How we work
Four consulting phases, a methodical toolkit, transparent billing. Every point is negotiable in the initial consultation — but this is the approach with which we most reliably achieve certification-ready results.
Four steps to certification
The proven waterfall approach. Whether ISO 9001, FSSC 22000 or IATF 16949 — the sequence stays the same. The depth adapts to standard, industry and maturity level. If you want to reach the result faster and more iteratively, see the agile variant (Lean-QA) further down.
Analysis
Gap audit against the target standard. Structured interviews, process walk-throughs, documentation review. Result: written Gap Analysis with prioritised findings and effort estimate.
Concept
Action plan with owners and timeline. Document structure, role model, audit plan. You always know what needs to be done by when — and with what effort.
Implementation
Support in day-to-day operations. Training for managers and shift teams, building documentation together with the operating units, process coaching on real-world examples.
Audit
Internal audit, preparation for the management review, support during the certification audit itself. Follow-up on any non-conformities through to issue of the certificate.
Audit-ready in 90 days — in sprints, not in binders
For SMEs, start-ups and companies running several standards in parallel we alternatively work in 2-week sprints following our Lean-QA approach. Instead of writing a complete blueprint before the first step, we deliver audit-ready building blocks from sprint one — and grow the system increment by increment until it is ready for certification.
Sprint 0 — Discovery
Gap audit, standard backlog (epics from clauses, features from requirements, user stories from audit questions), Definition of Done. After 1–2 weeks: prioritised roadmap and Sprint-1 backlog.
Sprints 1–6 — Build the MVQ
Minimum Viable QMS in 6 sprints (12 weeks): context-defining processes, risks/opportunities, supplier, corrective-action and audit mechanics. End of each sprint: one demonstrably effective building block.
Sprints 7–9 — Scale & audit
Remaining processes, training, internal audit, management review. Certification audit after sprint 9. Followed by optional maintain retainer with external QMB support.
What a 2-week sprint looks like
Every sprint runs the same four ceremonies — short, cadenced, outcome-driven. Not Scrum for its own sake, but consulting with a clear beat.
Sprint Planning
Day 1 · 2 hours. Prioritise backlog, select user stories for the sprint, sharpen the Definition of Done. Consultant and operating units plan jointly.
Daily Stand-up
Every working day · 15 minutes. Three questions: what is done? what is up today? what is blocking? Asynchronous via Teams or Jira works.
Sprint Review
Day 10 · 90 minutes. Demo of completed user stories against the Definition of Done. Audit-ready or not — no grey zone.
Retrospective
Day 10 · 60 minutes. What worked, what did not, what do we change next sprint? Continuous improvement — of the consulting process itself.
When classic, when agile?
Both approaches lead to certification. The choice depends on maturity, standard and tempo — not on belief.
Classic (waterfall)
- Re-certification with few changes to the system
- Tightly regulated standards (e.g. medical devices EN 13485) requiring complete up-front documentation
- Large corporations with established stage-gate processes and long planning lead times
- Small workshops (≤ 10 employees) where a single gap plan and one audit cycle is enough
Agile (Lean-QA)
- Initial certification in SMEs with 10–250 employees
- Start-ups and scale-ups with high pace of change
- Several standards in parallel (e.g. ISO 9001 + FSSC 22000 + ISO 14001)
- Companies that want to hit audit dates without last-minute escalations
More on the Lean-QA approach
The Lean-QA pillar page covers the methodology in detail — epics/features/user stories, the three packages Start · Build · Maintain, and the manifesto behind it.
Our toolkit
We choose methods because they fit the question — not because they are in fashion. These are the ones we use most often.
FMEA
Failure Mode and Effects Analysis. Used in product, process and system FMEAs — especially in automotive (IATF) and medical devices.
8D Report
Systematic complaint handling in eight disciplines. Used for Major Non-Conformities and customer complaints.
HACCP
Hazard Analysis and Critical Control Points. The core of food safety under FSSC 22000, IFS and BRCGS.
TACCP / VACCP
Threat and vulnerability assessment for food defence and food fraud. Mandatory in modern GFSI standards.
Process mapping
Structured visualisation of the value chain — foundation of any robust QM system.
Risk assessment
Methodical risk analyses for QM, ISMS and HSE. Structured methods rather than gut feeling.
ISO 19011
Audit methodology — from planning to reporting. The basis for internal audits.
APQP / PPAP
Product development and sampling in the automotive environment. Closely linked to IATF 16949 requirements.
Effectiveness check
Not “action closed” — but “effect demonstrated”. Enforced methodically and consistently.
The systems we work with
We bring the methodology, but we work in your world. If you use SAP, we speak SAP. If you have a dedicated QM tool, we learn it.
SAP / S/4HANA
QM module, materials management, production. Interfaces to MES and quality data.
MES systems
SAP DMC, Werum PAS-X, Critical Manufacturing, solutions suited to mid-sized companies. Vendor-independent selection.
Jira / Confluence
Action tracking, knowledge management, audit documentation — where you already use Atlassian.
DMS / QM-handbook software
Roxtra, ConSense, ISO Aspekt, Microsoft SharePoint — we use your system rather than bringing our own.
Microsoft 365
SharePoint as a DMS, Teams for collaboration, Lists and Power Automate for lightweight workflows.
Audit software
Experience with several specialist tools — we deploy them only if you want to.
How we bill
Transparent models, clear quotes, no hidden flat fees.
Day rate
For clearly scoped engagements: mock audits, audit attendance, individual workshops. You receive an estimate up front; we bill for what is actually delivered.
Fixed price
For clearly delimited projects — typically gap analyses or initial-certification packages. Fixed budget, documented scope, no surprises.
Retainer
For ongoing support: a monthly allotment, predictable availability, shortest response times. Makes sense from the second consulting year or in the re-certification cycle.
On request you will receive an indicative quote after the initial consultation, and a written order confirmation before every step.
Let’s talk about your plans
A 30-minute free initial consultation — afterwards you will know whether we are the right partner.