Readiness for Stage 2 Certification at a National Transport Agency
A national road and rail transport agency has completed a Stage 1 certification audit against ISO 55001. The auditor identified three findings: the AMS scope excludes 14 tolling gantries maintained by a third party; the asset management policy is signed by the AMS manager, not top management; and two of seven internal audit reports have no corrective action follow-up. The agency also has not completed an internal audit of its tunnel ventilation assets, which are classified as critical. The last management review was 14 months ago and focused on budget. The certification body has scheduled the Stage 2 audit in eight weeks. The AMS team has four staff, and the executive sponsor is the operations director, who is supportive but busy. The agency's scope statement currently covers 'road and rail infrastructure operations and maintenance', while the certification body's quotation excludes tolling. The AMS manager must prepare a readiness plan.
1. Assess the agency's readiness for the Stage 2 audit and identify the highest-risk gaps. Explain how each gap could affect certification.
Read the worked answer
Readiness is not high. The highest-risk gaps are:
- Scope mismatch. The AMS scope excludes the 14 tolling gantries, but the certification body's quotation excludes tolling. If the certification scope and AMS scope are inconsistent, Stage 2 cannot reliably assess the boundary. This is a clause 4.3 issue and may become a major nonconformity.
- Policy approval. The policy is signed by the AMS manager, not top management. Clause 5.2 requires top management to establish the policy. This is a leadership nonconformity, likely major because it undermines authority and commitment.
- Internal audit follow-up. Two of seven reports have no corrective action follow-up. Stage 2 will sample audit records and ask for closure evidence. This is an ISO 55001 clause 9.2 and corrective action issue.
- Critical tunnel ventilation audit missing. The audit programme is not risk-based or complete. For a critical asset class, this is likely major and will attract auditor attention.
- Management review. The last review was 14 months ago and budget-focused. There is no fixed interval in the standard, but evidence of planned reviews with decisions and actions is weak. This undermines clause 9.3.
The scope and policy are highest risk because they affect the whole system, not a single process.
2. Prepare a prioritized eight-week readiness plan. Include owners, evidence to produce, and what must not be rushed.
Read the worked answer
Weeks 1–2: Decide and document the certification scope with the certification body; reissue the policy for top-management signature; open corrective actions for the two audit reports. Owners: AMS manager, operations director, quality lead. Evidence: signed scope statement, signed policy, CAPA records.
Weeks 3–4: Complete a risk-based internal audit of tunnel ventilation using competent auditors; hold a management review with required inputs, decisions, and actions. Owners: lead auditor, executive sponsor. Evidence: audit report, review minutes with decision log.
Weeks 5–6: Build the evidence pack - policy, scope, SAMP and AMP, risk register, audit reports, CAPA, management review minutes, competence records, and operational control records for the tolling contractor. Owner: AMS team. Evidence: indexed evidence list.
Week 7: Run a mock Stage 2 audit with an independent reviewer; fix evidence gaps. Week 8: Final readiness check and audit logistics.
Must not be rushed: the management review must be genuine with decisions, and the tunnel audit must be real. Do not backdate records, coach staff, or manufacture evidence. If scope cannot be agreed, postpone or narrow the certification scope rather than create a mismatch.
3. The operations director asks whether to postpone the audit to avoid a major nonconformity. Advise with reasoning.
Read the worked answer
Advise a risk-based decision, not an automatic postponement. If the scope and policy can be fixed in eight weeks and the critical tunnel audit and management review can be genuinely completed, proceed. If the scope remains ambiguous or top management will not sign the policy, postpone or narrow the scope.
A Stage 2 audit that finds a major nonconformity in leadership or scope will force a follow-up audit and may damage credibility with the regulator and board. Auditors sample, so an unresolved systemic gap is likely to be found. Postponement is not failure; it is a controlled decision that protects the value of the certificate. The director should also consider that certification should confirm a working AMS, not a rushed paper exercise.
Prepare an honest readiness statement to the certification body, with gaps and planned closure dates. If the decision is to proceed, resource the readiness plan explicitly and hold a go/no-go review one week before the audit. If the decision is to postpone, inform stakeholders with a clear reason and a new date.