Maintenance of ISO, HACCP and GDP systems keeps documentation, controls, training and corrective activities aligned with processes and current requirements.
Request an initial assessment
The ISO, HACCP and GDP system does not end with implementation, certification or the first successful control. ConsultHQ provides continuous support to companies in Montenegro through updating documentation, internal checks, CAPA activities, training and monitoring changes in standards and regulations. The system thus remains aligned with the actual business and ready for the next audit or inspection.
Most systems do not become obsolete all at once.
Employees change. A company introduces a new service, supplier or equipment, the procedure remains the same, and after a few months the documentation no longer describes the actual process.
The problem often becomes visible only before the audit.
Continuous maintenance reduces that risk and distributes the necessary activities through regular operations.
Not every company needs a full-time employee who only deals with the ISO, HACCP or GDP system.
Periodic professional support is often more rational for a small or medium-sized organization.
ConsultHQ can then help the responsible person or management to keep the system functional between two external checks.
Support may include:
We determine the volume according to the system and the risk of the company.
We do not introduce the same maintenance model to every client.
ISO standards change.
ISO 9001:2026 was published on September 16, 2026 and represents the current edition of the quality standard, while ISO 9001:2015 has been withdrawn.
ISO 14001:2026 is the current fourth edition of the environmental management system as of April 2026.
The company maintaining the system should not wait for the last moment of the transition period.
When a new version is released, we first assess its impact on the existing system.
Thus, changes can be made through regular maintenance instead of through a large project immediately before the certification audit.
The procedure should follow the business.
New equipment, location, supplier, service or organizational structure may affect existing documentation.
During maintenance, we review whether the change is relevant to the system.
If so, we update the associated procedures, forms or responsibilities.
If the existing document still fits the process, there is no need to change it just because a certain period of time has passed.
Thus, the documentation remains current without unnecessary rewriting.
The ISO system should provide information to management throughout the year.
That is why maintenance is not only about checking the date on documents.
With ISO 9001, support can include monitoring quality objectives, complaints, suppliers, non-conformities and corrective actions.
The ISO 14001 code may include environmental aspects, compliance obligations, objectives and results of relevant controls.
A periodic review shows where the system deviates from the defined mode of operation.
The company gets time to solve the problem before the external audit.
Internal audit is an important part of ISO system maintenance.
Not every process needs to have the same priority every year.
The current ISO 19011:2026 provides international guidelines for auditing management systems and further emphasizes a risk-based approach.
That's why we can adapt the audit program to previous findings, process changes and areas that carry a higher risk.
A process without previous problems and significant changes does not have the same profile as an area with repeated non-conformities.
Maintenance should follow that difference.
For industrial ISO 14001 clients covered by Regulation 75/2026, regulatory monitoring includes changes to integrated permits, relevant BAT conclusions, capacity thresholds and monitoring duties. Expansion or a technology change triggers a fresh review of the installation’s status. Outside permit scope, other genuinely applicable environmental duties still need attention. Read more about integrated permits for industrial installations.
For ISO 14001 clients with stationary sources, regulatory monitoring covers Air Protection Law 117/2026, Correction 120/2026 and applicable implementing rules, including changes during the transition. Equipment, fuel or capacity changes trigger a review of permits, measurements and records. See the Air Protection Law guide.
For food clients handling quick-frozen products, regulatory monitoring covers Regulation 98/2026 and the Rulebook on Temperature Monitoring in Transport and Storage (Official Gazette 122/2026, in force since 25 August 2026). Changes in rules, vehicles, cold stores or measuring systems trigger a review of records, responsibilities and deviation handling.
For food manufacturers using additives, regulatory monitoring includes changes to Regulation 112/2026, Rulebook 122/2026, the lists of authorised additives and their conditions of use. When a rule changes, we assess its effect on recipes, specifications, production and labels before changing HACCP documentation.
For food manufacturers, regulatory monitoring also covers food-contact material rules, including the Food-Contact Materials Regulation (91/2026) and applicable material-specific measures. When packaging, a supplier or the intended use changes, we assess the impact on specifications, supplier evidence and HACCP.
For food manufacturers, regulatory monitoring covers changes to microbiological criteria under Regulation 84/2026 and applicable maximum contaminant levels under Regulation 98/2026. We assess each change against the actual product and update only the affected part of HACCP, the testing plan or records where needed.
