{"id":10011908,"date":"2026-08-14T11:20:25","date_gmt":"2026-08-14T10:20:25","guid":{"rendered":"https:\/\/amtivo.com\/uk\/?post_type=resources-filter&#038;p=10011908"},"modified":"2026-08-14T11:22:46","modified_gmt":"2026-08-14T10:22:46","slug":"large-organisations-iso-certification-programmes","status":"publish","type":"resources-filter","link":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/","title":{"rendered":"ISO Certification at Enterprise Scale"},"content":{"rendered":"<p>For large, complex organisations, certification is rarely a standalone initiative. It is typically positioned as part of broader governance, risk, and compliance arrangements, aligned with corporate strategy, operational resilience, and market positioning. Rather than being treated as a discrete project with a fixed endpoint, certification programmes at this level tend to be ongoing, structured efforts that integrate with existing management systems and organisational controls.<\/p>\r\n<p>The decision to pursue certification is usually driven by a combination of factors:<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Regulatory pressure may require demonstrable compliance with recognised standards, particularly in highly regulated sectors.<\/li>\r\n\t<li>Customer and supply chain expectations often need certification as a condition of doing business, especially in international or enterprise procurement environments.<\/li>\r\n\t<li>Organisations may seek certification to strengthen internal risk management practices, improve consistency across operations, or support entry into new markets where certification acts as a recognised benchmark of credibility.<\/li>\r\n<\/ul>\r\n<p><em>At enterprise scale, complexity is not an exception; it is the baseline.<\/em><\/p>\r\n<p>Multiple legal entities, geographically dispersed sites, varied operational models, and differing levels of process maturity all contribute to a landscape where uniform implementation is not straightforward. What\u2019s more, when organisations pursue multiple standards or attempt to integrate them within a single management system, complexity can grow.<\/p>\r\n<p>This does not make certification unmanageable.<\/p>\r\n<p>Instead, large organisations approach successful certification through structured, well-governed programmes that break down complexity into defined components, such as scope, geography, and standard. With appropriate levels of oversight, coordination, and phased execution, certification can become a more controlled and scalable process.<\/p>\r\n<p>The emphasis is not on eliminating complexity, but on managing it within a structure that aligns with organisational priorities and operational realities.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\"><span data-contrast=\"none\">Where Enterprise Organisations May Begin<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h2>\r\n<p>For enterprise organisations, the starting point for certification may not be operational, but rather strategic. Before any consideration is given to standards, sites, or audits, organisations will often establish why certification is being pursued and how it aligns with broader business priorities. This early-stage positioning may help to shape the structure, pace, and scope of the programme.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Strategic drivers and internal sponsorship\u00a0<\/h3>\r\n<p>Certification initiatives at this scale are often sponsored at executive level, involving senior stakeholders across risk, compliance, operations, and commercial functions. Board-level visibility is common, particularly where certification is linked to regulatory exposure, customer requirements, or market expansion.\u00a0<\/p>\r\n<p>It\u2019s also common to align with corporate strategy at this stage. Organisations may assess how certification supports existing risk management frameworks, regulatory obligations, and growth objectives. For example, certification may be positioned as a mechanism to: \u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Standardise controls across international operations\u00a0<\/li>\r\n\t<li>Strengthen assurance for key clients\u00a0<\/li>\r\n\t<li>Support entry into regulated or competitive markets\u00a0<\/li>\r\n<\/ul>\r\n<p>Ownership is typically cross-functional. While a central function (such as compliance, quality, or information security) may lead the programme, delivery often depends on coordination across multiple business units. As such, budget responsibility may span departments, reflecting the shared impact of certification on processes, systems, and operational practices.\u00a0<\/p>\r\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Montserrat:wght@400;500&display=swap\" rel=\"stylesheet\">\r\n<link rel=\"stylesheet\" href=\"https:\/\/cdn.jsdelivr.net\/npm\/@tabler\/icons-webfont@latest\/tabler-icons.min.css\">\r\n<style>\r\n  .stage-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:14px;font-family:'Montserrat',sans-serif}\r\n  .stage-card{border-radius:12px;padding:24px 22px 22px;min-height:260px;display:flex;flex-direction:column}\r\n  .stage-num{font-size:13px;font-weight:500;letter-spacing:0.08em;margin:0 0 16px;color:rgba(255,255,255,0.6);font-family:'Montserrat',sans-serif}\r\n  .stage-icon{font-size:26px;margin-bottom:14px;color:rgba(255,255,255,0.85)}\r\n  .stage-title{font-size:19px;font-weight:500;margin:0 0 12px;color:#ffffff;font-family:'Montserrat',sans-serif;line-height:1.35}\r\n  .stage-body{font-size:16px;line-height:1.6;color:rgba(255,255,255,0.82);margin:0 0 24px;font-family:'Montserrat',sans-serif}\r\n  .stage-extra{font-size:16px;line-height:1.6;color:rgba(255,255,255,0.82);margin:0 0 24px;display:none;font-family:'Montserrat',sans-serif}\r\n  .stage-card.open .stage-body{margin-bottom:14px}\r\n  .stage-card.open .stage-extra{display:block}\r\n  .stage-card.open .obtn i{transform:rotate(180deg)}\r\n  .obtn{display:inline-flex;align-items:center;justify-content:center;gap:6px;white-space:nowrap;min-height:40px;box-sizing:border-box;font-size:14px;font-weight:500;font-family:'Montserrat',sans-serif;color:#ffffff;align-self:flex-start;margin-top:auto;padding:8px 16px;cursor:pointer;background-color:#f4600c;border:none;border-radius:24px;text-align:left;outline:none;line-height:1.3}\r\n  .obtn:hover{background-color:#d95209}\r\n  .obtn i{transition:transform 0.2s;font-size:16px;color:#ffffff;flex-shrink:0}\r\n<\/style>\r\n\r\n<div class=\"stage-grid\" id=\"ownership-grid\"><\/div>\r\n\r\n<script>\r\n(function(){\r\n  var cards=[\r\n    {num:\"01\",bg:\"#16205b\",icon:\"ti-award\",title:\"Programme lead\",body:\"While a central function - such as compliance, quality, or information security - may lead the programme, delivery typically depends on coordination across multiple business units.\",linkText:\"Budget responsibility\",extra:\"Budget responsibility may span departments, reflecting the shared impact of certification on processes, systems, and operational practices.\"},\r\n    {num:\"02\",bg:\"#0372ff\",icon:\"ti-device-laptop\",title:\"IT & operations\",body:\"IT and operational teams commonly contribute to the management system through processes, controls, and supporting infrastructure.\",linkText:\"How this may vary\",extra:\"The degree of involvement may vary depending on whether the organisation operates a centralised or decentralised model.\"},\r\n    {num:\"03\",bg:\"#16205b\",icon:\"ti-users\",title:\"HR & legal\",body:\"HR and legal functions commonly contribute to areas such as personnel policies, access management, regulatory obligations, and contractual requirements.\",linkText:\"Overlapping areas\",extra:\"These functions may each contribute to different parts of the management system, and their involvement may be relevant across multiple standards.\"},\r\n    {num:\"04\",bg:\"#0372ff\",icon:\"ti-briefcase\",title:\"Commercial\",body:\"Commercial teams may be involved where certification is linked to customer requirements, tender eligibility, or market positioning.\",linkText:\"Commercial context\",extra:\"The extent of commercial involvement typically reflects the organisation's reasons for pursuing certification and its broader business priorities.