Documentation Packages · ISO · GRC · NQA-1 · CSA N299

Audit-ready documentation, built around how your organization actually works.

Pre-built policy, procedure and form libraries for ISO management systems, ASME NQA-1 and CSA N299, tailored to your operations by an HSMS consultant, from gap analysis to audit day.

  • Gap analysis first
  • Confidential document handling
  • Consultant-tailored
More than a template download

A document library is a starting point. An auditor wants to see your system.

Generic templates describe a generic company. Every HSMS package starts from a proven library, then a consultant fits it to your processes, people, records and risks, so what you hand an auditor is what you actually do.

Off-the-shelf templates

You download, you rewrite, you hope

  • Placeholder text you must rewrite for every process
  • No one checks clause coverage against your operations
  • Your existing documents are left out or duplicated
  • Gaps surface at the audit as nonconformities

HSMS Documentation Package

Proven library + your consultant, start to finish

  • Gap analysis against the standard and your current documents
  • Policies, procedures and forms written to your real processes
  • Clause-by-clause traceability so nothing is missed
  • Internal audit and NCR/OFI support before the registrar arrives
How it works

From gap analysis to audit-ready in five steps

Every engagement follows the same disciplined path, so you always know what comes next and what is expected of your team.

01

Gap Analysis

We assess your current practices and documents against every requirement of the standard and give you a clear gap report and fixed-fee scope.

02

Secure Document Sharing

You share existing manuals, procedures, forms and records using a method we agree together: your own platform, protected files or on-site review.

03

Consultant Engagement

Your HSMS consultant works with your process owners in focused sessions to confirm how work is really done, who owns it, and what records prove it.

04

Tailored Policies, Procedures & Forms

We complete your required documentation from our library, in your format, with your branding, revision control and approvals built in.

05

Audit Ready

Handover, staff awareness, an internal audit and NCR/OFI closure, then certification through our partner, Paquette & Associates.

Documentation packages

Choose your standard

Each package includes the full required documentation set plus consultant time to tailor it. Fixed-fee pricing is confirmed after your gap analysis.

All | Quality | Safety & Environment | Information & AI | GRC | Nuclear

Quality

Quality Management System

  • Quality manual, policy and objectives
  • Process maps and core procedures
  • Supplier, NCR and CAPA forms

Fixed-fee quote after gap analysis

Get Started

Quality

Medical Device QMS

  • Quality manual and device file structure
  • Risk, validation and design controls
  • Complaint and recall procedures

Fixed-fee quote after gap analysis

Get Started

Quality

Integrated Management System

  • One manual covering all three standards
  • Shared procedures, no duplication
  • Combined audit and review program

Fixed-fee quote after gap analysis

Get Started

Safety & Environment

Environmental Management System

  • Aspects and impacts register
  • Legal and other requirements register
  • Emergency preparedness procedures

Fixed-fee quote after gap analysis

Get Started

Safety & Environment

Occupational Health & Safety

  • Hazard identification and risk register
  • Incident investigation procedure
  • Psychosocial risk integration

Fixed-fee quote after gap analysis

Get Started

Information & AI

Information Security (ISMS)

  • ISMS policy set and Statement of Applicability
  • Risk assessment and treatment plan
  • Asset inventory and incident response

Fixed-fee quote after gap analysis

Get Started

Information & AI

AI Management System

  • AI policy and governance roles
  • AI risk and impact assessments
  • AI system inventory and lifecycle controls

Fixed-fee quote after gap analysis

Get Started

Information & AI

Business Continuity (BCMS)

  • Business impact analysis
  • Continuity and recovery plans
  • Exercise and testing program

Fixed-fee quote after gap analysis

Get Started

Governance, Risk & Compliance

Enterprise Risk Management

  • Risk policy, appetite and criteria
  • Enterprise risk register and heat map
  • Risk reporting for leadership and the board

Fixed-fee quote after gap analysis

Get Started

Governance, Risk & Compliance

Compliance Management System

  • Compliance obligations register
  • Compliance risk assessment
  • Speak-up and concerns procedure

Fixed-fee quote after gap analysis

Get Started

Governance, Risk & Compliance

GRC Governance & Policy Framework

  • Governance charter, roles and RACI
  • Policy on policies and document hierarchy
  • Control library and management reporting

