Vennhoff Audit Praxis

Rainer Vennhoff is an independent auditor in Cologne who works on ISO/IEC 42001 and ISO/IEC 27001 in two distinct capacities. For certification bodies he acts as a contracted lead auditor on stage 1 and stage 2 audits and surveillance visits, mainly at software companies and medical device manufacturers. For organisations preparing for certification he runs readiness assessments and internal audits, producing a findings report in the format a certification body will later use so that nothing comes as a surprise at the real audit. He also offers a compact gap analysis, usually two to four days, for companies that want to know how far they are from the standard before committing budget. Everything is billed at a published day rate; there are no retainers and no fixed-price bundles. A readiness assessment for a single-site organisation with fewer than two hundred staff typically takes three to five days including reporting. He works from Cologne, travels to sites across Germany and the rest of the EU, and reviews documentation remotely. He will not consult on implementation for an organisation he expects to audit and keeps a written log of prior engagements to avoid that conflict. Reports are written in German or English.