ISO Mentoring: Expert Guidance for DIY ISO Systems

Expert ISO guidance without the cost of full consultancy. Mentoring is for capable people doing something they have not done before: a quality manager who has maintained a certified system for years but never built one from scratch, a safety or IT specialist who knows the discipline but not the standard, or a team building a system with templates and AI tools. You do the work and keep the knowledge; we guide you, review it, and make sure it actually certifies.

Having spent years auditing and consulting, the single most expensive mistake I see is a capable team building a system in good faith, entirely alone, and only discovering what the standard actually required at the certification audit. Mentoring exists to stop that. You keep the work (and the cost, and the knowledge) in your business; you stop guessing.

ISO mentoring and coaching — Mentoring means your team produces the system and an experienced auditor checks it. Plan on one capable person spending a meaningful share of their week over three to six months.

Who ISO mentoring is for

Experienced system managers who have never built one from scratch. You have maintained a certified system for years, sailed through surveillance audits, and now have to stand up a new standard, or rebuild a system that was inherited and never really fit. Running a system and building one are genuinely different skills.
Experienced industry people who know the work but not the standard. Safety managers, IT and security managers, lab managers, engineers, food-safety leads. You know your discipline far better than any consultant will. What you need is someone who can translate it into the language of the standard and carry it through to certification.
Internal quality, compliance or risk managers leading certification in-house. Often the person handed the project alongside a full-time job.
Organisations building a system with AI tools or downloaded templates. A fast start, but one that needs checking before it meets an auditor.
Startups and growing businesses preparing for their first certification. Usually because a customer or tender has asked for it.
Anyone who wants to keep control and cost down, but not go it completely alone.

How mentoring works

You do the building. We make sure it is right. Mentoring is delivered through scheduled sessions (typically remote) where we review your progress, answer questions, unblock problems and keep you aligned to the standard and your certification timeline. You get an experienced ISO auditor in your corner, without the cost of outsourcing the whole project.

You already have the right people, just not this particular experience

Most organisations we mentor are not short of capability. They are short of one specific kind of experience, and it is almost always one of these three.

You have run a management system, but never built one

This is far more common than people admit. A quality or HSEQ manager can spend a decade keeping a certified system healthy (running audits, closing corrective actions, fronting surveillance visits every year without a hitch) and still have never designed one. Then the business wins work that requires ISO 45001, or a customer asks for ISO 27001, and suddenly you are starting from a blank page rather than maintaining someone else’s.

Maintaining and building are different skills. Maintenance is about keeping a working machine running. Building means making the judgement calls that were made for you years ago and never explained: how wide the scope should be, which processes need documenting and which do not, how much evidence is enough. Get those wrong at the start and you feel it at every audit for the next three years. Mentoring puts someone beside you for exactly those decisions, not to take the work off you, but to stop you committing to a structure you will regret.

You know the work better than any consultant, but not the standard

Safety managers, IT and security managers, laboratory managers, engineers, food safety leads. You understand your risks, your people and your operation far better than an outsider ever will. What you do not have is a working knowledge of a 30-page standard written in deliberately abstract language, or a sense of what an auditor will actually ask for as evidence.

That is a translation problem, not a competence problem, and it is a poor reason to pay a consultant to write documents about a business they have just met. The controls you are already running are usually most of the answer; the gap is knowing which clause they satisfy, what needs to be written down, and what is genuinely missing. Mentoring closes that gap and leaves you, the person who actually knows the operation, in charge of the system.

You have a system: you just have not taken one to certification before

Plenty of businesses already run to a decent internal system: procedures exist, records are kept, people follow them. Then a tender or a major customer asks for the certificate, and the job changes from “run the business well” to “prove it to an accredited auditor”. That last stretch (evidence, internal audit, management review, Stage 1, Stage 2) is where competent teams most often stall, because it is the part nobody has done before.

Certification Mentoring exists for precisely this: we do not rebuild what already works, we get it over the line. If you are close and simply want to know where you stand, an ISO certification readiness review or a gap analysis audit may be all you need.

There is a quiet advantage to all three of these, and auditors notice it. A certification audit is not a document review. It is a series of conversations with your people. When your own team built the system, they can explain it. When a consultant built it, too often the room goes silent and the auditor starts probing. Systems built in-house, with the right guidance, defend themselves.

