Stage 1 audits are frequently misunderstood as a soft warm-up. In practice, they are the auditor's structured test of whether your management system exists on paper, is understood by the people running it, and is ready to be evidenced end-to-end at Stage 2.
The four things auditors actually look for
1. A defined scope that matches how the business actually operates — not aspirational wording copied from a template.
2. Documented information for the mandatory clauses: context, interested parties, risks and opportunities, objectives, and internal audit and management review outputs.
3. Evidence that at least one internal audit and one management review have taken place before certification.
4. Signs that top management own the system, rather than delegating it entirely to a quality manager or consultant.
Where SMEs most often lose marks
Scope statements that exclude functions the business clearly performs, missing evidence of leadership involvement, and internal audits that read as compliance checklists rather than improvement reviews are the three findings we see repeatedly at Stage 1.
Fix these before the auditor arrives and Stage 2 becomes a confirmation exercise rather than a scramble.