A defined readiness scope
Confirm the services, boundaries, criteria and external-review objective. Identify changes since the earlier assessment and which evidence should be available for the selected review period.
A focused readiness checkpoint
Prepare for the review before the review begins.
Test the clarity of your scope, the operation of key processes and the evidence you intend to present. CyberVantage360 helps identify readiness issues while there is still time to address them.
Your business, in focus
Find the weak handoffs in your evidence.
As an external review approaches, teams may have completed a large amount of work without knowing whether the evidence tells a coherent story. Scope statements, policies, records and management decisions need to agree. A late discovery that they describe different services can disrupt preparation.
A pre-assessment focuses on the implemented programme and the next review event. We examine selected evidence, discuss how processes operate and identify gaps that could prevent the organisation from demonstrating its approach. Findings should explain the issue and the work needed, rather than imply a predetermined audit result.
The timing should leave room for correction and, where relevant, evidence of subsequent operation. Set the review date around the actual readiness of the programme and the requirements of the external engagement. Rehearsing answers cannot replace completing the underlying work.
What you receive
Clear outputs.
Practical next steps.
Connect the agreed scope to useful outputs, clear ownership and evidence of progress.
An evidence walkthrough
Trace selected requirements through the approved approach, operating records and accountable owners. Surface missing links, inconsistent versions and unclear explanations of responsibilities.
Prioritised readiness findings
Distinguish substantive implementation gaps from evidence-organisation issues and presentation improvements. Identify dependencies that need management attention before the next review.
A final preparation plan
Set out the remaining actions, owners and verification needed. Organise the practical arrangements for evidence access and staff participation without scripting or overstating the results.
How we work
From a clear starting point to useful progress.
Work with the people responsible for the service. Make the decisions, instructions and review points easy to follow.
Plan a readiness review ↗01
Establish the review objective
Confirm the intended external process and the current implementation stage. Agree what the readiness review will cover and the limitations of its sampling.
02
Walk through the programme
Review selected documents and records with process owners. Test whether the evidence supports the stated scope and whether staff can explain the work they perform.
03
Resolve and decide
Discuss factual findings, prioritise remaining work and verify agreed corrections. Give management a clear view of readiness and unresolved matters before it decides the next step.
A hypothetical example
The records exist, but do they describe the same scope?
A hypothetical software company is preparing for an ISO certification audit. Its risk assessment includes a recently acquired application, but its internal review and management reporting still describe the earlier service boundary. A readiness review identifies the inconsistency and the decisions it affects. The company can align the programme and complete the missing work instead of relying on a neatly arranged but incomplete evidence folder.
Make it work for your team
Keep readiness distinct from assurance.
This is preparation support. The independent certification body or other appropriate assurance provider performs its own engagement and reaches its own conclusion. A pre-assessment can improve the quality of preparation, but it should not be represented as an ISO certificate, a SOC 2 report or a legal-compliance approval.
Understand ISO certification audit preparation ↗
Practical questions
Plan the right engagement.
How does this differ from an initial gap assessment?
An initial gap assessment establishes the starting position and remediation needs. A pre-assessment examines the implemented programme and available evidence in preparation for a defined next review. The scope can overlap, but the decision it supports is different.
Does it replace the internal audit?
Do not assume that it does. An internal audit has its own planned objectives, criteria, scope and objectivity requirements. If an engagement is intended to serve that purpose, it needs to be explicitly designed and documented accordingly.
Will the pre-assessment guarantee an external result?
The external provider performs its own work and makes its own decision. Readiness findings help the organisation prepare and address issues; they do not bind that provider or replace the required evidence.
What happens when a major issue is found?
Explain the affected requirement, evidence and practical impact. Management can then determine the corrective work and whether the planned external-review date remains realistic. Important gaps should remain visible until they are resolved.
Make the next review a better-prepared conversation.
Share the intended review, your current implementation stage and the evidence available for examination.