Complete all sections below. On submit, your email client opens pre-filled to enquiries@rbaregistrars.com — we'll confirm your quotation within one working day.
Tick all standards you're applying for. ISO 9001, 14001, 45001, 27001, 22000, 50001 and 13485 each reveal a short set of questions specific to that standard only.
Upload your valid certificate(s) and current audit report so we can confirm status and plan your transfer.
Only relevant if applying for more than one standard above.
Helps us plan a single, integrated audit across all standards selected above.
Helps us scope your Quality Management System (QMS) assessment — quality & process control only.
State any clauses of ISO 9001 that do not apply to your organisation's scope, with justification (e.g. Clause 8.3 Design and Development, if you do not design products or services).
Please provide details of any legal or other obligations that are applicable to the company activities.
Helps us scope your Environmental Management System (EMS) assessment — environmental compliance & impact only.
Detail any environmental prosecutions, warning notices or serious incidents in the last 3 years, or state "None".
Please detail the significant environmental aspects you have identified.
Helps us scope your Occupational Health & Safety Management System (OH&S) assessment — worker safety only.
Please detail the significant occupational health & safety hazards you have identified.
Helps us scope your Information Security Management System (ISMS) assessment — information security only.
List all employees, contractors, freelancers and third-party staff under your control within the ISMS scope; state the total headcount; note any identical/low-risk activities where the square root rule for headcount reduction may apply; and specify all processes, departments, assets and locations covered by the ISMS.
Provide full details of all in-scope sites (e.g. HQ, operational sites, data centres, DR sites, temporary locations), confirm if you operate single-site or multi-site, and state the proportion of remote/hybrid working.
Describe your core products, services and supply chain; confirm if operations run 24×7 / multi-shift or standard hours, and explain how shift coverage is organised.
List all types of information handled (e.g. personal data, health, payment, classified, critical infrastructure) and all applicable laws, regulations and standards (e.g. GDPR, NIS2, PCI DSS, defence/government rules).
Describe your technology environment (cloud, on-premise), any outsourced services (e.g. MSSPs, hosting), and the overall complexity of your information security controls.
State if this is a first-time certification, surveillance or recertification; note your current implementation stage; and provide details of any prior certification, audit history, and status of all corrective actions from recent audits.
Helps us scope your Food Safety Management System (FSMS) assessment — food safety only.
Per ISO 22003 Annex A (A–K).
Provide total FTE of all staff, contractors, seasonal/agency workers within the FSMS scope (exclude purely admin/finance with no food safety involvement).
State the number of distinct HACCP plans/studies; count and risk level of Critical Control Points (CCPs); and describe the complexity of your Prerequisite Programmes (PRPs).
List all in-scope sites (HQ, production, storage, distribution etc.); confirm total number of sites; and state shift patterns (standard hours / multi-shift / 24-hour).
State product/process risk level (e.g. high risk: infant food / ready-to-eat; low risk); note allergens, outsourced processes or supply chain factors; and list all applicable regulations/schemes (e.g. FSA, EU 178/2002, FSSC 22000, BRC).
Helps us scope your Energy Management System (EnMS) assessment — energy performance only.
All staff, contractors, shift/part-time converted to full-time equivalents involved in the EnMS or affecting energy performance. Exclude those with no influence on energy use/consumption/efficiency.
Annual total energy consumption (in Terajoules, TJ); number of distinct energy types (electricity, gas, steam, fuel, renewables, etc.); count of Significant Energy Uses (SEUs) — major equipment, systems, processes driving consumption.
Site details: single/multi-site; locations with high energy use; multi-site sampling per IAF MD 1. Scope boundaries: facilities, processes, sites, energy streams covered. Shift patterns: 24/7 or multi-shift increases sampling effort.
Technical complexity: generation, conversion, distribution, industrial processes, building systems. Measurement & verification: metering, monitoring, energy review maturity. Regulatory context: compliance schemes, reporting, carbon/energy obligations. EnMS maturity: implementation stage, prior audits, improvement record.
Helps us scope your Medical Devices Quality Management System assessment — medical devices only.
I confirm that the information provided in this application is accurate to the best of my knowledge, and that the organisation named above agrees to comply with RBA Registrars' certification rules, including the timely provision of information required to plan and conduct the assessment.
