I have done several gap analyses. Our best practice or lessoned learned methodology was this.
1. Train managers and or process owners in the ISO requirments so they are familiar with them and to get them engaged.
2. Ensure the the processes in the organization are mapped (defined and or flow charted)
3. Define the process owners
4. Sit down with the process owners and or managers and in an open setting discuss frankly if the process meets the intent.
5. Record the results and use it as an input to your certification plan
This method worked much better than an individual auditor or contractor coming in as the it makes the management become not only involved but also gives them practical application of the requirements within their processes.
1. Train managers and or process owners in the ISO requirments so they are familiar with them and to get them engaged.
2. Ensure the the processes in the organization are mapped (defined and or flow charted)
3. Define the process owners
4. Sit down with the process owners and or managers and in an open setting discuss frankly if the process meets the intent.
5. Record the results and use it as an input to your certification plan
This method worked much better than an individual auditor or contractor coming in as the it makes the management become not only involved but also gives them practical application of the requirements within their processes.