Assurance & Audit
Assurance Bureau provides independent audit and assurance services aligned to internationally recognised management system standards.
Services are delivered with a focus on audit defensibility, practical outcomes, and a clear separation between assurance and advisory activities. External audits are delivered on a contract or associate basis in accordance with certification body accreditation requirements.
These services are suited to organisations and certification bodies that require independent, defensible assessments aligned to recognised standards.
Internal Audits
Internal audits provide independent assurance over the design and effectiveness of management systems, and support organisations in maintaining certification, preparing for certification, or improving governance maturity.
Standards supported:
ISO/IEC 27001 — Information Security Management Systems
ISO 9001 — Quality Management Systems
ISO/IEC 42001 — AI Management Systems
Internal audits are conducted independently of any advisory or implementation activities.
External Audits (Contract / Associate Delivery)
External audits are delivered on a contract or associate basis for certification bodies, in accordance with their accreditation, procedures, and quality requirements. Audit activities are performed under the authority of the certification body and issued in the certification body’s name.
Audit types include:
Stage 1 and Stage 2 certification audits
Surveillance audits
Recertification audits
Standards supported:
ISO/IEC 27001
ISO 9001
ISO/IEC 42001
Assurance Bureau does not provide certification services directly.
Engagement Model
Assurance engagements are typically delivered as fixed-scope audits aligned to the applicable standard and certification requirements.
External audits are conducted on behalf of certification bodies as part of their accredited certification programs. Internal audits are provided directly to organisations, or through delivery partners, as independent assurance engagements.
Independence & Impartiality
Independence and impartiality are maintained in accordance with applicable audit principles and certification requirements.
Advisory and implementation activities are clearly separated from assurance engagements to avoid conflicts of interest and protect audit integrity.