Quick Read
This whitepaper explains what Speeki assessors evaluate during a Speeki Meridian™ engagement against SPK CSMS1000:2026, drawing on real assessment experience across management system certification and sustainability assurance. The assessment process unfolds in two stages—an off-site documentation review to confirm the system is sufficiently developed, followed by a 3–7 day on-site evaluation of interviews, records, controls, and operational reality. The core focus is whether documented policies and procedures align with what the organisation actually does, and where most organisations fall short in demonstrating genuine system maturity.
Executive Summary
This paper is written from the assessor's perspective. It synthesises what Speeki's assessors — drawing on experience across management system certification and sustainability assurance — actually look for when evaluating a corporate sustainability management system against SPK CSMS1000:2026. It is intended to help organisations understand what a Speeki Meridian™ engagement involves, what distinguishes a CSMS that passes from one that does not, and how to prepare effectively.
This paper does not contain every requirement of SPK CSMS1000:2026 — those are covered in the standard itself and in the earlier papers in this series. It contains the assessor's reading of the requirements: what the standard is really asking, what the most revealing evidence looks like, and where organisations most commonly fall short.
A Speeki Meridian™ assessment is not a documentation review with an on-site component. It is a substantive evaluation of whether the management system actually exists and works. The documentation tells us what the organisation says it does. The on-site assessment tells us whether it does it.
1. The Assessment Process — What to Expect
1.1 Stage 1 — Documentation review
Stage 1 is conducted off-site. Assessors review the CSMS documentation against SPK CSMS1000:2026 requirements. The purpose is not to find non-conformities — it is to confirm that the documented system is sufficiently developed to support a meaningful on-site assessment. If the documentation is inadequate, Stage 2 cannot proceed until it is developed.
Stage 1 produces a report identifying: areas where documentation is adequate; areas where documentation has gaps that will be a focus at Stage 2; and any areas where the documentation is so inadequate that the clause cannot be meaningfully assessed. The Stage 2 audit plan is built on Stage 1 findings.
The document request for Stage 1 covers all sections of the standard within the certified scope. Organisations that receive the document request and find they cannot provide several items have identified their preparation gaps — and have time to address them before Stage 2.
1.2 Stage 2 — On-site assessment
Stage 2 is the substantive assessment. Assessors spend between three and seven days on-site (depending on scope), conducting interviews with personnel from senior leadership to operational staff, reviewing records and data, testing controls, and evaluating whether the documented system reflects what the organisation actually does.
The opening meeting confirms the assessment scope, methodology, and schedule. Assessors then work through the clause areas, alternating between interviews, document review, and evidence testing. The closing meeting presents all findings — categorised as major non-conformity, minor non-conformity, or observation — to the client's senior management before the formal report is issued.
2. What Assessors Are Really Testing
2.1 The difference between documentation and reality
The most fundamental thing assessors test is the relationship between what the documentation says and what the organisation actually does. This is not cynicism — it is the core purpose of a management system audit. An organisation can produce excellent documentation without having an excellent management system. The documentation is the description; the audit tests the reality.
The most revealing moment in a Stage 2 assessment is when assessors move from the sustainability team's explanation of how things work to interviews with operational personnel who are supposed to be applying those systems. If the sustainability team describes a supplier code of conduct process that procurement personnel have never heard of, there is a gap between the documented system and the operating system. If the sustainability team describes a culture of sustainability that is invisible to employees outside the sustainability function, the culture assessment has failed.
2.2 Connectivity — does the system hang together?
A management system should be a connected system, not a collection of separate documents. Assessors test connectivity throughout the assessment. Does the importance list from Clause 6.6 match the topics that have objectives in Clause 8.1? Are those objectives reflected in the action plan from Clause 8.4? Is the action plan reviewed at the management reviews from Clause 12.3? Are internal audit findings from Clause 12.5 addressed through the corrective action process from Clause 14.2?
Disconnections are findings. An importance list that includes human rights but no human rights objective, an action plan that was approved in January and not reviewed again until the following January, internal audit findings that were recorded but not actioned — these are all evidence that the system exists as a set of documents rather than as an operating management discipline.
2.3 Substance over form
Assessors are trained to evaluate substance over form. A beautifully formatted governing body sustainability report that is reviewed once a year is weaker governance evidence than brief but genuinely engaged quarterly governing body sustainability discussions with recorded questions and actions. A comprehensive supplier code of conduct that no supplier has ever signed is a weaker procurement control than a concise code that is systematically incorporated into supplier contracts.
The question assessors ask about every documented control, process, or requirement is: is there evidence that this actually operated? Evidence of operation requires: records of it happening (meeting minutes, data, approvals); people who can describe it independently of the documentation; and outputs that connect to the rest of the management system.