Fixed-fee quote after gap analysis

Get Started

Governance, Risk & Compliance

Third-Party Risk Management

  • Vendor due-diligence questionnaires
  • Risk tiering and onboarding procedure
  • Ongoing monitoring and offboarding

Fixed-fee quote after gap analysis

Get Started

Nuclear

Nuclear QA Program (NQA-1)

  • QA program manual mapped to all 18 requirements
  • Procurement, design and inspection procedures
  • Commercial-grade dedication and records

Fixed-fee quote after gap analysis

Get Started

Nuclear

CSA N299 QA Program

  • QA program scaled to your N299 category
  • Requirement-by-requirement traceability
  • Bridge from an existing ISO 9001 system

Fixed-fee quote after gap analysis

Get Started
For the nuclear supply chain

NQA-1 and CSA N299 programs that hold up to licensee and owner audits

Suppliers to nuclear owners and licensees face quality assurance expectations well beyond ISO 9001. We build QA programs that address each requirement explicitly and bridge from an existing ISO 9001 system where you have one.

ASME NQA-1-2024 | CSA N299.1 · Category 1 | N299.2 · Category 2

N299.3 · Category 3 | N299.4 · Category 4 | ISO 9001 → N299 bridge

Inside every package

Everything your system needs to stand up in an audit

Manual & policies

Top-level manual, policy statements and objectives, approved by leadership.

Procedures

Clause-mapped procedures written to how your teams actually work.

Forms & records

Editable forms that generate the evidence auditors ask for.

Registers

Risk, legal, aspects, hazards, assets, all built from your context.

Traceability matrix

Top-level manual, policy statements and objectives, approved by leadership.

Internal audit kit

Clause-mapped procedures written to how your teams actually work.

Management review pack

Agenda, inputs and outputs that satisfy the standard.

Training & awareness

Staff awareness material so your people can explain the system.

Sharing your documents

Shared the way that works for you, agreed together up front

You don’t need to adopt a new tool. At kickoff we agree on a sharing method that fits your IT and confidentiality policies, and we follow it for the whole engagement.

    Your own platform: a shared folder on your SharePoint, OneDrive, Google Drive or similar. You grant access and you can revoke it at any time.

    Password-protected files, with the password sent separately, by phone or text.

    On-site or screen-share review for sensitive records that shouldn’t leave your premises.

    Confidential throughout. An NDA is available before anything is shared, only your consultant works with your files, and copies are returned or deleted at close-out on request.

Why HSMS

A practitioner on your side, not a download link

Senior ISO & GRC consultant

Hands-on experience across quality, safety, information security, AI governance and nuclear QA.

Published author

Our consultant has written on management systems and compliance. You get that same clear, practical thinking applied to your organization.

Certification partner

Accredited certification delivered by Paquette & Associates for a single, managed pathway.

Serving organizations across Canada

On-site or remote. We take pride in our remote and weekend services, so your project fits around your operations.

Questions

Frequently asked questions

Are these just templates?

No. Our library gives you a proven starting point, but every package is delivered with consultant time to tailor each document to your processes, records and risks. You receive a working management system, not a folder of blanks.

Why does every package start with a gap analysis?

It shows what you already have, what is missing, and how much tailoring is needed. That lets us give you an accurate fixed-fee quote and avoid rewriting documents that already work.

How do we share our existing documents with HSMS?

We agree the method with you at kickoff so it fits your IT policies. For example, granting your consultant access to a folder on your own SharePoint, OneDrive or Google Drive, sending password-protected files with the password shared separately, or reviewing sensitive records on-site or by screen share. An NDA is available before anything is shared.

How long does it take to become audit-ready?

It depends on the standard, your size and your starting point. Your gap analysis report includes a realistic timeline with milestones.

What format will we receive, and who owns the documents?

Editable Word and Excel files in your branding and numbering scheme. Once delivered, the documents are yours to maintain and revise.

Do you issue the certificate?

No. Certification must be independent. HSMS builds and prepares your system; accredited certification is delivered by our partner, Paquette & Associates.

Start with a Gap Analysis

Find out exactly where you stand against the standard and get a fixed-fee plan to close every gap.