\"}\r\n  ];\r\n  var grid=document.getElementById('ownership-grid');\r\n  cards.forEach(function(c){\r\n    var card=document.createElement('div');\r\n    card.className='stage-card';\r\n    card.style.backgroundColor=c.bg;\r\n    card.innerHTML='<p class=\"stage-num\">'+c.num+'<\/p><i class=\"ti '+c.icon+' stage-icon\" aria-hidden=\"true\"><\/i><p class=\"stage-title\">'+c.title+'<\/p><p class=\"stage-body\">'+c.body+'<\/p><p class=\"stage-extra\">'+c.extra+'<\/p><button class=\"obtn\" aria-expanded=\"false\"><span class=\"link-label\">'+c.linkText+'<\/span><i class=\"ti ti-chevron-down\" aria-hidden=\"true\"><\/i><\/button>';\r\n    var btn=card.querySelector('.obtn');\r\n    var label=card.querySelector('.link-label');\r\n    btn.addEventListener('click',function(e){\r\n      e.stopPropagation();\r\n      var open=card.classList.toggle('open');\r\n      btn.setAttribute('aria-expanded',String(open));\r\n      label.textContent=open?'Show less':c.linkText;\r\n    });\r\n    grid.appendChild(card);\r\n  });\r\n})();\r\n<\/script>\r\n<p>&nbsp;<\/p>\r\n<h3 aria-level=\"3\"><span data-contrast=\"none\">Defining objectives<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:160,&quot;335559739&quot;:80}\">\u00a0<\/span><\/h3>\r\n<p>Once sponsorship and strategic alignment are established, organisations typically work to define objectives for the certification programme. These objectives may influence both the design and sequencing of the programme and could include the following.\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>In some cases, the primary driver is risk reduction, with a focus on improving control environments, reducing exposure, and enhancing internal consistency.\u00a0\u00a0<\/li>\r\n\t<li>In others, certification is commercially driven, supporting customer acquisition, tender eligibility, or contractual requirements.\u00a0\u00a0<\/li>\r\n\t<li>Certification may also support an organisation&#8217;s ability to evidence conformity with recognised management system requirements, which may assist with broader legal, regulatory, or industry-specific obligations where relevant.\u00a0\u00a0<\/li>\r\n<\/ul>\r\n<p>Many enterprise programmes involve a combination of these factors.\u00a0<\/p>\r\n<p>Organisations tend to also consider whether they are pursuing certification against a single standard or working towards an integrated management system incorporating multiple standards, an approach which can be typical of more mature organisations. \u00a0<\/p>\r\n<p>There is also a distinction between short-term and long-term planning. Some organisations may prioritise certification for specific sites or standards to meet immediate business needs, while others take a phased, multi-year view. To provide clarity for programme planning at an early stage, organisations often document: \u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Sequencing\u00a0<\/li>\r\n\t<li>Resource considerations\u00a0<\/li>\r\n\t<li>Expected milestones\u00a0<\/li>\r\n<\/ul>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">Scoping Decisions: Defining the Certification Boundary\u00a0<\/h2>\r\n<p>One of the most significant early steps in any enterprise certification programme is defining the scope. At this level, scope is not simply a technical definition; it is a decision that can determine the scale, complexity, and feasibility of certification. Clear scoping may provide the foundation for audit planning, governance, and long-term programme management.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Organisational boundaries\u00a0<\/h3>\r\n<p>Large organisations rarely operate as a single, uniform entity. Instead, they tend to consist of multiple legal entities, subsidiaries, and operational divisions, often spanning jurisdictions and regulatory environments. An early consideration is typically whether certification will align with legal structures, operational structures, or a combination of both.\u00a0<\/p>\r\n<p>An example of this is below:<\/p>\r\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Montserrat:wght@400;500&display=swap\" rel=\"stylesheet\">\r\n<link rel=\"stylesheet\" href=\"https:\/\/cdn.jsdelivr.net\/npm\/@tabler\/icons-webfont@latest\/tabler-icons.min.css\">\r\n<style>\r\n.amtivo-wrap *{font-family:'Montserrat',sans-serif;box-sizing:border-box}\r\n.amtivo-wrap{padding:5px 0 10px}\r\n.toggle-row{display:flex;gap:8px;margin-bottom:24px}\r\n.tgl{flex:1;padding:11px 14px;border-radius:24px;border:none;font-size:14px;font-weight:500;font-family:'Montserrat',sans-serif;line-height:1.3;cursor:pointer;transition:background 0.2s,color 0.2s}\r\n.tgl.active{background:#f4600c;color:#fff}\r\n.tgl.inactive{background:#e8eaf0;color:#16205b}\r\n.tgl:hover.inactive{background:#d0d4e0}\r\n.aview{display:none}\r\n.aview.active{display:block}\r\n.parent-card{background:#16205b;border-radius:12px;padding:18px 20px;display:flex;align-items:center;gap:14px;margin-bottom:8px}\r\n.parent-label{font-size:17px;font-weight:500;color:#fff;margin:0;line-height:1.35}\r\n.parent-sub{font-size:14px;color:rgba(255,255,255,0.6);margin:3px 0 0;line-height:1.4}\r\n.parent-icon{width:44px;height:44px;border-radius:8px;background:rgba(255,255,255,0.12);display:flex;align-items:center;justify-content:center;font-size:22px;color:#fff;flex-shrink:0}\r\n.children{display:grid;grid-template-columns:repeat(auto-fit,minmax(170px,1fr));gap:10px;margin-bottom:8px;padding-left:20px}\r\n.child-card{border-radius:10px;padding:16px 18px;display:flex;flex-direction:column;gap:5px}\r\n.child-icon{font-size:20px;color:rgba(255,255,255,0.85)}\r\n.child-label{font-size:16px;font-weight:500;margin:0;line-height:1.35}\r\n.child-sub{font-size:13px;opacity:0.75;margin:0;line-height:1.45}\r\n.connector{width:1px;height:14px;background:#d0d4e0;margin:0 0 0 34px}\r\n.anote{font-size:15px;color:#5f6470;line-height:1.6;margin-top:20px;padding:14px 18px;border-left:3px solid #f4600c;background:#fff7f4;border-radius:0 8px 8px 0}\r\n@media (max-width:600px){\r\n  .toggle-row{flex-direction:column}\r\n  .children{padding-left:0}\r\n  .connector{margin-left:20px}\r\n}\r\n<\/style>\r\n\r\n<div class=\"amtivo-wrap\">\r\n  <div class=\"toggle-row\">\r\n    <button class=\"tgl active\" id=\"abtn-legal\" onclick=\"amtivoShow('legal')\">Legal structure<\/button>\r\n    <button class=\"tgl inactive\" id=\"abtn-ops\" onclick=\"amtivoShow('ops')\">Operational structure<\/button>\r\n    <button class=\"tgl inactive\" id=\"abtn-both\" onclick=\"amtivoShow('both')\">Combined<\/button>\r\n  <\/div>\r\n\r\n  <div class=\"aview active\" id=\"aview-legal\">\r\n    <div class=\"parent-card\">\r\n      <div class=\"parent-icon\"><i class=\"ti ti-building\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"parent-label\">Parent organisation<\/p><p class=\"parent-sub\">Certification scope boundary<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"children\">\r\n      <div class=\"child-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-file-certificate child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Legal entity A<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">UK subsidiary<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-file-certificate child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Legal entity B<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">EU subsidiary<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-file-certificate child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Legal entity C<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">US subsidiary<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"anote\">Scope may follow legal entity boundaries where each subsidiary operates independently under distinct regulatory environments.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"aview\" id=\"aview-ops\">\r\n    <div class=\"parent-card\">\r\n      <div class=\"parent-icon\"><i class=\"ti ti-sitemap\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"parent-label\">Parent organisation<\/p><p class=\"parent-sub\">Certification scope boundary<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"children\">\r\n      <div class=\"child-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-server child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">IT division<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">Shared systems<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-building-warehouse child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Operations<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">Delivery functions<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-users child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">People &amp; HR<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">Centralised function<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"anote\">Where functions are shared or centralised across entities, scope may follow operational divisions rather than legal structures.