Your way to the system certificate
Rely on our expertise to certify your management system efficiently and sustainably.
1. Information meeting
Get an overview of the certification process and clarify open questions.
2. Analysis
Evaluation of your existing processes and identification of optimization potential.
3. Implementation
Implementation of the necessary measures in accordance with the selected standard.
4. Optional stage-review
Preliminary review to identify strengths and weaknesses.
5. System & risk review
Detailed pre-assessment as a dress rehearsal before the main audit.
6. Certification audit
Comprehensive audit by our auditors with a focus on effectiveness and conformity.
7. Certificate
Receipt of the certificate with a validity of three years.
Surveillance audits
Annual audits to ensure continuous improvement.
Recertification
Renewal of the certificate after the expiry date.
Integrated management systems
More efficiency through uniformity
More and more organizations are relying on integrated management systems to combine various standards such as information security, quality management or environmental management into a uniform overall system. This not only reduces complexity, but also significantly increases the efficiency of strategy and planning processes. Studies and experience show time and cost savings of over 20%. ISO 9001 is a proven foundation – it offers the broadest basis in terms of content. Other standards can be added on a modular basis.
Gradual expansion
Flexible and future-proof
Once established, a management system can be flexibly expanded to include key topics such as information security (ISO 27001), data protection (ISO 27701), IT service management (ISO 20000), business continuity (ISO 22301) or environmental management (ISO 14001).
The basis for integration is the uniform structure of the standards (Annex SL). This allows you to gradually expand your system into a stable, future-proof platform for corporate management – without any duplication of work.
Combination audits
Use synergies, reduce costs
Combination audits are the key to efficiency and transparency for integrated systems. Joint audits not only save time and costs, but also enable a holistic view of processes and management issues. Multi-functionally trained auditors identify potential for improvement across system boundaries.
Jointly planned audit procedures relieve the burden on management levels, simplify management reviews and bundle all processes in a comprehensive documentation.
CIS certification process for systems
This document describes in detail the procedures and processes of a certification process for the standards
- ISO/IEC 20000
- ISO/IEC 22301
- ISO/IEC 27001 incl. all extensions: ISO 27017/ISO 27018/ISO 27019/ISO 27701, ISO/IEC 62443-2-1
- Audit in accordance with EnWG §11 1a and EnWG §11 1b (Energy Industry Act)
Stage review
Recognize maturity level & optimization potential
How effective is your management system – and where is there still room for improvement?
A CIS stage review provides a well-founded assessment and evaluates the system maturity and improvement potential of your information security or IT service management system (e.g. in accordance with ISO/IEC 27001 or ISO/IEC 20000).
This voluntary pre-assessment by CIS offers:
- an objective assessment by experienced auditors,
- a clear profile of strengths and weaknesses,
- targeted recommendations for optimization,
- and orientation for project progress monitoring.
A CIS stage review consists of three structured elements:
- Audit planning – for an economically and organizationally efficient implementation
- Audit execution – evaluation of risks, strengths and weaknesses in the company context
- Audit report – detailed report with target/actual analysis and concrete potential for improvement
Too many or too few implemented measures can impair the effectiveness of your system. The review analyzes policies, processes, key figures and structures – always adapted to standard requirements, company size and industry.
Result: A precise audit report as a basis for targeted further development and optimal preparation for subsequent certification.
