Attestware

For certification bodies · ISO/IEC 17021-1

Contracted lead auditors for your ISO 27001 and ISO 42001 programmes.

Accredited certification bodies run on qualified auditor capacity, and ISO/IEC 42001 programmes are launching faster than qualified auditors exist. We conduct Stage 1, Stage 2 and surveillance audits under your accreditation, your processes and your templates. Your independent decision-maker decides; we deliver audit files that make the decision easy to defend.

ISO/IEC 27001 & 42001 Stage 1 · Stage 2 · Surveillance Your templates, your timelines Ireland · EU · Remote

The arrangement

Contracted auditing under ISO/IEC 17021-1

Contracting external lead auditors is standard practice under ISO/IEC 17021-1, the standard certification bodies are accredited against, provided competence records, impartiality declarations and oversight are in place. We slot into that machinery: you hold the accreditation and the client relationship, we conduct the audit to your documented process, and every assignment starts with a written conflict-of-interest declaration against your register.

Where we add the most value right now is ISO/IEC 42001. Certification bodies building AI management system programmes face a genuine scarcity of auditors who hold the Lead Auditor qualification and understand how AI systems are actually built and operated. We bring both.

Working with us

What you can expect

  • D1Audits conducted to your processYour audit methodology, your report templates, your grading conventions and your timelines. Clients experience your certification body, not a subcontractor's habits.
  • D2Audit files that survive scrutinyWorking papers with a clear trail from evidence to finding to recommendation, written for the reviewer, the decision-maker and the accreditation body's witness assessments.
  • D3Conflict management you can evidenceA declaration before every assignment, an absolute rule against auditing organisations we have any relationship with, and prompt escalation the moment anything emerges mid-audit.
  • D4Competence records, maintainedQualifications, training records and audit logs kept current and supplied in the format your competence management process needs.
  • D5Named auditors, no substitutionThe auditor you contract is the auditor who shows up. We do not re-subcontract assignments.

Where we help

Three situations certification bodies bring us

Launching ISO/IEC 42001

You are building an AI management system programme and need qualified auditors before client demand arrives. Scarce today; we are available.

Capacity peaks

Recertification waves, transition deadlines and seasonal clustering outstrip permanent audit staff. Contract capacity absorbs the peak without the headcount.

Ireland and EU coverage

Local presence for Irish clients, remote delivery across the EU, and on-site travel where the audit plan requires it.

The decision stays yours: we conduct audits and recommend; certification decisions are made by your independent decision-maker, as ISO/IEC 17021-1 requires. That separation is the system working, and we like it that way.

FAQ

Fair questions, straight answers

What qualifications do your auditors hold?

Certified Lead Auditor training in ISO/IEC 27001 (with SEQM) and ISO/IEC 42001, backed by a practitioner background building and operating production systems, including AI systems, and financial statement audit experience where evidence discipline was learned the hard way. Full competence records are available for your evaluation process.

How do you handle conflicts of interest?

A written declaration before every assignment, checked against our relationship register. We never audit an organisation we have provided any service to, and cooling-off conventions are respected without being asked. Anything that emerges mid-audit is escalated to you the day it emerges.

Can you take on surveillance programmes, not just initial audits?

Yes. Surveillance visits, recertification audits and transition audits are all in scope, and continuity of the same named auditor across a client's cycle is something we can commit to, which clients tend to value.

Discuss capacity

Auditor capacity your programme can rely on.

Tell us which standards, what volumes and where. We will come back with availability, competence records and terms.

Contact Attestware