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"aview\" id=\"aview-both\">\r\n    <div class=\"parent-card\">\r\n      <div class=\"parent-icon\"><i class=\"ti ti-layout-grid\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"parent-label\">Parent organisation<\/p><p class=\"parent-sub\">Certification scope boundary<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"children\">\r\n      <div class=\"child-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-file-certificate child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Legal entity A<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">UK subsidiary<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-file-certificate child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Legal entity B<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">EU subsidiary<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-server child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Shared IT<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">Centralised function<\/p>\r\n      <\/div>\r\n      <div class=\"child-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-building-warehouse child-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"child-label\" style=\"color:#fff\">Operations<\/p>\r\n        <p class=\"child-sub\" style=\"color:rgba(255,255,255,0.7)\">Shared delivery<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"anote\">A combined approach may be considered where some functions are legally distinct while others are shared operationally across the organisation.<\/p>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\nfunction amtivoShow(id){\r\n  ['legal','ops','both'].forEach(function(v){\r\n    document.getElementById('aview-'+v).classList.toggle('active',v===id);\r\n    document.getElementById('abtn-'+v).classList.toggle('active',v===id);\r\n    document.getElementById('abtn-'+v).classList.toggle('inactive',v!==id);\r\n  });\r\n}\r\n<\/script>\r\n<p>&nbsp;<\/p>\r\n<p>Defining these boundaries involves careful consideration of how the organisation functions in practice. In some cases, legal entities provide a clear and logical structure for certification. In others, operational realities \u2013 such as shared systems, centralised processes, or integrated service delivery \u2013 may make a purely legal approach less straightforward.\u00a0<\/p>\r\n<p>Equally important is the rationale for inclusion or exclusion. Not all entities, divisions, or activities may be brought into scope at the outset. Decisions may be based on risk exposure, commercial relevance, readiness, or strategic priority. Where these decisions are deliberate and documented, they are better placed to withstand scrutiny during the certification process.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Sites and geographies\u00a0<\/h3>\r\n<p>The physical and geographical footprint of an organisation introduces more potential complexity. Certification may apply to a single site, a defined group of locations, or a broader network of operations.\u00a0<\/p>\r\n<p>For multi-site organisations, considerations typically extend beyond simply listing locations. The following factors can all influence audit models, including the use of sampling approaches where a representative selection of sites is audited:\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Understanding how sites operate in relation to one another \u00a0<\/li>\r\n\t<li>Whether processes are centralised or locally managed\u00a0<\/li>\r\n\t<li>Whether a consistent management system can be demonstrated across all locations \u00a0<\/li>\r\n<\/ul>\r\n<p>Geographical spread may also introduce regional variations. Differing regulatory requirements, cultural approaches to process adherence, and varying levels of operational maturity can all affect how certification is implemented and maintained. Recognising these variations at an early stage may be relevant to both scope definition and audit coordination.\u00a0<\/p>\r\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Montserrat:wght@400;500&display=swap\" rel=\"stylesheet\">\r\n<link rel=\"stylesheet\" href=\"https:\/\/cdn.jsdelivr.net\/npm\/@tabler\/icons-webfont@latest\/tabler-icons.min.css\">\r\n<style>\r\n.gw *{font-family:'Montserrat',sans-serif;box-sizing:border-box}\r\n.gw{padding:5px 0 10px}\r\n.gw .toggle-row{display:flex;gap:8px;margin-bottom:24px;flex-wrap:wrap}\r\n.gw .tgl{flex:1;min-width:140px;padding:11px 14px;border-radius:24px;border:none;font-size:14px;font-weight:500;font-family:'Montserrat',sans-serif;line-height:1.3;cursor:pointer;transition:background 0.2s,color 0.2s}\r\n.gw .tgl.active{background:#f4600c;color:#fff}\r\n.gw .tgl.inactive{background:#e8eaf0;color:#16205b}\r\n.gw .tgl:hover.inactive{background:#d0d4e0}\r\n.gview{display:none}\r\n.gview.active{display:block}\r\n.gw .scope-header{background:#16205b;border-radius:12px;padding:18px 20px;display:flex;align-items:center;gap:14px;margin-bottom:8px}\r\n.gw .scope-icon{width:44px;height:44px;border-radius:8px;background:rgba(255,255,255,0.12);display:flex;align-items:center;justify-content:center;font-size:22px;color:#fff;flex-shrink:0}\r\n.gw .scope-title{font-size:17px;font-weight:500;color:#fff;margin:0;line-height:1.35}\r\n.gw .scope-sub{font-size:14px;color:rgba(255,255,255,0.6);margin:3px 0 0;line-height:1.4}\r\n.gw .connector{width:1px;height:14px;background:#d0d4e0;margin:0 0 0 34px}\r\n.gw .sites-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(175px,1fr));gap:10px;margin-bottom:8px;padding-left:20px}\r\n.gw .site-card{border-radius:10px;padding:16px 18px;display:flex;flex-direction:column;gap:5px;align-items:flex-start}\r\n.gw .site-icon{font-size:20px}\r\n.gw .site-label{font-size:16px;font-weight:500;margin:0;line-height:1.35}\r\n.gw .site-sub{font-size:13px;opacity:0.75;margin:0;line-height:1.45}\r\n.gw .factor-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:10px;margin-top:10px}\r\n.gw .factor-card{border-radius:10px;padding:16px 18px;background:#f5f6fa;border-left:3px solid #0372ff}\r\n.gw .factor-title{font-size:15px;font-weight:500;color:#16205b;margin:0 0 5px;line-height:1.35}\r\n.gw .factor-icon{font-size:16px;vertical-align:-2px;margin-right:6px}\r\n.gw .factor-body{font-size:14px;color:#5f6470;line-height:1.55;margin:0}\r\n.gw .gnote{font-size:15px;color:#5f6470;line-height:1.6;margin-top:20px;padding:14px 18px;border-left:3px solid #f4600c;background:#fff7f4;border-radius:0 8px 8px 0}\r\n.gw .tag{display:inline-block;font-size:12px;font-weight:500;padding:3px 10px;border-radius:20px;margin-top:6px;line-height:1.4}\r\n@media (max-width:600px){\r\n  .gw .toggle-row{flex-direction:column}\r\n  .gw .sites-grid{padding-left:0}\r\n  .gw .connector{margin-left:20px}\r\n}\r\n<\/style>\r\n\r\n<div class=\"gw\">\r\n  <div class=\"toggle-row\">\r\n    <button class=\"tgl active\" id=\"gbtn-single\" onclick=\"gShow('single')\">Single site<\/button>\r\n    <button class=\"tgl inactive\" id=\"gbtn-multi\" onclick=\"gShow('multi')\">Multi-site<\/button>\r\n    <button class=\"tgl inactive\" id=\"gbtn-global\" onclick=\"gShow('global')\">Global network<\/button>\r\n  <\/div>\r\n\r\n  <div class=\"gview active\" id=\"gview-single\">\r\n    <div class=\"scope-header\">\r\n      <div class=\"scope-icon\"><i class=\"ti ti-map-pin\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"scope-title\">Single site scope<\/p><p class=\"scope-sub\">One location within certification boundary<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"sites-grid\">\r\n      <div class=\"site-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Head office<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Primary location<\/p>\r\n        <span class=\"tag\" style=\"background:rgba(255,255,255,0.2);color:#fff\">In scope<\/span>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#e8eaf0\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:#b0b4c0\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#16205b\">Site B<\/p>\r\n        <p class=\"site-sub\" style=\"color:#888\">Regional office<\/p>\r\n        <span class=\"tag\" style=\"background:#d0d4e0;color:#5f6470\">Out of scope<\/span>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#e8eaf0\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:#b0b4c0\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#16205b\">Site C<\/p>\r\n        <p class=\"site-sub\" style=\"color:#888\">Regional office<\/p>\r\n        <span class=\"tag\" style=\"background:#d0d4e0;color:#5f6470\">Out of scope<\/span>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"gnote\">Certification may initially apply to a single location, with scope expanded in later phases as the organisation's programme matures.