For food-sector clients, our regulatory monitoring specifically covers the Food Hygiene Regulation (91/2026): food safety culture, allergens, training and transport requirements where relevant. We connect changes to actual procedures and responsibilities rather than automatically rewriting HACCP.
The HACCP system becomes outdated especially quickly if the business changes.
The restaurant changes the menu. A hotel opens a new F&B outlet, while a manufacturer introduces a new recipe or production line.
Such changes may affect the existing hazard and control analysis.
For food-sector clients, we monitor the Law on Food Safety (59/2026), the Law on Official Controls (72/2026), the Food Hygiene Regulation (91/2026) and relevant 2026 secondary legislation. For each change, we assess whether it affects the actual process, HACCP plan, hygiene procedure, records or training, using the Administration’s official register to check current rules.
The regulation on food hygiene transposes Regulation (EC) 852/2004 with relevant amendments into the national framework.
That is why during maintenance we monitor both the process and the regulatory framework.
A system has more value when changes are made as they occur.
If the company works for months according to the new process, and the HACCP plan still describes the old one, there is a gap between practice and documentation.
During continuous support, we may review such changes periodically or after major business changes.
If necessary, we update the hazard analysis, HACCP plan, hygiene procedures or records.
Thus, the preparation for the official control becomes a check of the existing system.
Not an attempt to quickly fix outdated documentation.
The new procedure has no value if the relevant employee does not know that the way of working has changed.
That is why maintenance also includes assessment of training needs.
It can be onboarding a new employee.
It can be targeted training after a procedure change, an audit finding or the introduction of new equipment.
With HACCP, the continuous maintenance of competencies also supports the culture of food safety.
With an ISO system, it helps that the process is not dependent on just one person who participated in the initial implementation.
In the case of drug distribution, system maintenance has additional regulatory weight.
CInMED states that legal entities and individuals who carry out the wholesale distribution of medicines must act according to the Guidelines of Good Practice in Distribution, and the GDP certificate is issued after verifying the fulfillment of the prescribed conditions.
The current CInMED GDP guidelines were published on July 22, 2026, and standardized GDP inspection documents were also published during August.
That is why GDP documentation and processes should be maintained between inspections.
The system should not be activated until a regulatory check is approaching.
GDP regulatory monitoring covers CInMED guidelines and inspection documents, current authorisation and certificate forms, the post-inspection CAPA process and changes to wholesale-authorisation conditions. When a rule, form or process changes, we assess the effect on SOPs, records, training, contracts and any regulatory application needed.
Wholesale has multiple processes that require continuous monitoring.
Support may include:
CInMED is currently publishing a special instruction and a harmonized CAPA plan form after the GDP inspection.
That is why the maintenance of the CAPA system should have a clear regulatory trace.
Not just an internal table of open tasks.
The audit finding is not closed just because the implementation date is entered.
It is necessary to implement the agreed activity and, where relevant, check whether the solution has produced the expected result.
During maintenance, we can monitor open activities together with responsible persons.
This prevents the same finding from being repeated over several audit cycles.
Especially with GDP and ISO systems, the recurrence of the same problem often indicates that the previous corrective action did not solve the real cause.
For biodiversity-sensitive projects and locations, regulatory monitoring includes Nature Protection Law 117/2026, the current status of protected areas and development of the ecological network, including Natura 2000. Duties are checked against the actual location and activity. See our nature-protection guide.
For innovative-food manufacturers, regulatory monitoring covers changes to Authorized Novel Food List 127/2026 and the conditions attached to relevant ingredients. Changes then feed into raw-material approval, recipes and labels. This regime is not needed by every HACCP client. See our novel-food guide.
For fortified-food clients, regulatory monitoring covers changes to Annex 2 of Regulation 47/2026 and relevant EU chemical-form lists for export markets. We connect changes to premixes, recipes, suppliers and labels; ordinary HACCP clients without fortification do not need this review. See our guide to vitamins and minerals.
Regulatory monitoring for ISO 14001 clients with relevant environmental risks also covers the Law on Liability for Environmental Damage as amended in 114/2026. When the liability framework changes, we assess its effect on the obligations register, incident scenarios, preventive measures, the response plan and remediation records.
