Certification Readiness & Gap Analysis

From there it is about closing what matters most first, with hands-on support rather than a report left to gather dust. For aerospace and defence suppliers, that includes AS9100D-specific readiness: configuration control, first article inspection and the customer flow-down requirements a generic QMS review will miss. The goal is a certification audit that confirms what you already know, not one that surfaces surprises.

A review built around the auditor’s view

Hillscom starts with a full clause-by-clause review against your target standard, benchmarked against what a certification body auditor will look for. That means going beyond the letter of the standard to how assessors interpret it in practice. The output is not a generic checklist. It is an action plan ranked by audit risk, so effort goes where it will make the most difference before your assessment date.

Findings ranked by risk

Findings are grouped by how much they matter: gaps likely to stop certification outright, gaps that would be raised as major nonconformities, and lower-risk observations worth addressing but unlikely to derail an assessment. Most organisations have limited time and resource before an audit, and effort spent on low-risk items is effort not spent on the gaps that put certification at risk.

Each finding is specific. Rather than noting that a clause is partially met, it identifies what evidence is missing, what needs to change and who needs to be involved in closing it. That turns the report into a working plan rather than a document read once. Where time or budget is tight, findings can be phased, with the highest-risk gaps closed immediately and lower-risk improvements scheduled after certification.

Closing the gaps

Closing gaps is rarely just a documentation exercise. Some findings point to a missing procedure or an out-of-date record, which is straightforward to fix. Others point to a process that is not operating the way the standard requires, which needs a change in how the work is done, not just how it is written down. Hillscom works alongside your team through this phase to make those changes stick, rather than handing over a list of actions and stepping away.

Transitions and transfers

For organisations transferring certification between bodies, or facing a revised standard, the gap analysis also covers what has changed since the last audit. The 2026 editions are a current example. ISO 9001:2026 expects evidence of quality culture, separately evaluated risks and opportunities, and closed-loop planning of changes, while ISO 14001:2026 adds life-cycle scope and abnormal operating conditions. A system built for the 2015 editions may not yet hold that evidence.

Mock audits

A mock audit is often the final step, run as a certification body assessment would be: sampling records, interviewing process owners and testing whether the system holds up under questioning rather than just looking complete on paper. This is where confidence in readiness comes from, and where final adjustments are made before the certification assessment. Longer term, a capable internal audit programme, set up through audit support, keeps the system audit-ready between visits.

Get in touch to scope a gap analysis ahead of your next audit.