DrDoctor has expanded its ISO management system with ongoing support from Assent, building on its existing ISO 27001 Information Security Management System to integrate ISO 9001 Quality Management and ISO 14001 Environmental Management.

About the Client

DrDoctor’s award-winning technology and expertise is transitioning the NHS into a hybrid model of healthcare, sustaining impact and ensuring care systems meet growing demand without sacrificing quality. They work with more than 70 NHS Trusts and health boards, support over 35 million patients, and power more than 140 million appointments every year.

About the Project

DrDoctor initially approached Assent to support the implementation of an ISO 27001 Information Security Management System. Assent worked with the DrDoctor team to develop and implement the management system, supporting the organisation through to successful ISO 27001 certification in 2024.

Following certification, Assent continued to support DrDoctor with the delivery of internal audits to help maintain compliance and support continual improvement.

In 2026, following internal changes within the organisation, DrDoctor asked Assent to provide additional support in managing its existing ISO 27001 system and to expand its management system to incorporate ISO 9001 Quality Management and ISO 14001 Environmental Management.

The project therefore developed into the creation of a more comprehensive Integrated Management System, bringing the requirements of all three ISO standards together within a coordinated framework.

Our Approach

Assent consultant Garry Renton worked closely with the DrDoctor team throughout each stage of their ISO journey.

Building on the existing ISO 27001 management system, Assent helped DrDoctor review and strengthen its processes while incorporating the additional requirements of ISO 9001 and ISO 14001. This included supporting the integration of quality, environmental, and information security requirements into a practical management system that could be effectively maintained by the organisation.

Assent also provided ongoing management system consultancy and internal audit support, helping DrDoctor prepare for its external certification and surveillance audits.

Outcome

With Assent’s support, DrDoctor has successfully progressed from implementing a standalone ISO 27001 Information Security Management System to operating an Integrated Management System covering information security, quality, and environmental management.

Following its original ISO 27001 certification in 2024, DrDoctor was recommended for continued ISO 27001 certification following its surveillance audit in June 2026. In July 2026, the organisation also successfully completed its ISO 9001 and ISO 14001 certification audits and was recommended for certification to both standards.

With its three management systems now integrated, DrDoctor is well positioned to manage its ISO requirements more efficiently. Looking ahead, its ISO 27001 certification is due for renewal in 2027, with the intention of further aligning all three standards so they can ultimately be assessed through a single integrated annual audit.

Consultant Comment

“It’s been great to continue supporting DrDoctor as their management system has developed. Having been involved in supporting the original ISO 27001 implementation and certification, I’ve had the opportunity to continue working with the team as the system has evolved and their ISO requirements have expanded.

We’ve been able to build on those foundations and integrate ISO 9001 and ISO 14001 into the existing management system. It’s been really rewarding to see the team embrace the expanded system and successfully progress through the recent audits.”

— Garry Renton, Assent