Phase 3: Certify
Prepare for formal audits with readiness assessments, evidence packaging, auditor selection, and certification tracking.
Purpose
The Certify phase prepares your organization for formal audits and certifications. It assesses audit readiness, packages evidence for auditor review, guides auditor selection, and tracks certification status across all targeted frameworks.
Skills
Audit Readiness
/compliance:audit-readiness <topic>Assesses readiness for formal certification audits. Evaluates control maturity, evidence completeness, documentation quality, and organizational preparedness. Identifies remaining blockers and recommends pre-audit remediation priorities.
Output: Audit readiness assessment with blocker identification → .metapowers/compliance/<topic>/03-certify.md
Evidence Package
/compliance:evidence-package <topic>Packages collected evidence for auditor review. Organizes evidence by control domain, creates cross-reference matrices, prepares evidence summaries, and identifies gaps in the evidence chain.
Output: Evidence package inventory with cross-reference matrix → .metapowers/compliance/<topic>/03-certify.md
Auditor Selection
/compliance:auditor-selection <topic>Guides the auditor and certification body selection process. Evaluates auditor qualifications, accreditation requirements, industry experience, engagement structure, and timeline expectations for target certifications.
Output: Auditor selection criteria and evaluation framework → .metapowers/compliance/<topic>/03-certify.md
Certification Tracker
/compliance:certification-tracker <topic>Tracks certification status across all targeted frameworks. Monitors application status, audit schedules, remediation items, certification validity periods, and renewal deadlines.
Output: Certification tracking dashboard with status and timelines → .metapowers/compliance/<topic>/03-certify.md
Next Phase
After Certify, proceed to Monitor to maintain compliance posture through continuous monitoring and regulatory change tracking.
Phase 2: Remediate
Synthesize assessment findings into gap analysis, control mapping, evidence planning, policy gap identification, and implementation plans.
Phase 4: Monitor
Maintain compliance posture through continuous monitoring, regulatory change tracking, renewal management, and compliance reporting.