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"gview\" id=\"gview-multi\">\r\n    <div class=\"scope-header\">\r\n      <div class=\"scope-icon\"><i class=\"ti ti-map-pins\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"scope-title\">Multi-site scope<\/p><p class=\"scope-sub\">Defined group of locations<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"sites-grid\">\r\n      <div class=\"site-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Site A<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Centralised processes<\/p>\r\n        <span class=\"tag\" style=\"background:rgba(255,255,255,0.2);color:#fff\">Central<\/span>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Site B<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Local implementation<\/p>\r\n        <span class=\"tag\" style=\"background:rgba(255,255,255,0.2);color:#fff\">Local<\/span>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-building site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Site C<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Local implementation<\/p>\r\n        <span class=\"tag\" style=\"background:rgba(255,255,255,0.2);color:#fff\">Local<\/span>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-git-branch factor-icon\" aria-hidden=\"true\"><\/i>Process model<\/p>\r\n        <p class=\"factor-body\">Whether processes are centralised or locally managed may influence how audit activity is structured.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-checklist factor-icon\" aria-hidden=\"true\"><\/i>Sampling<\/p>\r\n        <p class=\"factor-body\">Where permitted, a representative selection of sites may be audited rather than every location.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"gnote\">For multi-site organisations, how sites relate to one another - and whether a consistent management system can be demonstrated - typically influences the audit model.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"gview\" id=\"gview-global\">\r\n    <div class=\"scope-header\">\r\n      <div class=\"scope-icon\"><i class=\"ti ti-world\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"scope-title\">Global network scope<\/p><p class=\"scope-sub\">International operations across regions<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"connector\"><\/div>\r\n    <div class=\"sites-grid\">\r\n      <div class=\"site-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-map-pin site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">UK &amp; Europe<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">GDPR regulatory environment<\/p>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-map-pin site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Americas<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Regional compliance requirements<\/p>\r\n      <\/div>\r\n      <div class=\"site-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-map-pin site-icon\" style=\"color:rgba(255,255,255,0.85)\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"site-label\" style=\"color:#fff\">Asia Pacific<\/p>\r\n        <p class=\"site-sub\" style=\"color:rgba(255,255,255,0.7)\">Varying local requirements<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-scale factor-icon\" aria-hidden=\"true\"><\/i>Regulatory variation<\/p>\r\n        <p class=\"factor-body\">Legal obligations may differ by jurisdiction, affecting how the management system is implemented locally.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-chart-bar factor-icon\" aria-hidden=\"true\"><\/i>Maturity variation<\/p>\r\n        <p class=\"factor-body\">Operational maturity may differ across regions, which may be relevant to scope definition and audit planning.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-clock factor-icon\" aria-hidden=\"true\"><\/i>Coordination<\/p>\r\n        <p class=\"factor-body\">Time zones and regional structures may introduce additional complexity in audit scheduling and programme management.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"gnote\">Geographical spread may introduce regional variations in regulatory requirements, cultural approaches, and operational maturity - all of which may be relevant to scope definition and audit coordination.<\/p>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\nfunction gShow(id){\r\n  ['single','multi','global'].forEach(function(v){\r\n    document.getElementById('gview-'+v).classList.toggle('active',v===id);\r\n    document.getElementById('gbtn-'+v).classList.toggle('active',v===id);\r\n    document.getElementById('gbtn-'+v).classList.toggle('inactive',v!==id);\r\n  });\r\n}\r\n<\/script>\r\n<p>&nbsp;<\/p>\r\n<h3 aria-level=\"3\">Business units and functions\u00a0<\/h3>\r\n<p>Beyond legal entities and locations, organisations consider which business units and functions fall within scope. This is particularly relevant in complex structures where operations are decentralised, and different divisions may operate with varying degrees of autonomy.\u00a0<\/p>\r\n<p>In centralised models, core functions such as IT, HR, procurement, or compliance may serve multiple parts of the organisation and may need to be included within scope. In decentralised environments, individual business units may have distinct processes, systems, and risk profiles.\u00a0<\/p>\r\n<p>Additional considerations arise from shared services, outsourced activities, and joint ventures. Organisations consider how these are treated within the scope, particularly where control is partial or indirect, and whether these functions materially affect the management system and its ability to meet certification requirements.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Scope definition as a governance decision\u00a0<\/h3>\r\n<p>To define scope, organisations typically seek to balance multiple factors, including audit feasibility, risk exposure, operational complexity, and commercial priorities. They will have to decide between:\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>A broader scope, which may offer greater assurance and market value but could increase the complexity and coordination involved.\u00a0\u00a0<\/li>\r\n\t<li>A narrower scope, which may be more manageable initially but could limit commercial or regulatory benefits.\u00a0<\/li>\r\n<\/ul>\r\n<p>These considerations are typically evaluated at a senior level, with input from risk, compliance, and operational stakeholders.\u00a0<\/p>\r\n<p>Achieving clarity and consistency in scope statements is widely recognised as important. Where scope is ambiguous, there is a greater likelihood of misalignment, audit challenges, and inefficiencies later in the certification process \u2013 all aspects enterprises organisations will be looking to avoid.\u00a0<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">Understanding Operational Complexity\u00a0<\/h2>\r\n<p>Operational complexity is a common characteristic of enterprise environments, reflecting the scale, diversity, and distribution of activities across large organisations. To be effective, certification programmes tend to acknowledge and structure this complexity in a way that allows for consistent oversight and auditability.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Multi-site structures\u00a0<\/h3>\r\n<p>In multi-site organisations, the relationship between central functions and individual locations is a key consideration. Central teams may define policies, systems, and controls, while sites retain responsibility for local implementation. The degree of autonomy at site level can vary significantly, affecting how consistently processes are applied across the organisation.