What a mentoring engagement looks like

Most engagements run over three to six months and follow the same shape, whichever standard you are certifying to:

Scope and gap analysis. We agree what is actually in scope (the single biggest cost lever) and establish where you stand against the standard. A tight, defensible scope is usually the difference between a manageable project and a sprawling one. See our gap analysis audits.
Risk assessment and controls. We coach your team through assessing your real risks and selecting controls that match how you operate, not a generic register. For ISO 27001 this includes the Statement of Applicability, which is where most DIY systems come unstuck.
Build and review. You write the policies, procedures and registers; we review them against the standard and against what your business actually does, and tell you plainly what an auditor will challenge.
Implementation and evidence. The part nobody enjoys and everybody underestimates. We help you generate the records that prove the system is running, because a certificate is awarded for evidence, not documents.
Internal audit and management review. We run the independent clause 9.2 internal audit and coach you through a management review that is genuinely useful rather than a tick-box.
Certification support. A readiness review before you book, then support through Stage 1 and Stage 2.

Why I usually don’t sit in your certification audit

This is where mentoring differs most sharply from how a lot of consultants work, and it is deliberate. I rarely join clients in the room for Stage 1, Stage 2 or surveillance audits. My job is to make sure you are ready: that your people understand the system, know why it is built the way it is, and can point to the clause each part of it satisfies. Not to sit beside you and answer for you.

When a consultant fields every question, the auditor notices. It raises the obvious doubt: has this organisation actually adopted the system, or has it been handed one and told where to file the records? That doubt does not stay a doubt. The auditor starts probing harder, digging for evidence that the system lives outside the manual, and a straightforward audit becomes an uncomfortable one. I have watched it happen from the auditor’s chair many times.

The opposite is far more powerful. When your process owners answer in their own words, imperfectly, in plain language, referring to what they actually do, the auditor relaxes. That is what genuine adoption sounds like, and it is the single best signal you can send. So the preparation happens beforehand: we rehearse the questions, walk the clauses, and make sure everyone can explain their part of the system. Then you walk in and own it.

I am available in the background if something unexpected comes up, and there are occasional cases (a first certification with a very small team, or a complex multi-site scope) where attending makes sense. But it should be the exception. If you need a consultant in the room to pass, the system is not ready, and passing that way only defers the problem to next year’s surveillance audit, when they may not be there.

Mentoring packages

Starter Mentoring

A checkpoint for teams who mostly know what they are doing: a monthly advisory call, document and register reviews, and an implementation roadmap.

Implementation Mentoring

Hands-on support while you build and embed the system: regular working sessions, risk assessment and register guidance, document reviews and audit preparation.

Certification Mentoring

Final-stretch support to get you audit-ready: a pre-audit readiness review, Statement of Applicability review for ISO 27001, internal audit coaching, and support through Stage 1 and Stage 2.

What ISO mentoring costs, and what it saves

Certification cost splits into two very different things: building the management system, and the certification body audit. The audit fee is fixed by your certification body and driven by your size and scope. Mentoring cannot change it. What mentoring changes is the build.

Full consultancy means paying an expert to produce your documentation. Mentoring means your team produces it, with an expert checking it. Because you are buying judgement rather than document production, the implementation-support component of the cost comes down substantially, and the knowledge stays with the people who will have to run the system at every surveillance audit for the next three years.

For the full breakdown by standard, see our cost guides for ISO 9001, ISO 27001, ISO 42001, ISO 14001 and ISO 45001. The saving is real, but it is not free: mentoring trades your internal time for consultant fees. If your team has no capacity, full consultancy is the honest answer.

Five things in-house teams consistently get wrong

These are the failures I see over and over, and every one of them is cheap to fix early and expensive to fix at Stage 2:

Scope that is far too wide. Teams certify the whole business when one site or one service line would have satisfied the customer asking for the certificate. Every extra bit of scope costs audit days, forever.
Documenting the ideal, not the actual. The procedure describes a process nobody follows. The auditor interviews the person doing the work, the answers do not match the document, and that gap is the nonconformity.
A risk register full of generic risks. “Cyber attack”, “loss of key staff”. If your risks could belong to any business in the country, they are not your risks, and the treatment plan built on them will not hold up.
Leaving the internal audit and management review to the week before. This is the most common reason a Stage 2 goes sideways. Done as a tick-box, an auditor spots it in five minutes; done properly, they find your problems before the certification body does.
No evidence trail. The system has been “running” for a month and there are no records: no corrective actions, no training records, no meeting minutes. You cannot certify a system that has not actually operated.

Independent internal audits (ISO clause 9.2)

However you build your system (with us, in-house, or with AI tools) every certified management system still needs an objective internal audit under ISO clause 9.2. It is the one requirement AI and templates cannot satisfy, and where an independent, experienced auditor adds the most value: confirming your system works, and giving you best-practice recommendations before the certification body finds the gaps.

