Skip to content

WCA GLOBALISO consultancy · Sharjah, UAE

Certification is a system. Not a certificate.

WCA Global takes organisations from “a client asked us for ISO” to a management system that passes a Stage 2 audit and keeps working afterwards — across 15 standards and 9 disciplines, with the same methodology in every market we operate in.

Fourteen questions, about four minutes, no sign-up, scored against Annex SL clauses 4–10.

Quality control and management system concepts arranged as a collage

The route to a certificate

  1. 1Application
  2. 2Gap analysis
  3. 3Implementation
  4. 4Stage 1 audit
  5. Certificate issued
15
Standards advised on

Quality, security, environment, safety, AI, food, continuity

7
Shared Annex SL clauses

Clauses 4–10 are common to every standard here

93
Annex A controls

ISO/IEC 27001:2022, across four themes

3-year
Certification cycle

Two surveillance audits, then recertification

Standards we advise on

Fifteen standards, one management system

WCA Global advises on all fifteen. Each is a full engagement in its own right — certify against more than one and the shared clauses are built once, which is the whole argument for an integrated system.

What actually decides it

Auditors do not read your manual. They sample your records.

This is the single most expensive misunderstanding in certification. A documented system written the month before Stage 2 has no evidence behind it, and evidence is what gets sampled — the internal audit that ran, the review that was held, the non-conformity that was closed and signed off. Those clauses can only be satisfied over time, which is why WCA Global starts them first and not last.

Clause 9.2

Internal audit

By someone independent of the work being audited.
Clause 9.3

Management review

Against defined inputs, with decisions recorded.
Clause 10.2

Non-conformity

Root-caused and closed with evidence, not retrained again.
What the standards ask for

The scale of the work, before anyone quotes you for it

Most organisations underestimate the documentation and overestimate the audit. These are the standards' own numbers, published here by WCA Global because they are checkable — not survey results.

ISO/IEC 27001:2022 · Annex A

93 controls, four themes

The 2022 revision reorganised 114 controls into 93. Every one of them has to be justified as applicable or excluded in your Statement of Applicability — and the auditor reads that document first.

93Controls
  • Organizational controls37
  • Technological controls34
  • Physical controls14
  • People controls8
Our catalogue

Where the fifteen sit

Grouped by discipline. Organisations rarely stop at one: a logistics operator on ISO 9001 usually needs 14001 and 45001 next, and a SaaS business on 27001 tends to follow with 27701 and 42001.

Environment & sustainability
4 standards
Information, privacy & AI
3 standards
Quality
2 standards
Health & safety
1 standards
Food safety
1 standards
Facilities & operations
1 standards
Business continuity
1 standards
Education
1 standards
Governance & ethics
1 standards
Indicative effort profile

The peak is documentation, not the audit

Indicative shape of a first certification, not a measurement. It is on the page because clients consistently brace for the registrar visit and get caught by clause 7.5.

  1. Scoping
  2. Gap analysis
  3. Documentation
  4. Rollout
  5. Training
  6. Internal audit
  7. Stage 1–2
  8. Surveillance
How we work

Four things that decide whether it works

Stated plainly, because each has a cost attached and a client deserves to see it before signing with WCA Global.

Colleagues working through a problem at a whiteboard
01

WCA Global is not the registrar

WCA Global™ prepares you; an accredited third-party body issues the certificate. That separation is what makes the certificate worth anything, and it is written into how the firm works rather than into a disclaimer at the bottom of the page.

02

One integrated system, not four

Clauses 4 to 10 are common to every standard here. Certifying against a second or third standard reuses that spine instead of rebuilding it — which is why WCA Global quotes additional standards at 55%, not 100%.

03

Evidence, not templates

A downloaded template set passes nothing. Auditors sample records. Every WCA Global engagement produces the records the sampling will look for, generated by your operation rather than filled in the week before.

04

Local delivery, one standard of work

WCA Global Country Partners deliver in their own market and language, against the same methodology, the same document set and the same review gates used out of Sharjah.

Articles

Written for people mid-implementation

News

New Strategic Partnership

WCA GLOBAL TM is proud to announce a new partnership with BSI. This collaboration represents a significant step in expanding our international presence and enhancing the delivery of trusted compliance and certification services. Through this partnership, we aim to empower organizations worldwide wit

1 min readRead
News

WCA GLOBAL™ Appoints Business Partner in Iraq

WCA GLOBAL TM has officially entered the Iraqi market by partnering with a local representative. This collaboration strengthens our ability to deliver ISO consultancy and certification services across Iraq, helping businesses achieve compliance and operational excellence.

1 min readRead
News

WCA GLOBAL™ Appoints Business Partner in Saudi Arabia

We are pleased to announce our expansion into Saudi Arabia through the appointment of a local Business Partner. This strategic step allows us to better serve our clients in the Kingdom with expert ISO consultancy and certification services, aligned with international standards and local market needs

1 min readRead

Start with evidence

Find out where you actually stand.

The WCA Global readiness assessment scores you against the seven clauses every standard here shares, and tells you which of them would fail a Stage 1 audit today. It takes about four minutes and nothing is emailed to you unless you ask for it.