Retail & commerce

Support through a certification programme

Turn a certification standard into verifiable obligations, assemble the body of evidence and take the organisation through to audit.

Certification
Gap analysis
Evidence
Quality assurance

Architectural detail made of identical aligned modules, evoking a repository of requirements

Context

An organisation embarking on certification of its point-of-sale systems against the applicable standard. The standard was known in outline, but nobody had turned its requirements into concrete obligations: which procedures to write, which evidence to produce, who answers for them, and to what timetable.

The challenge

To move from a technical standard to a file that stands up in audit. That means turning every requirement into a verifiable obligation, naming an owner and an item of evidence for each one, then carrying the remediation work through to closure — without the timetable resting on a single person.

What AXENEO did

The work we carried out

01
Analysis and diagnosis
- Analysis of the requirements of the applicable standard
- Translation into operational obligations and control points
- Gap analysis: gaps, rating, criticality
- An owner and an expected item of evidence assigned to each requirement
02
Bringing into compliance
- Formalisation of the processes and the procedures
- Assembly of the documentation file and the evidence of application
- Remediation plans, owners and deadlines
- Tracking of actions through to closure of the gaps
03
Audit preparation
- Compliance review ahead of the audit
- Preparation of the teams and of the supporting documents
- A periodic review of operational compliance put in place

Results

What the set-up changed

Results are described qualitatively. We do not publish figures we would not be able to document.

An operational reading of the standard, usable by the business and IT teams alike.
A documented and rated statement of gaps, with remediation plans tracked.
A documentation file and a body of evidence that are consistent and up to date.
A periodic compliance review, distinct from the vendor's attestation.
Teams prepared for their exchanges with the certifying body.