificate approving an individual product. ISO’s current ISO 9001 overview explains the standard’s scope.

A useful consulting engagement defines what will be reviewed, which people need to participate and what the business will receive. That might be a gap assessment, an evidence index, an internal audit report or a prioritised action plan. Keep those outputs distinct from the certification decision.

ISO’s explanation of certification and accreditation separates these roles: ISO develops standards, while external bodies provide certification. Check any customer or tender requirement for accredited certification. AFVA’s published ISO service is consulting and preparation support, not certificate issuance.

Confirm the edition, scope and audit brief first

ISO 9001:2026 is the current published edition, released on 16 September 2026. If you already hold a certificate referencing ISO 9001:2015, agree the audit criteria and transition arrangements with your certification body rather than assuming the certificate became invalid on publication day.

Under Global ACI’s ISO 9001:2026 transition requirements, existing accredited ISO 9001:2015 certifications within its recognition framework have until 30 September 2029 to transition. Ask your certification body to confirm the arrangements applying to your certificate, its readiness to provide accredited 2026 certification and your planned audit date.

• Audit type: Is this initial certification, surveillance, recertification, a transition assessment or a customer audit?
• Scope: Which legal entity, sites, products, services and outsourced activities are included?
• Criteria: Which edition, customer requirements and other agreed audit criteria apply?
• Practical arrangements: What access, records, staff availability and language support does the audit plan need?

ISO 9001 audit preparation: follow the evidence through the business

1. Start with a real customer requirement

Choose a recent order, service request or product change that represents the work inside your proposed scope. Identify what was agreed, who reviewed it and how the requirements reached the people doing the work. Include a changed or unusual order if it will help reveal where responsibilities become unclear.

For example, a food manufacturer could trace a customer’s agreed pack size from the order through purchasing, packing checks and dispatch. This is an illustrative quality-management exercise, not a food-safety validation or a claim about an AFVA client. Ask whether the records tell a consistent story without someone having to fill in missing facts from memory.

2. Build an evidence index that people can use

Create a short index linking each process to its owner, current procedure or instruction, an example record and any open issue. Use existing systems where they work. The aim is reliable retrieval, not a second set of documents maintained only for audit day.

• Can the process owner find the current instruction and explain how changes are communicated?
• Do the selected records match the product, date, site and work that actually occurred?
• Can the team explain an exception, rejected result or changed requirement and what followed?
• Are responsibilities and approvals clear when a supplier or contractor performs part of the work?

Keep examples proportionate to the scope. A single record may illustrate a process, but it is not proof that every activity or period conforms. A gap assessment can identify where broader sampling or further evidence is needed.

3. Check understanding as well as documents

Ask staff to explain their own work, where they find instructions, when they stop or escalate a problem and who can authorise a change. Use open questions and demonstrations rather than rehearsed audit answers. Where a role needs particular competence, consider what evidence shows the person can perform it in practice.

Compare those explanations with the records you selected. If different people describe different controls, resolve the underlying process or communication issue. Creating a new form will not help if staff do not know who uses it or what decision it supports.

4. Use internal auditing to test the system

Plan internal audit work around your processes, changes, risks and earlier findings. Agree criteria, scope, suitable auditor competence and how objectivity will be maintained. Document what was examined, the evidence obtained and any finding that needs action.

The ISO Auditing Practices Group paper on internal audits offers practical guidance on planning and effectiveness. It is older, non-normative guidance associated with ISO 9001:2015; it is not the complete 2026 audit criteria. Use the applicable standard for that purpose.

If you need help defining an audit programme or following up findings, discuss the scope of AFVA’s internal audit support. A preparation visit or gap review should not automatically be described as the completed internal audit.

5. Separate fixing a problem from preventing recurrence

For each open finding, record the issue, the immediate response, the cause considered, the action owner and how effectiveness will be checked. Avoid closing an action simply because a new procedure was uploaded or someone attended training.

Example only: if the wrong pack size reached a customer, correcting that order deals with the immediate problem. Further work might examine how the order was entered, how changes were approved and which check failed. A later check of relevant orders could help establish whether the chosen action worked. The appropriate response depends on the actual cause and consequences.

Be honest about actions still in progress. Record what remains, any interim controls and the next review point. Confirm external audit finding deadlines and closure evidence with the certification body; there is no universal deadline supplied by this preparation checklist.

6. Make management review a decision process

Bring together relevant performance information and unresolved issues so management can decide what needs to change. Depending on the business and audit criteria, useful discussion material may include customer feedback, process results, previous findings, resources, changes and improvement priorities.

Record decisions, responsibilities and follow-up. The Auditing Practices Group guidance on policy, objectives and management review can help frame that preparation, but its 2015-era inputs should not be treated as a complete 2026 list. Confirm the current edition’s requirements and the evidence your management review needs to retain.

The practical test is whether management can explain why it chose an action, what support was provided and how progress is checked. A meeting record that lists topics without decisions or follow-up gives the team little to work with.

What to bring to your first ISO 9001 consultation

You do not need to reorganise everything before asking for help. Send an honest starting point and identify where you are uncertain. A useful initial pack can include:

• The audit brief, proposed scope, applicable edition and relevant customer requirements.
• Any existing certificate, previous audit reports and correspondence about the next assessment.
• A simple process map, current document index and the people responsible for key activities.
• A few representative orders or work examples and the records linking their main steps.
• Internal audit results, open actions, management review decisions and available performance information.
• Known changes, recurring complaints, unclear responsibilities and practical constraints on the work.

Agree how confidential information will be shared and what the consultant will deliver. Ask whether the engagement covers advice, implementation support, internal auditing, an evidence review or a combination. AFVA’s guide to choosing a food safety consultant provides a useful starting point for agreeing scope and deliverables.

Common preparation mistakes to avoid

• Preparing only the folder: Check real work, people’s understanding and records as well as written procedures.
• Using an outdated checklist: Confirm the edition and transition plan before assessing gaps.
• Inventing missing evidence: Record an actual gap and corrective plan; do not backdate records or pretend a review happened.
• Closing findings on intention alone: Keep evidence of implementation and check whether the action worked.
• Confusing roles: Consulting support, an internal audit and a certification assessment have different purposes.
• Assuming a fixed preparation period: Agree a plan based on the system’s maturity, scope, unresolved issues and the certification body’s arrangements.

How AFVA can help with consultation and audit preparation

AFVA’s ISO standards consulting service supports New Zealand food businesses with ISO 9001 gap assessments, documentation review, internal audit planning, corrective actions, staff preparation, system integration and audit-evidence preparation. The engagement should identify the support needed and the business’s own responsibilities.

For a broader readiness engagement, discuss AFVA’s audit preparation support. Consultation does not guarantee a successful audit. AFVA does not issue ISO certificates; certification is handled by an appropriate certification body. Any separate verification or evaluation service needs its own scope and independence assessment.

Frequently asked questions about ISO 9001 consultation

Start with the audit brief and your known gaps

Bring the scope, edition, previous findings and a few real work examples to the first conversation. That gives the business and consultant a practical basis for agreeing priorities, responsibilities and evidence needs.

General information only: This guide is a preparation aid, not the complete ISO 9001 requirements or a certification decision. Use the applicable standard, customer requirements and certification-body arrangements for your scope. Separate food-safety, verification and other regulatory obligations still need their own assessment. Information checked on 15 October 2026.