Brackenridge Financial Services - Four Weeks to Stage 2
Brackenridge Financial Services has its stage 2 ISO 41001 audit in four weeks at its London headquarters and two regional offices. The certification body's stage 1 report, issued six weeks ago, raised seven findings: five minor and two requiring correction before stage 2 - a scope statement that does not define boundaries, and no evidence that FM objectives are monitored. The internal audit programme planned eight audits across clauses 4–10; three are complete, all covering hard services, and none covering context, leadership or improvement. Management review was scheduled for last month but postponed twice because the COO was travelling. The scope statement drafted by the consultant names a new Manchester office due to open in seven months. The consultant also wrote the FM manual and most work instructions; the FM team says it has 'read most of it'. The provider's site manager has resigned, and the two supervisors covering have not been involved in the implementation.
1. Build a four-week readiness plan and state what must be true before the stage 2 opening meeting.
Read the worked answer
Work backwards from the audit date, and prioritise the two stage 1 findings plus the clause 9 requirements, because a certification body cannot overlook them.
Week 1 - decisions, not documents. Rewrite the scope statement with real boundaries: named sites, FM services, the demand/supply arrangements, and explicitly exclude Manchester until it is operational (including it invites sampling of a site that does not exist and a finding on 4.3). Define how FM objectives are monitored - indicator, method, frequency, owner, reporting route - and start producing the data immediately, since evidence needs a cycle, not a promise. Brief the two covering supervisors; they will be interviewed and cannot say they were not involved.
Week 2 - complete the internal audit gap. Run a compressed audit of the uncovered clauses (4, 5, 6, 10) and a follow-up on improvement, with an auditor independent of the activity. Report findings, raise corrective actions and begin them.
Week 3 - management review. Hold it with the COO physically or virtually present; cover 9.3 inputs including stage 1 findings, internal audit results, performance against objectives, risks, resources and improvement. Record decisions, owners and dates.
Week 4 - verification and rehearsal. Close the two stage 1 findings with objective evidence. Confirm the FM team can explain the manual and instructions rather than having read them; where they cannot, simplify or withdraw the document.
Before the opening meeting: scope issued and understood; objectives monitored with at least one data cycle; internal audit complete across all clauses; management review held with recorded outputs; corrective actions in progress with named owners.
2. The internal audit programme is only 38% complete and management review has not happened. Can the audit go ahead, and what should be recommended?
Read the worked answer
Clause 9.2 requires internal audits at planned intervals against the organisation's own requirements and the standard, with a programme covering frequency, methods, responsibilities, planning requirements and reporting, and with results reported to management. Clause 9.3 requires management review at planned intervals. These are not optional items that can be substituted by the certification body's own audit - the external audit verifies that the organisation audits itself and acts on the results; it does not perform the audit for it.
The specific risk is not just a missing clause. Three audits, all on hard services, mean the system's leadership, context, planning and improvement processes have never been tested. Those are precisely where a stage 2 auditor will probe, and where failures are most likely, because they depend on top management rather than on the FM team.
The recommendation depends on what can genuinely be achieved in four weeks. If a credible internal audit of the missing clauses can be completed and a management review held before the audit date, proceed - but tell the certification body that the programme is behind and how it is being recovered, because attempting to conceal it damages credibility if discovered. If the COO cannot attend and no delegated authority exists, or if the audit cannot be done properly in the time, request a postponement of four to six weeks. A postponement is a commercial inconvenience; a stage 2 recommendation of 'not certified' costs far more, and a certificate obtained on a system that has never been reviewed internally is not defensible.
3. The consultant wrote the manual and most work instructions, and the FM team has only 'read most of it'. How should this be handled before the audit?
Read the worked answer
There is nothing wrong with using a consultant, and ISO 41001 does not prohibit external help or externally written documentation. The problem is evidential: the audit tests whether the management system is understood, implemented and effective. Documents that the people doing the work cannot explain, and that describe processes they do not follow, will fail that test - and the auditor will find it quickly by interviewing a supervisor and comparing the answer to the manual.
The practical response in four weeks is subtraction rather than more training. Take the manual and instructions and, with the FM team, identify which describe what actually happens and which describe an idealised operation. Retain and correct the first set; withdraw the second rather than pretending to comply. Clause 7.5 permits the organisation to determine what documented information it needs - a shorter, accurate set is stronger evidence than a comprehensive set nobody uses.
Then validate the core few with the people who use them: service request handling, contractor control, escalation, and the process for capturing and acting on performance data. Ask each owner to walk through their process and the records it produces; where they cannot, either fix the process or fix the document.
Finally, prepare the team to answer honestly. An auditor accepts 'we found this was unworkable and simplified it in March' - it is evidence of improvement under clause 10. What it does not accept is a team reciting a document it has not understood, or a manual that exists only for the audit.