From gap analysis to certificate – without the guesswork.
We guide quality, environmental, safety, and cybersecurity teams through ISO, CMMC, and more. End-to-end, on time, on the first audit — and compliance that supports business growth.
Compliance, simplified.
Three things every certification project needs — and the three things we lead with.
Audit-ready systems
Documented, lived-in management systems — not paperwork built the night before the audit.
Management systems + cybersecurity, one partner
Most consultancies pick a lane. We bridge ISO management systems and cybersecurity frameworks under one roof.
Decades of field experience
Our lead consultant has conducted 300+ audits across 22 countries. We’ve sat on both sides of the table.
A clearer, faster path to compliance.
Whether you make products or process data, we cover the standards your customers ask about.
For manufacturers, medical-device makers, and regulated operators
You ship physical products. Your customers expect documented quality, environmental control, and safe operations. We help you build management systems that actually run the business — not just ones that pass the audit.
- ISO 9001 — quality management
- ISO 14001 — environmental management
- ISO 45001 — occupational health & safety
- ISO 13485 / GMP — medical devices
For DoD contractors, SaaS companies, and regulated services
You handle data your customers and regulators care about. We translate frameworks into operational controls — with a clear path to certification.
- CMMC / NIST 800-171 — defense supply chain
- ISO 27001 — information security management
- Internal audits — ongoing surveillance & readiness
What we do
Fifteen service areas across four practice groups. One way of working: gap-find, build, audit, certify.
Quality & Operations
ISO 9001
The world’s most-recognized quality management standard, applicable across industries.
Learn moreISO 14001
Environmental management systems for waste, resource use, compliance, and continual improvement.
Learn moreISO 45001
Occupational health and safety management systems that reduce risk and protect workers.
Learn moreCybersecurity, Data & Technology
ISO 27001
The international standard for information security management systems.
Learn moreCMMC / NIST 800-171
The cybersecurity baseline for DoD contractors and the defense industrial base.
Learn moreSOC 2
Security compliance for SaaS and cloud companies — the report enterprise customers require.
Learn moreISO 42001
Artificial intelligence management systems for responsible, governed, and trustworthy AI.
Learn moreISO 20000-1
IT service management systems for reliable, customer-aligned technology services.
Learn moreAerospace
AS9100
Aerospace quality management — ISO 9001 plus 100+ aerospace-specific requirements for aviation, space, and defense.
Learn moreAS9110
Quality management system for aviation Maintenance, Repair & Overhaul (MRO) organizations.
Learn moreAS9120
Quality management system standard for aerospace parts distributors and stockists.
Learn moreNADCAP
Special process accreditation for heat treatment, welding, NDT, and other aerospace-critical processes.
Learn moreFAA Regulatory Support
Compliance support for FAA repair station certification (14 CFR Part 145), airworthiness, and regulatory readiness.
Learn moreMedical & FDA
GMP / ISO 13485
Medical-device quality and good manufacturing practice for FDA and international markets.
Learn moreMDSAP / HIPAA
Regulatory compliance for medical device manufacturers and healthcare organizations.
Learn moreRCA / CAPA
Root cause analysis and corrective action for FDA-regulated and ISO-certified organizations.
Learn moreSupply Chain Assurance
Supplier Assessment & Qualification
Structured evaluation programs to qualify new suppliers and maintain your approved vendor list.
Learn more2nd Party Audits
2nd party supplier audits to verify your supply chain meets your quality and compliance requirements.
Learn moreSupplier Escalations
Structured escalation process when a supplier’s quality or delivery performance falls below your thresholds.
Learn moreAudit, Advisory & Training
Gap Analysis
Know exactly where you stand before your certification audit — prioritized, plain-English findings.
Learn moreInternal Auditing
On-demand internal auditors who keep your management system audit-ready year-round.
Learn moreTraining Programs
ISO internal auditor training, QMS awareness, and RCA/CAPA workshops for your team.
Learn moreHow we work
Every engagement follows the same four-step path — tailored, not formulaic.
-
1
Gap analysis
Where you are versus where the standard says you need to be — clear, prioritized, no fluff.
-
2
Implementation & documentation
We build the management system with you — processes, records, training, controls.
-
3
Internal audit & CAPA
We run the dress rehearsal: audit your system, find the issues, drive corrective actions.
-
4
Certification audit support
We’re in the room — preparing your team, answering auditor questions, closing findings.
Led by experts who have done this 300+ times.
Our lead consultant has conducted more than 300 audits across 22 countries and 150+ manufacturers, with deep certifications in quality and operations.
Norma Via Group is a young firm built on long experience. We bring a triple perspective to every engagement — manufacturer, auditor, and consultant — so clients know what to build, what auditors expect, and how to pass with confidence.
More about our team
Trusted by quality and operations leaders.
Short excerpts from professional recommendations across quality, manufacturing, supplier management, and operations.
Ready to take control of your quality and security?
Tell us a bit about your company and we’ll set up a free 30-minute call.