\u00a0<\/p>\r\n<p>Certification in these environments may involve sampling approaches, where allowed by the applicable certification scheme and where sites undertake similar activities. In such cases, a representative selection of sites is audited to evaluate the effectiveness of the whole management system. This typically requires a demonstrable level of standardisation, as well as oversight from central functions.\u00a0<\/p>\r\n<h3 aria-level=\"3\">International operations\u00a0<\/h3>\r\n<p>For organisations operating across multiple countries, certification may need to account for differing regulatory requirements, cultural norms, and operational practices. Legal obligations may vary by jurisdiction, so adjustments to processes may be needed while still maintaining alignment with the overarching management system.\u00a0<\/p>\r\n<p>Coordination across time zones and regions can introduce additional complexity, particularly in audit planning and programme management. Strong central governance combined with effective regional coordination is commonly observed in international certification programmes.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Integrated Management Systems (IMS)\u00a0<\/h3>\r\n<p>Many enterprise organisations adopt <a href=\"https:\/\/amtivo.com\/uk\/resources\/insights\/complete-guide-integrated-management-systems\/\">integrated management systems<\/a>, combining multiple standards such as quality (<a href=\"https:\/\/amtivo.com\/uk\/standards\/iso-9001\/\">ISO 9001<\/a>), information security (<a href=\"https:\/\/amtivo.com\/uk\/standards\/iso-27001\/\">ISO 27001<\/a>), and environmental management (<a href=\"https:\/\/amtivo.com\/uk\/standards\/iso-14001\/\">ISO 14001<\/a>) into a unified structure. This approach may help to reduce duplication and align processes across the organisation.\u00a0<\/p>\r\n<p>However, integration at scale can have its own challenges. Different standards may have overlapping but distinct requirements; aligning them across diverse operations can require careful coordination. To support multiple standards simultaneously, enterprise organisations need strong governance structures, documentation, and internal controls.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Variability in maturity \u00a0<\/h3>\r\n<p>Large organisations rarely operate with uniform levels of maturity. Differences in processes, documentation, and control effectiveness are common across business units and locations. Some areas may have well-established systems in place, while others are at an earlier stage of development.\u00a0<\/p>\r\n<p>Managing this variability is a common challenge in enterprise certification. Many organisations seek to achieve a consistent level of compliance and assurance without imposing excessive centralisation that could affect effective local practices. This often involves defining core requirements centrally while allowing controlled flexibility in how they are implemented locally.\u00a0<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">Phased Certification Approaches\u00a0<\/h2>\r\n<p>Enterprise organisations rarely pursue certification across the full scope in a single step. Phased approaches are commonly adopted to manage complexity, control risk, and maintain alignment with operational realities.\u00a0<\/p>\r\n<h3>Why phasing is common\u00a0<\/h3>\r\n<p>Phasing allows organisations to balance ambition with practicality. Attempting to certify all sites, functions, or standards simultaneously can introduce significant risk, both in terms of audit outcomes and operational disruption. Instead, many organisations will approach certification in phases because:\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>It can allow for prioritisation. Sequencing may help organisations manage internal resources and address areas not yet conforming before later phases are added.\u00a0<\/li>\r\n\t<li>Costs can be managed. Certification at scale involves internal resource commitments as well as external audit activity; phasing may allow organisations to distribute these costs over time rather than concentrating them into a single period.\u00a0<\/li>\r\n\t<li>Phasing can counter varying organisational readiness across large enterprises. Some areas may already have mature processes in place, while others require further development. A phased approach allows certification to begin where readiness is highest, while giving other areas time to align.\u00a0<\/li>\r\n<\/ul>\r\n<h3>Typical phasing models\u00a0<\/h3>\r\n<p>There is no single model for phasing. Organisations adopt approaches that reflect their structure and priorities.\u00a0<\/p>\r\n<h4 aria-level=\"4\">Phasing by site\u00a0<\/h4>\r\n<p>A site-by-site rollout is common in multi-location organisations, where individual sites are brought into scope progressively. This approach may allow lessons from earlier phases to inform subsequent ones.\u00a0<\/p>\r\n<h4 aria-level=\"4\">Phasing by region\u00a0<\/h4>\r\n<p>Region-by-region implementation is observed in international organisations. This can help to align with regional governance structures, regulatory environments, and operational practices, while maintaining overall programme consistency.\u00a0<\/p>\r\n<h4 aria-level=\"4\">Phasing by standard\u00a0<\/h4>\r\n<p>Some organisations phase certification by standard, particularly when working towards an integrated management system. A pilot site approach may also be used by some organisations, where a single site or small group of sites is brought into scope first, before wider rollout is considered.\u00a0<\/p>\r\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Montserrat:wght@400;500&display=swap\" rel=\"stylesheet\">\r\n<link rel=\"stylesheet\" href=\"https:\/\/cdn.jsdelivr.net\/npm\/@tabler\/icons-webfont@latest\/tabler-icons.min.css\">\r\n<style>\r\n.pw *{font-family:'Montserrat',sans-serif;box-sizing:border-box}\r\n.pw{padding:5px 0 10px}\r\n.pw .toggle-row{display:flex;gap:8px;margin-bottom:24px;flex-wrap:wrap}\r\n.pw .tgl{flex:1;min-width:150px;padding:11px 14px;border-radius:24px;border:none;font-size:14px;font-weight:500;font-family:'Montserrat',sans-serif;line-height:1.3;cursor:pointer;transition:background 0.2s,color 0.2s}\r\n.pw .tgl.active{background:#f4600c;color:#fff}\r\n.pw .tgl.inactive{background:#e8eaf0;color:#16205b}\r\n.pw .tgl:hover.inactive{background:#d0d4e0}\r\n.pview{display:none}\r\n.pview.active{display:block}\r\n.pw .phase-header{background:#16205b;border-radius:12px;padding:18px 20px;display:flex;align-items:center;gap:14px;margin-bottom:18px}\r\n.pw .phase-icon{width:44px;height:44px;border-radius:8px;background:rgba(255,255,255,0.12);display:flex;align-items:center;justify-content:center;font-size:22px;color:#fff;flex-shrink:0}\r\n.pw .phase-title{font-size:17px;font-weight:500;color:#fff;margin:0;line-height:1.35}\r\n.pw .phase-sub{font-size:14px;color:rgba(255,255,255,0.6);margin:3px 0 0;line-height:1.4}\r\n.pw .flow{display:flex;align-items:stretch;flex-wrap:wrap;gap:6px;margin-bottom:18px}\r\n.pw .flow-step{border-radius:10px;padding:14px 16px;flex:1;min-width:135px}\r\n.pw .flow-label{font-size:15px;font-weight:500;color:#fff;margin:0;line-height:1.35}\r\n.pw .flow-sub{font-size:13px;color:rgba(255,255,255,0.7);margin:4px 0 0;line-height:1.45}\r\n.pw .flow-arrow{font-size:22px;color:#d0d4e0;flex-shrink:0;align-self:center}\r\n.pw .factor-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:10px;margin-top:6px}\r\n.pw .factor-card{border-radius:10px;padding:16px 18px;background:#f5f6fa;border-left:3px solid #0372ff}\r\n.pw .factor-title{font-size:15px;font-weight:500;color:#16205b;margin:0 0 5px;line-height:1.35}\r\n.pw .factor-icon{font-size:16px;vertical-align:-2px;margin-right:6px}\r\n.pw .factor-body{font-size:14px;color:#5f6470;line-height:1.55;margin:0}\r\n.pw .pnote{font-size:15px;color:#5f6470;line-height:1.6;margin-top:20px;padding:14px 18px;border-left:3px solid #f4600c;background:#fff7f4;border-radius:0 8px 8px 0}\r\n.pw .std-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(185px,1fr));gap:10px;margin-bottom:8px}\r\n.pw .std-card{border-radius:10px;padding:16px 18px;display:flex;flex-direction:column;gap:5px;align-items:flex-start}\r\n.pw .std-icon{font-size:20px;color:rgba(255,255,255,0.85)}\r\n.pw .std-label{font-size:15px;font-weight:500;color:#fff;margin:0;line-height:1.35}\r\n.pw .std-sub{font-size:13px;color:rgba(255,255,255,0.7);margin:0;line-height:1.45}\r\n.pw .badge{display:inline-block;font-size:12px;font-weight:500;padding:3px 10px;border-radius:20px;margin-top:6px;background:rgba(255,255,255,0.2);color:#fff;line-height:1.4}\r\n@media (max-width:700px){\r\n  .pw .flow{flex-direction:column;align-items:stretch}\r\n  .pw .flow-step{min-width:0}\r\n  .pw .flow-arrow{transform:rotate(90deg)}\r\n}\r\n@media (max-width:600px){\r\n  .pw .toggle-row{flex-direction:column}\r\n}\r\n<\/style>\r\n\r\n<div class=\"pw\">\r\n  <div class=\"toggle-row\">\r\n    <button class=\"tgl active\" id=\"pbtn-site\" onclick=\"pShow('site')\">Site by site<\/button>\r\n    <button class=\"tgl inactive\" id=\"pbtn-region\" onclick=\"pShow('region')\">Region by region<\/button>\r\n    <button class=\"tgl inactive\" id=\"pbtn-standard\" onclick=\"pShow('standard')\">By standard<\/button>\r\n    <button class=\"tgl inactive\" id=\"pbtn-pilot\" onclick=\"pShow('pilot')\">Pilot site<\/button>\r\n  <\/div>\r\n\r\n  <div class=\"pview active\" id=\"pview-site\">\r\n    <div class=\"phase-header\">\r\n      <div class=\"phase-icon\"><i class=\"ti ti-building-skyscraper\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"phase-title\">Site-by-site rollout<\/p><p class=\"phase-sub\">Common in multi-location organisations<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"flow\">\r\n      <div class=\"flow-step\" style=\"background:#0372ff\">\r\n        <p class=\"flow-label\">Phase 1<\/p>\r\n        <p class=\"flow-sub\">Site A in scope<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff;opacity:0.8\">\r\n        <p class=\"flow-label\">Phase 2<\/p>\r\n        <p class=\"flow-sub\">Site B added<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff;opacity:0.6\">\r\n        <p class=\"flow-label\">Phase 3<\/p>\r\n        <p class=\"flow-sub\">Site C added<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#16205b\">\r\n        <p class=\"flow-label\">Full scope<\/p>\r\n        <p class=\"flow-sub\">All sites covered<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-bulb factor-icon\" aria-hidden=\"true\"><\/i>Progressive learning<\/p>\r\n        <p class=\"factor-body\">Lessons from earlier phases may inform how subsequent sites are brought into scope.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-adjustments factor-icon\" aria-hidden=\"true\"><\/i>Controlled pace<\/p>\r\n        <p class=\"factor-body\">Individual sites are added progressively, allowing the programme to grow at a manageable rate.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"pnote\">Individual sites are brought into scope progressively, reflecting the organisation's readiness and operational priorities at each stage.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"pview\" id=\"pview-region\">\r\n    <div class=\"phase-header\">\r\n      <div class=\"phase-icon\"><i class=\"ti ti-world\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"phase-title\">Region-by-region implementation<\/p><p class=\"phase-sub\">Observed in international organisations<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"flow\">\r\n      <div class=\"flow-step\" style=\"background:#0372ff\">\r\n        <p class=\"flow-label\">Phase 1<\/p>\r\n        <p class=\"flow-sub\">UK &amp; Europe<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff;opacity:0.8\">\r\n        <p class=\"flow-label\">Phase 2<\/p>\r\n        <p class=\"flow-sub\">Americas<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff;opacity:0.6\">\r\n        <p class=\"flow-label\">Phase 3<\/p>\r\n        <p class=\"flow-sub\">Asia Pacific<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#16205b\">\r\n        <p class=\"flow-label\">Full scope<\/p>\r\n        <p class=\"flow-sub\">Global coverage<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-scale factor-icon\" aria-hidden=\"true\"><\/i>Regulatory alignment<\/p>\r\n        <p class=\"factor-body\">May help align with regional governance structures and regulatory environments specific to each area.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-link factor-icon\" aria-hidden=\"true\"><\/i>Programme consistency<\/p>\r\n        <p class=\"factor-body\">Overall programme consistency may be maintained across regions while accommodating local operational practices.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"pnote\">This approach may help align with regional governance structures, regulatory environments, and operational practices, while maintaining overall programme consistency.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"pview\" id=\"pview-standard\">\r\n    <div class=\"phase-header\">\r\n      <div class=\"phase-icon\"><i class=\"ti ti-certificate\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"phase-title\">Phasing by standard<\/p><p class=\"phase-sub\">Common when working towards an integrated management system<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"std-grid\">\r\n      <div class=\"std-card\" style=\"background:#0372ff\">\r\n        <i class=\"ti ti-certificate std-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"std-label\">Phase 1<\/p>\r\n        <p class=\"std-sub\">ISO 9001 - Quality<\/p>\r\n        <span class=\"badge\">First standard<\/span>\r\n      <\/div>\r\n      <div class=\"std-card\" style=\"background:#0372ff;opacity:0.8\">\r\n        <i class=\"ti ti-shield-check std-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"std-label\">Phase 2<\/p>\r\n        <p class=\"std-sub\">ISO 27001 - Info security<\/p>\r\n        <span class=\"badge\">Added<\/span>\r\n      <\/div>\r\n      <div class=\"std-card\" style=\"background:#16205b\">\r\n        <i class=\"ti ti-layout-grid std-icon\" aria-hidden=\"true\"><\/i>\r\n        <p class=\"std-label\">Phase 3<\/p>\r\n        <p class=\"std-sub\">Integrated management system<\/p>\r\n        <span class=\"badge\">Combined<\/span>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-layers-intersect factor-icon\" aria-hidden=\"true\"><\/i>Staged integration<\/p>\r\n        <p class=\"factor-body\">Standards may be added progressively, building towards a unified management system over time.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-adjustments factor-icon\" aria-hidden=\"true\"><\/i>Managed complexity<\/p>\r\n        <p class=\"factor-body\">Introducing standards one at a time may help manage the coordination required across functions and sites.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"pnote\">Some organisations phase certification by standard, particularly when working towards an integrated management system combining multiple standards.<\/p>\r\n  <\/div>\r\n\r\n  <div class=\"pview\" id=\"pview-pilot\">\r\n    <div class=\"phase-header\">\r\n      <div class=\"phase-icon\"><i class=\"ti ti-test-pipe\" aria-hidden=\"true\"><\/i><\/div>\r\n      <div><p class=\"phase-title\">Pilot site approach<\/p><p class=\"phase-sub\">A single site or small group brought into scope first<\/p><\/div>\r\n    <\/div>\r\n    <div class=\"flow\">\r\n      <div class=\"flow-step\" style=\"background:#f4600c\">\r\n        <p class=\"flow-label\">Pilot<\/p>\r\n        <p class=\"flow-sub\">1\u20132 sites in scope<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff\">\r\n        <p class=\"flow-label\">Review<\/p>\r\n        <p class=\"flow-sub\">Approach assessed<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#0372ff;opacity:0.8\">\r\n        <p class=\"flow-label\">Rollout<\/p>\r\n        <p class=\"flow-sub\">Wider scope added<\/p>\r\n      <\/div>\r\n      <i class=\"ti ti-arrow-right flow-arrow\" aria-hidden=\"true\"><\/i>\r\n      <div class=\"flow-step\" style=\"background:#16205b\">\r\n        <p class=\"flow-label\">Full scope<\/p>\r\n        <p class=\"flow-sub\">All sites covered<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"factor-grid\">\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-search factor-icon\" aria-hidden=\"true\"><\/i>Early insight<\/p>\r\n        <p class=\"factor-body\">A pilot may provide early insight into how the programme operates before wider rollout is considered.