BS 10012 Certification

After you have applied for the BS 10012 standard by appointing an impartial certification body, such as TÜV UK Ltd., they will select an auditor. The auditor will support and help you through the steps below:

• Gap analysis
  TÜV UK Ltd. can provide an optional gap analysis service. The aim of the GAP analysis is to detect deviations between your existing processes and procedures and the BS 10012 requirements.
  
  It helps your organisation focus on critical, high risk or weak areas of your personal management system. This assessor delivered activity enables you to verify the policies, procedures and controls you have in place to protect your personal information.
  
  Whether you are in the early stages of implementing your personal management system or looking to go for a ‘dry run’ before your assessment visit, the scope of the ‘gap analysis’ can be decided with either your business development manager or assessor.
  
  The outcome of the gap analysis is an overview of areas that need to be improved before the formal assessment. 

• Formal assessment
  This is a 2 stage process:
  At the first stage we check if your organisation meets the BS 10012 requirements from a systems perspective. We provide you with an audit report highlingting any deficiencies against system requirements.
  
  At stage 2 we check that you do what you say i.e. that the management system is deployed. If there are no major non-conformances identified then certification is recommended. 
  
  
• The Certification
  Cycle Certification follows a 3 year renewal cycle with annual surveillance visits.