3. The Most Common Likely Major Non-Conformities
Based on assessments across management system standards, the following are the most common reasons organisations do not achieve first-time certification:
Clause | Common major NC |
|---|---|
6.6 | Governing body has not formally approved the importance and materiality lists — or the approval is not documented |
7.5 | Direct access mechanism documented but never used or tested; no evidence of substantive governing body engagement with sustainability beyond annual report approval |
8.4 | Annual action plan does not exist, or exists but has not been reviewed or monitored across the cycle |
10.4 (ICSR) | Sustainability data cannot be traced to source records through a documented control process; no independent validation |
10.5–10.14 | Domain clause requirements not met — most commonly: Scope 3 not screened (10.6), energy strategy covers electricity only (10.7), human rights due diligence does not extend beyond first-tier suppliers (10.10) |
12.3 | No employee review conducted; governing body review limited to annual report approval |
12.5 | No documented internal audit programme; internal auditors not independent from sustainability function |
14.2 | No documented corrective action process; NCs identified but not formally tracked or closed |
4. What Distinguishes a Strong CSMS
Assessors also recognise what good looks like. The characteristics of organisations that achieve first-time certification with few findings:
The sustainability function is genuinely independent. It has direct access to the governing body, the CSO has authority to escalate without management clearance, and there is documented evidence of escalation having occurred or been tested.
The governing body is genuinely engaged. Assessors can interview a governing body member who can describe the organisation's material sustainability topics without prompting from the sustainability team, can recall sustainability-related questions they have asked of management, and can describe how sustainability considerations influenced a recent strategic decision.
Operational personnel know their sustainability responsibilities. The finance manager can describe which sustainability criteria apply to CapEx decisions. The procurement manager can describe the supplier code of conduct and the due diligence process for high-risk suppliers. The HR manager can describe how sustainability appears in performance reviews. This knowledge exists because sustainability is embedded in processes, not because someone briefed everyone before the audit.
The data chain is documented and tested. When assessors ask to trace a specific sustainability KPI from the published figure back to source data, the organisation can produce: the data collection procedure, the calculation methodology, the validation record, and the source documents. This happens routinely, not as a special exercise for the audit.
The review architecture operates continuously. Management reviews produce documented outputs with actions. Internal audit findings appear in corrective action records. The sustainability function review conclusions appear as inputs to the management review. The system is visibly connected.
5. How Existing ISO Certifications Are Recognised
Organisations that hold current ISO management system certifications receive scope recognition in a Speeki Meridian™ assessment. This means that for clauses of SPK CSMS1000:2026 that are substantially addressed by an existing ISO certification, assessors will rely on existing certification evidence rather than conducting a full re-assessment.
ISO 14001 reduces assessment scope for environmental management clauses (10.5) and several management system infrastructure clauses. ISO 45001 reduces scope for OHS clauses (10.8). ISO 37001 reduces scope for anti-bribery and compliance clauses (10.9). ISO 50001 reduces scope for energy management clauses (10.7). ISO 42001 reduces scope for AI governance clauses (10.11).
Credit is not automatic. The Lead Assessor confirms that: the existing certificate is current and from an accredited body; the scope is consistent with the Meridian scope; and reliance is appropriate given the time since the last ISO surveillance visit. Typically, ISO credit reduces total Stage 2 assessment time by 20–40% for organisations with multiple ISO certifications.
6. Preparing for a Speeki Meridian™ Engagement
The most effective preparation is to conduct a genuine gap assessment before the engagement begins — not a surface-level check of whether documentation exists, but a substantive evaluation of whether the documented system reflects operational reality. The Speeki gap assessment tool, available from speeki.com, provides a structured framework for this self-assessment.
The gaps most organisations find in a genuine pre-assessment review are: the ICSR controls are weaker than they thought; the governing body engagement is less substantive than the sustainability report suggests; the action plan exists but is not monitored between reporting cycles; and operational personnel outside the sustainability function have limited awareness of the CSMS requirements that apply to their roles.
Organisations that address these gaps before the Speeki Meridian™ engagement typically achieve first-time certification. Organisations that discover them during the Stage 2 assessment typically receive major or minor non-conformities that delay certification.
Speeki does not provide consulting on how to build or improve a CSMS. Assessors who identify gaps during the engagement report them as findings — they do not advise on remediation. The gap assessment tool and this whitepaper series are designed to help organisations understand what is required, so they can build the right system before the assessment commences.
For all enquiries about the Speeki Meridian™ certification programme, the SPK CSMS1000:2026 standard, or Nicole AI, the Speeki AI assistant on the website, visit speeki.com.
Speeki Meridian™ — Auditor Expectations
The auditor's single most important piece of advice for organisations preparing for Speeki Meridian™ certification: Talk to people outside the sustainability team before the assessment. Ask your finance manager how sustainability appears in CapEx decisions. Ask your procurement manager about the supplier code of conduct process. Ask an operational employee what they would do if they observed a sustainability concern. Ask a governing body member what sustainability questions they asked at the last board meeting. If the answers you receive are vague, surprised, or inconsistent with what the sustainability function would say — you have found your preparation priorities. The assessment will find the same things. Better to find them now and fix them than to find them in a Stage 2 closing meeting as non-conformity findings.
About Speeki
Speeki is an accredited certification body operating across more than 100 countries. Speeki certifies organisations against SPK CSMS1000:2026 through the Speeki Meridian™ certification programme. Speeki is a certification body — it does not provide sustainability consulting or advisory services of any kind.
For current details of Speeki's accreditations, scope of certification, and service offerings, visit speeki.com. You can also ask Nicole AI on the Speeki website to find the information you need.
speeki.com | © Speeki Pte Ltd 2026