Certification process · Qatar
Stage 1 vs Stage 2 Audits Explained: How ISO Certification Audits Work
If you are new to certification, the phrase Stage 1 Stage 2 audit ISO can sound like jargon. In practice it describes how a certification body assesses your management system before deciding whether to certify: a readiness-focused Stage 1, then a deeper Stage 2. This guide explains what each stage covers, how they differ, and what typically follows after the initial audits.
About QAC Qatar. We are an ISO certification body. We audit, assess, verify, certify, issue certificates, conduct surveillance, and renew certificates within our scopes. We do not build management systems for clients. If no system is in place yet, use an independent third party — QAC does not provide that work.
Why initial certification uses two stages
For most management-system standards, initial certification is not a single surprise visit. A two-stage approach helps the certification body understand your system before testing how it works in day-to-day operations. Stage 1 reduces the risk of arriving for a full assessment when key elements are missing or unclear. Stage 2 then gathers the evidence needed for a certification decision.
That structure also protects impartiality: auditors gather findings; the certification decision follows the certification body’s independent review rules. Buyers who later need to verify an ISO certificate in Qatar are relying on that audit-and-decide chain remaining credible.
What Stage 1 covers (high level)
Stage 1 is the readiness and planning stage. Exact activities depend on the standard and your organisation, but at a high level the audit team typically reviews:
- Whether documented information required by the standard is available and understandable
- The scope of certification proposed (activities, sites, exclusions if any)
- Key processes, risks, and how internal audits and management review are arranged
- Whether the organisation appears ready to proceed to Stage 2
- Practical planning for Stage 2 (sites, shifts, interviews, and logistics)
Stage 1 may be carried out at your premises, remotely, or as a combination, depending on the scheme rules and what needs to be seen. Findings from Stage 1 can include areas that should be addressed before Stage 2. Closing those points early usually makes Stage 2 clearer for everyone involved.
Readiness, documented information, scope clarity, and Stage 2 planning.
Evidence that the system works in practice across sampled processes and sites.
Findings may need closure before a certification decision is taken.
What Stage 2 covers
Stage 2 is the main conformity assessment. Auditors sample processes, interview people, review records, and observe how work is controlled against the standard and your defined scope. The aim is to determine whether the management system is effectively established and maintained — not merely described on paper.
Expect deeper checking of operational controls, competence, monitoring, nonconformity handling, improvement, and other clauses relevant to your standard (for example quality, environment, or occupational health and safety). Multi-site organisations may see sampling across locations according to the applicable rules.
Stage 1 vs Stage 2 audit ISO — at a glance
Use this comparison when briefing internal teams or explaining the process to stakeholders.
| Aspect | Stage 1 | Stage 2 |
|---|---|---|
| Purpose | Assess readiness and plan Stage 2 | Assess conformity for certification |
| Typical focus | Documented information, scope, system design, logistics | Implementation in practice, sampling of processes and records |
| Possible outcomes | Proceed to Stage 2; or address issues before Stage 2 | Recommend certification subject to rules; or require further action |
| Findings | May need closure before Stage 2 or before a decision | May need closure before the certification decision |
Important: audit findings are not the same as a final certificate. Even after Stage 2, findings may need to be closed under the certification body’s rules before the certification decision is completed.
What happens after Stage 2
After Stage 2, the certification body reviews the audit package under its independent decision process. If requirements are met, it certifies the organisation and issues a certificate for the agreed scope. Certificates typically follow a three-year cycle, with surveillance audits during the cycle and a recertification assessment before renewal.
That ongoing cycle is why buyers also check validity and surveillance status when they review supplier certificates — alongside questions such as whether the issuer is a QGOS registered certification body buyers should evaluate carefully. For a broader process overview, see our guide to ISO certification in Qatar.
What the organisation must already have in place
A certification audit assesses a management system that already exists. Your organisation must have established the system itself or with support from an independent third party before Stage 1 and Stage 2. QAC Qatar audits and certifies; QAC does not provide that work.
In practical terms, that usually means defined processes, roles, documented information where required, internal audits, management review, and enough operating history for auditors to sample real evidence. The certification body does not “write the system during the audit.”
Multi-site and multi-standard notes
If you operate several sites, or want more than one standard in the same programme (for example quality and occupational health and safety), audit planning becomes more detailed. Sampling rules, central functions, and combined or integrated systems all affect the audit plan.
Any quotation for Stage 1 and Stage 2 depends on organisation size, number of sites, complexity, and the standard(s) in scope. Ask for an audit quotation based on your actual structure rather than a one-size schedule.
No promised outcomes
A Stage 1 Stage 2 audit ISO programme assesses conformity. Certification is decided after the audit evidence is reviewed. No reputable certification body can promise a certificate in advance of that process.
Short FAQ
Can Stage 1 and Stage 2 be on the same day?
Sometimes planning allows them close together, but they remain distinct stages with different purposes. Scheme rules, readiness, and logistics decide what is appropriate — not convenience alone.
What if Stage 1 finds issues?
The certification body will explain what needs attention before Stage 2. Addressing those points early usually prevents wasted Stage 2 time. Stage 2 timing follows readiness, not a fixed calendar promise.
Who decides on the certificate?
The certification body takes an independent certification decision after reviewing the audit information. The audit team’s work feeds that decision; it is not a casual handshake at the closing meeting.
Is surveillance the same as Stage 2?
No. Surveillance audits during the three-year cycle check that the certified system is maintained. They are related to ongoing certification, not a repeat of the full initial Stage 1 / Stage 2 sequence.
Does QAC write procedures?
No. QAC is a certification body. We audit, assess, verify, certify, issue, surveil, and renew. Writing your procedures or building your system is not our work.
Request an audit quotation
Ready for Stage 1 and Stage 2? Tell us your standard(s), sites, and scope so we can plan an impartial audit programme — then request an audit quotation.
