Our approach: risk-driven, not paper-driven
iQomply does not work with standard playbooks. We always start with what is happening in your organisation, and build from there a system that actually works. Practical, direct, without unnecessary overhead.
How an engagement with iQomply works
Every engagement starts with listening. Not with a presentation about our services, but with questions about your organisation: where do you stand, what already works, what is missing. That conversation sets the direction.
From there we build systematically: analysis, structure, embedding, growth. Not as a linear project that ends at certification, but as a trajectory that keeps working.
A typical implementation trajectory runs 10 to 20 weeks, depending on scope and the number of standards involved. The first working session usually takes place within two weeks of the initial meeting.
Four steps:
STEP 01
Analysis & diagnosis
We map out where the organization stands: risks, gaps, what already works, and what does not. No assumptions, but a clear starting point.
Gap analysis · risk map · baseline measurement
STEP 02
Structure & implementation
We build the management system to fit: integrated, logical and workable. One system for multiple standards where possible.
27001 · 7510 · 9001 · 42001
STEP 03
Management & assurance
The system comes to life. Management review, KPIs, risk steering. Governance as a steering instrument, not a paper archive.
Directiebeoordeling · KPI-dashboard · auditvoorbereiding
STEP 04
Growth & maturity
We stay involved. The system grows with the organisation: new standards, new risks, new ambitions.
Maturity assessment · continu verbeteren · AI-governance
Everyone at iQomply works at Lead Auditor level
iQomply delivers at Lead Auditor level. As a standard, not an exception. That applies to Bart de Man as founder, and to everyone who executes an engagement on behalf of iQomply.
Lead Auditor accreditation across 27001, 7510, 42001 and 22301 is the benchmark. That accreditation means someone not only knows the standard, but is qualified to assess and guide an organisation toward demonstrable compliance.
For a procurement department or regulator asking “who stands behind the quality?”, the answer is clear: iQomply delivers at Lead Auditor level, and that is embedded in how the network is composed.
Who this approach works for
This approach suits organisations that take governance seriously. Not as a project to tick off, but as a structural part of how the organisation works.
Specifically: healthcare organisations implementing or renewing NEN 7510 or ISO 27001. Organisations deploying AI that want structured control via 42001. Companies that want a second opinion from a Lead Auditor before an external audit.
Ready to grow from compliance to maturity?
No obligation, practical and focused on your situation.