The Consultant's 'ISO 56002 Certificate' and a Desktop-Only Audit
Lumen Robotics is a 60-person startup seeking an ISO 56001 certificate to satisfy an investor's due-diligence checklist. A consultant offers an 'ISO 56002 certification' based on a two-day review of Lumen's innovation documents, with no on-site audit and no Stage 2. The certificate would be issued by the consultant's own company, which is not accredited. The consultant says ISO 56002 and ISO 56001 are effectively the same and that a desktop review is enough for a small company. Lumen also holds ISO 9001 certification and wants to avoid duplicating management-system documentation. Its innovation activities are real but informal: hackathons, customer pilots and a small R&D team. The founder asks whether to accept the offer or pursue ISO 56001 and how to avoid duplicating the ISO 9001 system.
1. Is the consultant's offer a valid ISO 56001 certification? Explain the difference between ISO 56001 and ISO 56002 and what a credible certification process requires.
Read the worked answer
No. The offer is not a valid ISO 56001 certification. ISO 56002 is guidance on innovation management systems; it is not a requirements standard and is not intended for certification. ISO 56001 contains requirements and is the standard against which an innovation management system can be certified. A credible certificate must be issued by a certification body that is accredited for ISO 56001, and the audit must follow a recognized certification process: typically an application and contract review, a Stage 1 readiness assessment, a Stage 2 audit to evaluate implementation and effectiveness, a certification decision, and ongoing surveillance and recertification. A two-day desktop review by the consultant's own non-accredited company does not meet that model. The consultant's claim that the two standards are 'effectively the same' is also misleading: one is guidance and the other is a set of auditable requirements. Lumen should not represent such a document as ISO 56001 certification to the investor. If the investor requires certification, Lumen should select an accredited certification body and plan a realistic audit programme.
2. How should Lumen integrate ISO 56001 with its existing ISO 9001 system without duplicating documentation?
Read the worked answer
Lumen should use the harmonized structure shared by ISO 9001 and ISO 56001 to integrate the systems. It can maintain one integrated policy framework, one document-control process, one internal audit programme, one management review cycle and one corrective-action process, while adding the innovation-specific content needed by ISO 56001. For example, innovation objectives can sit alongside quality objectives, and the risk process can cover both quality and innovation uncertainty. The innovation processes should be mapped to the ISO 56001 clauses rather than written as a separate manual. Lumen should avoid creating duplicate procedures for training, communication, document control or nonconformity management. It should choose an accredited certification body that can perform an integrated audit against both standards, and agree the audit scope and timing in advance. Integration does not mean treating the standards as identical; it means sharing the management-system infrastructure while ensuring that ISO 56001-specific requirements, such as innovation portfolio governance and value realization, are addressed.