Tier 2 Outsourced Governance & Assurance Support

Primary Driver & Focus
Provide confidence in system performance through internal audits and compliance evaluation. Consultant as an outsourced assurance resource to the client’s business.

Key Service Offerings
All Tier 1 services, plus:
- Regular reviews of context, risk profiles
and system objectives
- Internal audit program development and
delivery, including operational process
audits
- Compliance evaluations
- Management review preparation support

Additional Value Over Tier 1
Introduces formal assurance activities that validate whether the system is working as intended.

Best Suited For
Certified organisations or those preparing for certification that require structured audit and compliance support.

Level of Consultant Engagement
Moderate, with defined governance and assurance activities throughout the year.

Typical Cadence
Quarterly governance reviews, internal audit planning and implementation, compliance evaluation, and annual ISO system health check audit.

Outcome Objective
A management system that is actively monitored, tested, and supported with evidence of compliance and effectiveness.

Responsibilities Retained by the Client
- Active system ownership
- Implementation of corrective actions
- Maintenance of management system
processes and administration
- Conducts the management review

Exclusions from Scope
Implementation of actions to address assurance needs and improvement.

Governance Oversight & Guidance
Periodic oversight to maintain alignment and audit readiness

Governance & Assurance Support
Adds internal audits and compliance evaluation to confirm effectiveness

Governance Leadership
Ongoing governance involvement with performance monitoring and improvement.