The standard requires internal auditors to be objective and impartial, and specifically that they do not audit their own work. That is precisely why mentoring and internal auditing fit together so well: your team builds the system, so an experienced auditor who coached the process can still audit the result objectively. Where our involvement in the build has been deep enough to compromise that impartiality, we will say so and put a different auditor on the 9.2 audit. It is a question worth asking any provider who offers to both build and audit your system.

Why mentoring works so well in the AI era

AI tools have made it easy to generate ISO documentation, but generating documents is the easy part. The hard part is making the system fit your business, implementing it, and proving it works. Mentoring fills exactly that gap: you keep the speed and cost savings of doing the work yourself, and add the expert judgement that turns a plausible-looking system into one that actually certifies. It is the practical middle ground between going it alone and paying for full consultancy. If you are going down this route, read where AI-built ISO systems go wrong first.

What you get from ISO mentoring

Direct access to an experienced ISO Lead Auditor who knows what certification bodies look for.
Review of your documentation, registers and risk assessments before they reach an auditor.
Practical answers to the questions that stall most in-house projects.
An independent internal audit under ISO clause 9.2, the one requirement you cannot do for yourself.
Confidence that your system will pass first time, and the capability to maintain it yourself afterwards.

Mentoring for any standard

We mentor organisations through ISO 9001, ISO 27001, ISO 42001, ISO 45001, ISO 14001 and integrated systems. Whether you are a startup preparing for your first certification or an established business adopting a new standard, mentoring scales to how much support you actually need. We work remotely across Australia, so you get expert guidance wherever you are.

When mentoring is not the right answer

I would rather tell you this up front than take an engagement that fails. Mentoring is the wrong choice if nobody internally has the time to own the build: mentoring multiplies a capable person’s effort, it does not replace them. It is also the wrong choice if you need a certificate in a matter of weeks for a tender, or if the standard is entirely new to everyone involved and there is no one to coach. In those cases, full system development is faster and, honestly, cheaper in the end. And if you have already built the system and simply want to know whether it will pass, you do not need mentoring at all. You need a readiness review.

Mentoring & DIY guides

Frequently asked questions

Can I build my own ISO system with AI and still get certified?

Yes, AI and templates can give you a strong start, but they often miss the mark on context, risk and implementation. Mentoring and an independent internal audit make sure what you have built genuinely meets the standard and will pass certification.

How is mentoring different from full consultancy?

With full consultancy we build the system for you; with mentoring you do the work and we guide and check it. Mentoring keeps you in control and costs less, while still giving you expert assurance that it is right.

How much internal time does mentoring require?

Realistically, one capable person spending a meaningful share of their week over three to six months, with input from the people who own each process. If nobody has that capacity, mentoring is the wrong model, and we will tell you so.

Can you mentor us and also do our internal audit?

Usually yes. Because your team builds the system and we guide it, an experienced auditor can still audit the result objectively: the standard’s requirement is that auditors do not audit their own work. Where our involvement has been deep enough to put that impartiality in question, we will say so and use a different auditor for the clause 9.2 audit.

Do we still need a certification body?

Always. Nobody can certify their own system, and no consultant or mentor can issue your certificate. You will need a JAS-ANZ accredited certification body to run the Stage 1 and Stage 2 audits.

We already have an experienced quality manager. Do we still need mentoring?

It depends what you are asking them to do. If they are maintaining a system that already exists, probably not. If you are asking them to build one (a new standard, a new site, or a rebuild of something inherited) then mentoring is usually the cheapest insurance you can buy. Maintaining a system and designing one are different skills, and the design decisions made in the first month determine what every audit looks like for the next three years.

Our safety manager knows safety, but not ISO 45001. Is that a problem?

No, that is the ideal starting point, and the same applies to an IT manager and ISO 27001, or a lab manager and ISO 17025. You already have the domain expertise; what is missing is the translation into clauses, documented information and audit evidence. That is exactly what mentoring provides, and it is a much better use of money than paying a consultant to learn your operation from scratch and write documents about it.

We have a system already, can you just get us through certification?

Yes. That is what Certification Mentoring is for. We start with a gap analysis or readiness review to see what you actually have, keep what works, fix what will not stand up, and support you through the internal audit, management review and both stages of the certification audit. We do not rebuild a working system for the sake of it.

Speak with an experienced ISO auditor

Building your own ISO system, taking on a standard you have not certified before, or getting an existing system over the line? Tell us what you already have and who is running it, and we will tell you honestly whether mentoring is the right fit. Email hello@streamline.business or call us: