Yes. Every ISO management system standard contains a Clause 9.2 ("Internal Audit") that obliges the organisation to conduct internal audits at planned intervals, including before initial certification. Your certification body will request the internal audit report at Stage 1 and treat its absence — or its inadequacy — as a major nonconformity.
They can, provided they are competent (per ISO 19011) and impartial — meaning they do not audit their own work. In practice, in organisations under ~250 employees, the people who understand the management system are also the people who built it, which creates a conflict of interest. ISO accepts the use of external auditors as a standard solution.
A gap analysis is a lighter, advisory exercise that identifies what is missing. A Clause 9.2 internal audit is a formal evidence-based audit against the standard, with classified findings, that goes into your certification body's records. We offer both — and frequently bundle them for first-time certifiers.
No. AuditOne provides internal audit services. Certification audits are conducted by accredited certification bodies, which are legally separate entities. We work alongside certification bodies — including partners like Proks Certification — but the firewall between internal and external audit is strict and we maintain it deliberately.
Ideally 6 to 10 weeks. This gives you 4 to 8 weeks to close any nonconformities raised before the certification body arrives. We can move faster when timelines are tight, but the value of the audit drops sharply if there is no time to act on it.
Yes, for most standards. For ISO 27001, ISO 42001, ISO 9001 (service organisations) and similar, remote audits are routine and fully accepted under IAF MD 4. For ISO 14001, 45001, 13485 and other standards with significant physical/operational scope, on-site presence is usually required for at least part of the audit.
English and German are our default working languages. Through our auditor network we also cover French, Spanish, Italian, Dutch, Polish, and several others — confirmed during scoping.
You do not "fail" an internal audit — that is not the right frame. You receive findings. We help you classify and close them before the certification body sees them. That is the entire point of doing this work before Stage 2.