<\/p>\r\n      <\/div>\r\n      <div class=\"factor-card\">\r\n        <p class=\"factor-title\"><i class=\"ti ti-arrows-right factor-icon\" aria-hidden=\"true\"><\/i>Wider rollout<\/p>\r\n        <p class=\"factor-body\">The approach taken at pilot stage may inform decisions about how subsequent phases are structured.<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <p class=\"pnote\">A single site or small group of sites may be brought into scope first, before wider rollout is considered across the broader organisation.<\/p>\r\n  <\/div>\r\n<\/div>\r\n\r\n<script>\r\n(function(){\r\n  function pShow(id){\r\n    ['site','region','standard','pilot'].forEach(function(v){\r\n      document.getElementById('pview-'+v).classList.toggle('active',v===id);\r\n      document.getElementById('pbtn-'+v).classList.toggle('active',v===id);\r\n      document.getElementById('pbtn-'+v).classList.toggle('inactive',v!==id);\r\n    });\r\n  }\r\n  window.pShow=pShow;\r\n})();\r\n<\/script>\r\n<p>&nbsp;<\/p>\r\n<h3 aria-level=\"3\">Governance of phased programmes\u00a0<\/h3>\r\n<p>Phased certification typically requires clear governance to help ensure each stage aligns with overall programme objectives. This is commonly managed through formal programme structures, including designated leads, steering groups, and defined reporting lines.\u00a0<\/p>\r\n<p>Consistency is a key consideration. While phases may be delivered sequentially, the underlying management system and certification approach are intended to remain aligned across the organisation.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">Programme Governance and Coordination\u00a0<\/h2>\r\n<p>At enterprise scale, certification programmes depend on structured governance to support consistency, accountability, and control. Without clearly defined oversight and coordination mechanisms, complexity can lead to fragmentation, misalignment, and inefficiencies.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Central programme oversight\u00a0<\/h3>\r\n<p>Establishing a centralised oversight structure can guide the certification programme. This may be led by a dedicated programme lead or central function responsible for overall coordination, supported by steering committees and compliance or risk teams.\u00a0<\/p>\r\n<p>The programme lead may be accountable for maintaining alignment with strategic objectives, managing timelines, and monitoring whether all parts of the organisation are progressing in a coordinated way. Steering groups, where established, are typically made up of senior stakeholders and provide direction and resolve escalations.\u00a0<\/p>\r\n<p>Compliance and governance teams often contribute to maintaining consistency by defining core requirements, monitoring adherence, and providing assurance that the management system is being implemented effectively across areas within scope.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Stakeholder alignment\u00a0<\/h3>\r\n<p>Certification programmes typically intersect with multiple functions across an organisation, including IT, HR, operations, legal, and commercial teams. Each of these areas may contribute to the management system through processes, controls, or supporting infrastructure.\u00a0<\/p>\r\n<p>Without clear communication of expectations, defined responsibilities, and structured engagement throughout the programme, there is a risk of duplication, requirements not yet addressed, or conflicting approaches between different parts of the organisation.\u00a0<\/p>\r\n<p>Competing priorities can be a consistent challenge. Business units and functions have existing operational demands, and certification activities may need to be integrated in a way that is proportionate and manageable.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Audit coordination at scale\u00a0<\/h3>\r\n<p>Audit coordination becomes more complex as the scope expands across multiple sites and regions. Scheduling typically needs to account for geographical distribution, operational availability, and the sequencing of audits within a phased programme.\u00a0<\/p>\r\n<p>Audit planning, interpretation of requirements, and reporting approaches are generally expected to be consistent across locations, while audit findings should reflect the objective evidence identified at each site. This requires clear communication, standardised processes, and coordination between audit teams.\u00a0<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">Setting Realistic Expectations\u00a0<\/h2>\r\n<p>Establishing realistic expectations is a widely recognised feature of successful enterprise certification programmes. The scale and complexity involved mean certification is not typically a rapid or linear process, so acknowledging that upfront and recognising it within the way the programme is managed can be important.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Timeframes\u00a0<\/h3>\r\n<p>As discussed, certification at enterprise level is typically delivered over <a href=\"bookmark:\/\/_5._Phased_Certification\">multiple phases<\/a> and, in many cases, spans several years. The timeline is influenced by factors such as organisational size, geographical spread, number of standards, and the maturity of existing processes.\u00a0<\/p>\r\n<p>Rather than aiming for a single certification milestone, organisations often work towards progressive achievements, expanding scope and capability over time.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Resource requirements\u00a0<\/h3>\r\n<p>Certification typically requires a combination of internal ownership and, where appropriate, external support. Internally, responsibility is commonly distributed across functions, with central coordination supported by local implementation teams.\u00a0<\/p>\r\n<p>It is also worth noting the distinction between the initial certification effort and ongoing maintenance. While the initial phase may involve concentrated activity to establish and align processes, certification introduces continuing obligations, including:\u00a0\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Surveillance audits \u00a0<\/li>\r\n\t<li>Internal audits \u00a0<\/li>\r\n\t<li>Management reviews\u00a0<\/li>\r\n\t<li>System updates\u00a0<\/li>\r\n<\/ul>\r\n<p>Resource planning may need to account for both the implementation phase and the longer-term operational commitment.\u00a0<\/p>\r\n<p>Learn more about the <a href=\"https:\/\/amtivo.com\/uk\/resources\/technical\/the-three-year-certification-cycle\/\">Three Year Certification Cycle<\/a>\u00a0<\/p>\r\n<h3 aria-level=\"3\">Common challenges\u00a0<\/h3>\r\n<p>Enterprise organisations frequently encounter similar challenges during certification programmes, some of the most common being:\u00a0<\/p>\r\n<ul style=\"margin-top:0;\">\r\n\t<li>Scope creep, particularly where boundaries are not clearly defined at the outset or where additional entities and functions are brought into scope without corresponding adjustments to resources and timelines.\u00a0<\/li>\r\n\t<li>Inconsistent implementation across sites or business units, especially in decentralised structures. Variations in process maturity, interpretation of requirements, and local practices can lead to uneven application of the management system.\u00a0<\/li>\r\n\t<li>Internal resistance or misalignment, where certification initiatives may compete with other priorities, and not all parts of the organisation will engage at the same pace or with the same level of understanding.\u00a0<\/li>\r\n<\/ul>\r\n<p>These challenges are characteristic of enterprise-scale certification and reflect the inherent complexity of large organisations. Recognising this from the outset may allow organisations to approach certification with a more structured and pragmatic mindset.\u00a0<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2 aria-level=\"2\">The Role of the Certification Body\u00a0<\/h2>\r\n<p>For enterprise organisations, the certification body plays a significant role in the certification process. This includes planning and delivering an audit programme that reflects the complexity of the organisation being audited.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Auditing complex organisations\u00a0<\/h3>\r\n<p>Certification bodies working with large organisations are typically expected to have experience in <a href=\"https:\/\/amtivo.com\/uk\/resources\/insights\/implementing-multiple-standards-reduce-audit-costs\/\">multi-site and multi-standard environments<\/a>. This includes an understanding of how centralised and decentralised models operate, how integrated management systems function, and how changes to scope may affect audit planning and certification activity.