For ISO 14001 clients handling chemicals, regulatory monitoring covers the Law on Chemicals 114/2026 and published secondary rules, including Rulebook 136/2026 on classification and labelling and Rulebook 137/2026 on hazardous-chemical storage. We assess which changes actually affect the client’s inventory, SDS, storage and operational controls.
Dates of entry into force: Rulebook 136/2026 — 26 September 2026; Rulebook 137/2026 — 29 September 2026.
Monitoring regulatory changes does not mean sending every new regulation to the client.
The company needs an answer to a practical question: does something change for our business?
That's why we first assess relevance.
A new provision may require a change in procedure.
May require new training or supervision.
But it can also be completely irrelevant to the company's specific process.
Such assessment reduces regulatory noise and allows the team to focus on what really requires a response.
For relevant ISO 14001 clients, regulatory monitoring includes the Waste Management Law 34/2024 as amended by 128/2026, development of the packaging EPR programme and changes to implementing rules. If a product, supplier, waste collector or process changes, we assess the effect on EPR data, records and the waste-management plan, including the review deadline where it applies.
Regulatory monitoring for ISO 14001 clients includes developments under the Climate Change Law 149/2025 and 70/2026 and Regulation 116/2026 only insofar as they may affect the business. For covered operators we track changes in capacity, permits, monitoring plans, records and deadlines. For businesses outside scope we assess climate risks and market requirements without inventing emissions-trading duties.
When an ISO 14001 client changes an installation, expands capacity or starts a new project, change management should review environmental permits and any need for EIA screening under the current rules, including the Law amendment 70/2026 and Regulation 85/2026. If a decision sets conditions, we track whether they are linked to operational controls. This review depends on the project, not simply on holding ISO 14001 certification.
Continuous maintenance should not be based on someone remembering the audit a few weeks before the deadline.
We can organize activities through a maintenance plan.
It can include the dates of internal audits, training, goal reviews, documentation checks and preparations for external checks.
With HACCP, the plan can be linked to the season or production changes.
At GDP with self-inspections, qualifications and other relevant processes.
The exact rhythm is determined by the system.
Not a universal calendar.
Not every organization needs the same level of engagement.
A periodic expert review of the system may suit a company.
The other needs more frequent support due to a complex regulatory environment or a greater number of changes.
We can organize the engagement according to the agreed program or according to specific needs.
Examples are a new audit, regulatory change, CAPA, new process or documentation change.
Thus, the company does not pay for continuous activity that it does not need.
Depending on the ISO, HACCP or GDP system, support may include:
The scope is defined according to the state of the system.
The goal is not to create permanent consulting dependency.
The client receives a system that remains up-to-date even between two external checks.
In practice this means:
The greatest value is predictability.
The company does not start each new check by trying to determine the state of its system.
External professional support can help keep the system organized.
But the ownership of the processes must remain with the company.
Employees should use procedures, management makes decisions, and responsible persons manage their areas.
ConsultHQ supports that system through expert review, documentation, audit and consulting.
We are not creating a model where a company cannot function without a consultant.
This is especially important with the GDP system and other regulated activities.
A company may not need continuous support in all areas.
Maybe she just needs an annual internal audit and occasional documentation updates.
Another organization may need a much more active model due to regulatory changes, new locations, or frequent CAPA activities.
That's why before defining the maintenance, we review the current state.
Based on that, we determine the realistic scope and priority activities.
Accumulated changes create more work.
If the documentation has not followed the business for a year or two, outdated procedures, incomplete training and open corrective activities appear at the same time before the audit.
Then the system requires a larger project in a short period.
Continuous support distributes that work.
Problems are solved while they are smaller and while the organization still has enough time for quality correction.
A company that is just completing an ISO implementation has different needs than a restaurant that has been maintaining HACCP for several years.
GDP wholesale has additional regulatory requirements and a different risk profile.
ConsultHQ first reviews the system, existing responsibilities and subsequent obligations.
Then we define which activities make sense to remain within the company, and where external professional support is useful.
The goal is for the ISO, HACCP or GDP system to remain a living part of the business — without periodically returning to a state of emergency preparation before an audit or inspection.
An initial assessment helps us define scope and next steps based on your actual business.
Request an initial assessment