Pre-Audit Gap Analysis

What it does

Before an accreditation/certification audit arrives, it scans your current system against the target standard's mandatory (shall) clauses and answers "what would the auditor find" with evidence. Each clause is labelled one of four states: C (Conform — sufficient evidence), PC (Partial — evidence exists but incomplete or not implemented), NC (Non-conform — no evidence), NA (Not applicable). Each gap then gets two things: a finding severity (major / minor / observation-OFI) and a finding-probability × impact score. The output is a 0-100 Compliance/Maturity Score with verdict, a findings list ranked by RPN, and a concrete corrective-action plan for every gap.

A critical distinction: this skill never confuses correction with corrective action. "We updated the document" is a correction; without root cause plus recurrence prevention, an auditor won't close the finding. Every gap is driven at least one layer deep with 5 Why.

When to use it

When preparing for an ISO 17025, 9001, 45001, 27001 or 22000 audit: "where do we stand against this standard", "will we get stuck in the audit", "which clause is weak", "how many majors will we get", "do a gap analysis". RPNs are calibrated differently for initial accreditation, surveillance, re-accreditation and internal audit — in surveillance a repeated prior finding is auto-escalated to major.

Method / frameworks

The analysis fuses four established methodologies, not intuition. ISO 19011:2018 (audit guidance) treats every gap as an "audit evidence + audit criterion" pair — objective evidence, not assertion. Finding grading (major/minor/observation) uses the TÜRKAK/UKAS/A2LA/IAF shared language, bound to prevalence plus impact on result validity. PDCA + risk-based thinking (ISO 9001 Clause 6.1) scores finding probability via an RPN-like probability × impact (1-25); threshold RPN ≥ 15 means close before the audit. CAPA / 8D + 5 Why (ISO 9001 Clause 10.2; ASQ CAPA) writes correction + root cause + corrective action + effectiveness check for every gap (C=NC=C closure rule). For labs, ILAC-P9 (PT mandate) and GUM (JCGM 100:2008, measurement uncertainty) are primary references — industry data confirms these are the most frequent suspension/finding causes in accreditation.