Management Systems Consulting
Management systems that work in practice, not just on paper.
Training, consulting and certification-readiness support for the four standards that govern how technology organizations build, secure, run and now govern their systems — delivered by people who have built those systems themselves.
Talk to us >What we help with
Practical, evidence-based support from first awareness through certification and sustained performance.
Training & internal auditor programmes
Build audit capability inside your organization. Internal Quality Auditor (IQA) programmes, standard awareness sessions, process-owner training and lead-auditor preparation — customized to your industry and maturity. On-site, virtual or blended delivery.
Implementation & certification readiness
From gap assessment to a certified system: policies and records aligned to how your teams actually work, controls built with the process owners who own them, internal audit, management review, and Stage 1 / Stage 2 readiness including closure of findings.
Integrated management systems
All four standards share the same harmonized structure, so they can run as one system — a single set of policies, risks, objectives, controls, audits and reviews — instead of four parallel systems maintained separately for four audits.
Standards we cover
Four standards, one consistent approach to implementation, audit and improvement.
Quality Management System
Customer focus, the process approach and risk-based thinking — the foundation the other three standards are built on. We also support organizations planning their transition to the 2026 revision.
Typically: every organization, as the base systemInformation Security Management System
Risk-based organizational, people, physical and technological controls that protect information assets — and give enterprise customers the security assurance they now ask for before they sign.
Typically: software product teams, IT services, BFSI, telecomAI Management System
Governance, risk and control for AI that is developed, deployed or embedded in your products — accountability, impact assessment, data and model controls, and monitoring through the life of the system. Designed to sit on top of an existing ISMS.
Typically: teams shipping AI features, and their enterprise customersIT Service Management System
Defined service-delivery processes, service levels, incident and change management, and continual improvement measured against what the business actually needs from the service.
Typically: managed services, product support organizations, IT operationsThese four share the same high-level clause structure, which is why we implement them together rather than one at a time. ISO 9001 establishes the process discipline; ISO/IEC 27001 adds the security controls; ISO/IEC 42001 extends that governance to AI; ISO/IEC 20000-1 covers how the service runs day to day.
How we work
A structured path from first assessment to certification, with findings closed at every stage.
Assess
Gap analysis against the standard, and a prioritized roadmap with clear timelines.
Design
Policies, procedures, registers and records built around how you actually operate.
Implement
Practical controls, monitoring and objective evidence, developed with your process owners.
Audit & review
Internal audit and management review that test effectiveness before the certification body does.
Certify
Stage 1 and Stage 2 readiness checks, mock audits and closure of non-conformities.
Why Tekenlight
Most consultants arrive with a document set. We arrive having built the systems these standards govern.
Engineers, not just auditors
We build enterprise platforms for fintech, lending and healthcare clients. Access control, change management, incident response and model governance are things we implement, not just assess.
Evidence, not paperwork
Working systems, competent process owners and reliable records that demonstrate real implementation — not a document set assembled the week before the audit.
One system, four standards
Because the four share a common structure, we implement them as a single governance framework — one policy set, one risk register, one audit programme — rather than four systems that repeat each other.
Independent by design
Certification decisions stay with the independent certification body. Our role is training, consulting, implementation and readiness — and we are clear about that boundary from the first conversation.
Industries we work with
- IT Services & Software
- BFSI
- Insurance
- Healthcare
- Retail
- Telecom
Ways to engage
Matched to where you are — from first awareness through certification, surveillance and sustained performance.
Training & capability building
IQA programmes, lead-auditor preparation and process-owner training for any of the four standards.
Gap assessment & readiness review
Independent assessment of current practice against the standard, with a prioritized improvement roadmap.
Implementation to certification
End-to-end support from system design through Stage 2, including evidence preparation and closure of findings.
Focused advisory
Targeted help for in-house teams: risk documentation, CAPA, AI impact assessment, internal audit or management review support.
Certification decisions rest with the independent certification body. Tekenlight's role is limited to training, consulting, implementation and audit-readiness support.
Just submit your details and we’ll be in touch shortly.