\u00a0<\/p>\r\n<p>Structured audit methodologies are designed to assess management systems consistently across multiple locations and standards, accommodating the scale and diversity of enterprise operations within applicable accreditation and scheme requirements.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Consistency and coordination\u00a0<\/h3>\r\n<p>Consistency is a key requirement in enterprise certification. Certification bodies coordinate audit activities across regions, with audit teams expected to operate with a shared understanding of requirements, expectations, and reporting standards.\u00a0<\/p>\r\n<p>Organisations may use clear, comparable audit outputs across sites and standards as part of their internal governance and decision-making.\u00a0<\/p>\r\n<h3 aria-level=\"3\">Maintaining impartiality\u00a0<\/h3>\r\n<p>While certification bodies plan and deliver structured audit programmes, a clear boundary is maintained between certification and consultancy. Impartiality is a fundamental principle, ensuring that certification decisions are objective and independent.\u00a0<\/p>\r\n<p>Certification bodies do not design or implement management systems on behalf of organisations. Instead, they audit the systems in place to determine whether they meet the requirements of the relevant standards. This boundary between audit activity and implementation support is central to the credibility and integrity of the certification process.\u00a0<\/p>\r\n<p>British Assessment Bureau is a UKAS-Accredited Certification Body. Our role is to audit and certify management systems, not to design or build them. If you are looking for support in developing or implementing a management system before pursuing certification, an independent ISO consultant may be able to help. <a href=\"https:\/\/amtivo.com\/uk\/find-an-iso-consultant\/\">Find an ISO consultant<\/a> using our tool.\u00a0<\/p>\r\n<p aria-level=\"2\">Large-scale certification is rarely straightforward, but with the right structure it is manageable. British Assessment Bureau works with organisations of all sizes and complexities. If you are ready to start the certification journey, our team is here to help \u2013 <a href=\"https:\/\/amtivo.com\/uk\/contact-us\/\">get in touch<\/a>.\u00a0<\/p>","protected":false},"excerpt":{"rendered":"Explore how enterprise certification programmes might be structured, scoped, and governed.","protected":false},"author":59,"featured_media":10952,"template":"","resource":[59],"resource-tag":[183,178,42,182],"class_list":["post-10011908","resources-filter","type-resources-filter","status-publish","has-post-thumbnail","hentry","resource-insights","resource-tag-iso-9001","resource-tag-iso-14001","resource-tag-iso-27001","resource-tag-iso-45001"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Large Organisations: Initiating ISO Certification Programmes<\/title>\n<meta name=\"description\" content=\"Large organisations often approach certification differently. Explore how enterprise certification programmes might be structured, scoped, and governed.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ISO Certification at Enterprise Scale\" \/>\n<meta property=\"og:description\" content=\"Large organisations often approach certification differently. Explore how enterprise certification programmes might be structured, scoped, and governed.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/\" \/>\n<meta property=\"og:site_name\" content=\"Amtivo UK\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-14T10:22:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2026\/02\/Article-Thumbnail.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"367\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/04\/testimonialImage-placeholder.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Large Organisations: Initiating ISO Certification Programmes","description":"Large organisations often approach certification differently. Explore how enterprise certification programmes might be structured, scoped, and governed.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/","og_locale":"en_GB","og_type":"article","og_title":"ISO Certification at Enterprise Scale","og_description":"Large organisations often approach certification differently. Explore how enterprise certification programmes might be structured, scoped, and governed.","og_url":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/","og_site_name":"Amtivo UK","article_modified_time":"2026-08-14T10:22:46+00:00","og_image":[{"width":600,"height":367,"url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2026\/02\/Article-Thumbnail.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/04\/testimonialImage-placeholder.jpg","twitter_misc":{"Estimated reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/","url":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/","name":"Large Organisations: Initiating ISO Certification Programmes","isPartOf":{"@id":"https:\/\/amtivo.com\/uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/#primaryimage"},"image":{"@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/#primaryimage"},"thumbnailUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2026\/02\/Article-Thumbnail.png","datePublished":"2026-08-14T10:20:25+00:00","dateModified":"2026-08-14T10:22:46+00:00","description":"Large organisations often approach certification differently. Explore how enterprise certification programmes might be structured, scoped, and governed.","breadcrumb":{"@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/#primaryimage","url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2026\/02\/Article-Thumbnail.png","contentUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2026\/02\/Article-Thumbnail.png","width":600,"height":367,"caption":"Article Thumbnail - Amtivo"},{"@type":"BreadcrumbList","@id":"https:\/\/amtivo.com\/uk\/resources\/insights\/large-organisations-iso-certification-programmes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/amtivo.com\/uk\/"},{"@type":"ListItem","position":2,"name":"Resources","item":"https:\/\/amtivo.com\/uk\/resources\/"},{"@type":"ListItem","position":3,"name":"Insights","item":"https:\/\/amtivo.com\/uk\/resources\/insights\/"},{"@type":"ListItem","position":4,"name":"ISO Certification at Enterprise Scale"}]},{"@type":"WebSite","@id":"https:\/\/amtivo.com\/uk\/#website","url":"https:\/\/amtivo.com\/uk\/","name":"Amtivo","description":"","publisher":{"@id":"https:\/\/amtivo.com\/uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/amtivo.com\/uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/amtivo.com\/uk\/#organization","name":"Amtivo","url":"https:\/\/amtivo.com\/uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/amtivo.com\/uk\/#\/schema\/logo\/image\/","url":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/10\/cropped-BAB-Amtivo-Joint-Logo-Updated-300ppi.png","contentUrl":"https:\/\/amtivo.com\/uk\/wp-content\/uploads\/sites\/20\/2025\/10\/cropped-BAB-Amtivo-Joint-Logo-Updated-300ppi.png","width":371,"height":203,"caption":"Amtivo"},"image":{"@id":"https:\/\/amtivo.com\/uk\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resources-filter\/10011908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resources-filter"}],"about":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/types\/resources-filter"}],"author":[{"embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/users\/59"}],"version-history":[{"count":4,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resources-filter\/10011908\/revisions"}],"predecessor-version":[{"id":10011924,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resources-filter\/10011908\/revisions\/10011924"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/media\/10952"}],"wp:attachment":[{"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/media?parent=10011908"}],"wp:term":[{"taxonomy":"resource","embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resource?post=10011908"},{"taxonomy":"resource-tag","embeddable":true,"href":"https:\/\/amtivo.com\/uk\/wp-json\/wp\/v2\/resource-tag?post=10011908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}