ISO, HACCP and GDP implementation services
Choose full implementation, gap analysis, documentation, training or an internal audit. ISO, HACCP and GDP consulting for businesses in Montenegro.
Choose full implementation, gap analysis, documentation, training or an internal audit. ISO, HACCP and GDP consulting for businesses in Montenegro.
ISO standards, HACCP and GDP translate quality and compliance requirements into concrete business processes. In Montenegro, their application depends on the activity, regulatory obligations and customer requirements. A properly set up system reduces improvisation, regulates responsibilities and prepares the organization for inspections, audits and independent certification.
A company can have a quality product, an experienced team and stable sales, yet have processes that are difficult to prove and repeat. The problem usually becomes visible only when a request from a large customer, tender, inspection or announcement of an external audit arrives.
Then the records are missing. Responsibilities are not clear. Procedures exist on paper, but employees do not use them in the same way.
A good compliance system solves exactly that problem. ConsultHQ connects the requirements of the standard with the way the company actually works, so that the documentation follows the business instead of complicating it further.
The proposal defines sites, processes, ConsultHQ’s activities, your team’s responsibilities and expected deliverables. Independent certification is arranged separately; GDP inspection and official controls remain with the competent authority.
Not every company needs the same standard. The right choice depends on the business, product, regulatory framework, customers and risks that the organization must control.
When choosing and maintaining the system, we check the current editions of the ISO standard, the relevant EU requirements and the valid regulations of Montenegro for the specific activity.
ISO 9001 sets the framework for a quality management system. It is used by manufacturing, service, construction, logistics, trading and other organizations that want more consistent processes and measurable responsibilities.
The current international edition is ISO 9001:2026, published in September 2026. It maintains a process approach and focus on continuous improvement, with additional emphasis on leadership, quality culture, risk and opportunity.
For the company, this does not mean creating a parallel administrative system. The goal is that sales, procurement, realization of services or production, quality control and resolution of complaints work according to a clear model.
ISO 14001 is used by organizations that want to systematically manage waste, resources, emissions, incidents and other aspects of their environmental impact.
ISO 14001:2026 represents the current edition of this international standard. The standard helps an organization to identify its significant environmental aspects, monitor commitments and set measurable targets to improve performance.
It has special value for manufacturing, construction, energy, logistics and companies that work with international partners or supply chains.
HACCP is based on the identification of hazards and the control of process points where food safety can be compromised.
In Montenegro, the Law on Food Safety (59/2026) requires covered food businesses to establish, apply and continuously maintain procedures based on HACCP principles. The Law on Official Controls (72/2026) governs compliance checks, while the Food Hygiene Regulation (91/2026) sets specific hygiene and training requirements. We therefore review actual practice, responsibilities and records, as well as the HACCP plan.
This is why HACCP is not just a restaurant issue. It is applied through the production, processing and distribution of food where the law foresees this obligation.
Good distribution practice, or GDP, protects the quality of medicines during reception, storage, transport and delivery.
CInMED states that legal and natural persons who carry out the wholesale distribution of medicines must act according to the guidelines of Good Practice in the distribution of medicines. The Institute carries out checks and issues a GDP certificate when the legal requirements are met.
This means that GDP requires much more than a neat warehouse. The system includes responsibilities, qualification of suppliers and buyers, temperature regimes, transport, deviations, complaints, product recall, CAPA measures and controlled documentation.
Implementation starts with understanding the existing business, not writing procedures from a template.
The first step is gap analysis. We compare the existing processes, documentation and practice with the requirements of the standard or regulatory system that the company needs to introduce.
After that, we define the scope of the system and responsibilities. We clearly determine which locations, processes, employees and activities the system includes.
Next comes the creation or adaptation of the documentation. Procedures, forms, records and instructions must correspond to the real workflow, because a document that employees cannot apply has no operational value.
The training then connects the documentation with the people who use it. Employees need to understand not only what they have to do, but also when, how and why a particular record is created.
Before the independent verification, an internal audit is carried out. It shows where the system still deviates from the requirements and gives room for the organization to correct deficiencies before external evaluation.
An ISO standard and a legal obligation are not the same thing.
ISO 9001 is a voluntary quality management system, although certification can become a business requirement through a tender, contract, customer request or supply chain. ISO states that certification to ISO 9001 is not mandatory in itself.
With certain sectoral systems, the situation is different. The regulations on food safety in Montenegro require the application of procedures based on HACCP principles at the covered entities, while the wholesale distribution of medicines is subject to the requirements of good distribution practice.
That's why choosing a system should not start with the question of which certificate the company wants. First, it is necessary to determine what the company does, what risks it manages and what requirements it must or wants to fulfill.
The consultant helps the company to build and implement the system. The certification body independently assesses whether the system meets the requirements of the corresponding standard.
This separation preserves the impartiality of the process.
The accreditation body of Montenegro manages the system of accreditation of conformity assessment bodies. The MEST EN ISO/IEC 17021-1 framework is relevant for certification bodies that evaluate management systems.
ConsultHQ therefore prepares the organization for verification, but does not replace an independent certification or regulatory body.
Such an approach is also important for the company itself. The goal is not to "pass the audit" once, but to create a system that can function between two audits.
A company applying multiple standards does not need separate systems for each requirement.
ISO management systems use a compatible structure. The organization can therefore link the management of documentation, risks, competencies, internal audits, corrective measures and management reviews.
A manufacturing company, for example, can link ISO 9001 and ISO 14001. A company in the food sector can link quality processes with HACCP controls.
Thus, one operating system with clearly separated specific requirements is created. Employees use fewer duplicate forms, while management receives more transparent data.
Companies often delay implementation because they expect a lot of procedures, forms and additional administration.
That risk exists when the system is built from universal templates. The documentation then describes how the company is supposed to work, not how the process actually works.
A practical system goes the other way. We first map the process, risks and responsibilities, then document only what the requirement, control or evidence actually requires.
This reduces employee resistance. It also facilitates system maintenance after initial implementation.
Compliance is not a one-time project.
A change in employees, new services, new equipment, a change in location or customer requirements may affect existing procedures. The system therefore requires periodic checks, updating of documentation and monitoring of corrective measures.
Internal audit provides a structured overview of the situation. Trainings maintain employee competencies, while periodic review shows whether the system continues to support business goals.
For companies that do not have an internal quality function, system maintenance can also be organized as continuous professional support.
Not every organization needs to start with a full implementation.
If the system already exists, a gap analysis can show which elements need to be fixed. A company that is preparing for an audit can first check the documentation and practice through an internal audit.
With the new system, a meaningful start is the analysis of activities, regulatory requirements and customer expectations. Only after that, the scope of the project, the necessary documentation, training and the sequence of activities are determined.
That way you avoid introducing a standard that doesn't solve a real business problem or paying for documentation that the team won't use later.
Based on the initial assessment, ConsultHQ can define which system suits your business, where there are deviations and what is the realistic next step towards implementation, regulatory verification or independent certification.
An initial assessment helps us define scope and next steps based on your actual business.
Request an initial assessment