Reality check · ISO-9001
ISO 9001 surveillance coming up? Find the gap before the registrar does.
A pre-audit walk by partners who have run quality systems under ISO 9001. We find the gap between your documented QMS and your floor before your registrar finds it during surveillance.
Most ISO consultants will help you pass the audit. Brass & Bench helps you stop lying to yourself. The difference matters because the document-first firms write you better procedures, train your team to answer audit questions correctly, and miss the structural say-do gap that the registrar will write up in twenty minutes during the surveillance.
Quick answer
The ISO 9001 Reality Check is a pre-audit walk for manufacturers heading into a Stage 2, surveillance, or recertification audit under ISO 9001:2015. Brass & Bench partners come onsite for three to five days, read your QMS documentation, walk the floor with the documentation in hand, and deliver a bound gap-matrix report identifying every place where what your procedures say does not match what your operators actually do. Pricing is $25,000 to $45,000 all-inclusive depending on facility size and the standards in scope. Most clients use this as a final readiness check four to twelve weeks ahead of their registrar audit.
By Lorrie Lynn · Founding Partner. Operations, Manufacturing & International Contracts · Updated May 14, 2026The gap
What the registrar finds that your internal audit missed.
The gap registrars find on an ISO 9001 audit is almost always one of five patterns.
Process map drift. Your documented process map was authored when the company looked different. The flow has evolved. The map has not. Registrars catch this by following one work order through the floor and comparing what they observe to what the QOP and the work instructions describe. The deviation gets logged as a Major if it touches a customer-facing or regulatory-facing requirement.
Operator practice diverging from work instructions. Long-tenured operators develop better methods than the documented procedure. Internal audit misses this because internal auditors have worked with the same operators for years and have already accepted the divergence. The registrar has not. The same divergence reads as a non-conformance during surveillance.
Corrective action that did not close the underlying cause. ISO 9001 Clause 10.2 requires the corrective action to address the cause, not the symptom. Most QMS programs we audit have corrective actions logged as closed where the symptom was treated and the cause was never named. The registrar opens those back up.
Management review without quantitative inputs. Clause 9.3 requires management review inputs that include performance trends, customer feedback, results of audits, and the effectiveness of risk-and-opportunity actions. Most reviews we read are narrative. The registrar wants the numbers. Where they are missing, the review is non-conforming.
Risk-and-opportunity register that was authored once. Clause 6.1 requires risk-and-opportunity to be addressed across the QMS. The register exists in most certified shops because the registrar required it at Stage 1. It rarely gets updated. The registrar checks revision dates.
The path
How we close the gap before the audit.
The Reality Check is structured to close all five gap patterns before the registrar walks in.
Day zero. Remote intake. You send the QMS manual, the procedure set, the work instruction library, the last two audit reports (internal and external), the last twelve months of corrective actions, the most recent management review minutes, and the current risk-and-opportunity register. The team maps your documentation tree and builds the inspection checklist.
Days one and two. Documentation-to-floor walk. Lorrie Lynn and one supporting partner come onsite. The team follows one or two production work orders end-to-end. Receiving, planning, production, in-process inspection, final inspection, packaging, shipping. Every documented step is compared to the floor reality. Every deviation gets logged with a timestamp, an operator initial, and a citation back to the relevant clause.
Day three. Records and people. The team reviews twelve months of records: corrective actions, internal audits, calibration, traceability, customer-feedback logs. Operator interviews validate the floor observations. The team specifically asks operators what they would do differently if the procedure allowed it. The answers are gold.
Day four. Findings. The bound gap-matrix report is built in real time. Every finding tied to a clause, a severity rating, and a recommended remediation. The remediation is sequenced for the audit calendar, with the highest-criticality items resolvable inside two weeks. Day four closes with a ninety-minute readback with ownership and the QMS owner.
Day five (if onsite). Sometimes the engagement extends a day for facility coverage on a multi-shift or multi-site operation. Otherwise day four is the wrap.
The bound report ships within forty-eight hours of the onsite wrap. The recommended-path appendix tells you whether to remediate in-house, engage Brass & Bench for execution support, or extend to a Two-Week Onsite for a deeper rebuild. We have no incentive to upsell. The audit-readiness of your operation is the only thing we are paid to evaluate.
ISO-9001 audit coming up? Let's find the gap first.
The first call is a thirty-minute conversation. We tell you whether the Conformance Reality Check is the right product, or whether you need something different.