Frequently asked questions
Direct answers on standards, certification, costs, process and working with the network. Every answer links to the page that develops it.
General
What is Export Lab?
Export Lab is the private network of independent management systems consultants in Angola and a technical brand of Angola Global Hub. It brings together specialists in quality, environment, safety, energy, information security, compliance, ESG and risk, and connects each company to the right specialist for its challenge.
How are Export Lab and Angola Global Hub related?
Export Lab is the specialised technical brand of Angola Global Hub, the exclusive DQS Channel Partner in Angola. Contracting is done through Angola Global Hub.
Where in the country do you work?
The network has consultants based in several provinces and works on projects across the country, on site or in a hybrid arrangement, according to the scope agreed in the proposal.
Do you work in English?
Yes. Documentation, internal audits and training can be delivered in Portuguese or English, according to the needs of the organisation and its international clients.
ISO standards
Which standards and frameworks do you cover?
The network covers more than 20 standards and frameworks, including ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO 27001, ISO 27701, ISO 50001, ISO 37001, ISO 37301, ISO 22301, ISO 20000-1, ISO 21001, ISO 31000 and ISO 26000.
Which standard is right for my company?
It depends on the problem to solve and on market requirements. Quality and processes point to ISO 9001, environmental impact to ISO 14001, people's safety to ISO 45001, information and data to ISO 27001. When several requirements apply at once, an integrated system is the way.
Can we implement several standards at once?
Yes. Management system standards share the same high-level structure, which allows an integrated system with common policy, processes, internal audits and management review, reducing duplicated documentation and effort.
What changed in ISO 9001 versus older versions?
The emphasis is on organisational context, leadership, risk-based thinking and performance rather than documentation for its own sake. A current system is lighter on paperwork and more demanding on evidence of results.
Certification
Is ISO certification mandatory in Angola?
No. ISO certification is voluntary. In practice it becomes a commercial requirement when tenders, international clients or supply chains demand it as a qualification condition.
Who issues the certificate?
The certificate is issued by an independent certification body. Export Lab prepares and implements; third-party certification is carried out by DQS. Preparing and certifying are separate functions.
What are the steps to the certificate?
Diagnosis, system design, implementation, training and awareness, internal audit, management review and finally the two-stage certification audit carried out by the certification body.
How long is the certificate valid?
Management system certificates run on a three-year cycle, with annual surveillance audits and a recertification audit at the end of the cycle. Keeping the certificate requires keeping the system alive.
What if the audit finds non-conformities?
Non-conformities are classified and addressed through a corrective action plan with defined deadlines. Serious preparation, with a prior internal audit, exists precisely to avoid major non-conformities.
Costs
How much does ISO certification cost?
There are no list prices. Total cost has three components: preparation consulting, the certification audit charged by the certification body, and the internal effort of your team. Every proposal states scope, deliverables, timeline and fees before any commitment.
What makes the proposal value vary?
Size and number of sites, process complexity, number of standards, current documentation maturity, training needs, and the demands of the sector or end client.
Is requesting a proposal free?
Yes, it is free. Requesting a proposal carries no cost and no commitment.
Process
What happens after I contact you?
A technical lead replies, we clarify the challenge and the starting point, we select the right specialist from the network, we present a written proposal and, with your agreement, we start delivery with follow-through to the end.
How long does implementing a management system take?
It depends on the standard, size and current maturity. What most affects the calendar is the availability of the internal team and the state of existing documentation. The timeline is always in the proposal, with a schedule.
Who chooses the consultant?
Export Lab proposes the specialist with the right profile, credentials and availability. The final decision is yours and you can ask for alternatives before proceeding.
What effort is asked of our team?
An internal counterpart is needed, plus process owners taking part in interviews, document validation, training and internal audit. Systems built without internal involvement do not survive the first cycle.
Consulting and audit
What services do you provide?
Management systems consulting and implementation, internal and supplier audits, training, compliance, ESG, risk management and cybersecurity, among other areas in the catalogue.
Can you do just an internal audit?
Yes. An internal audit can be contracted on its own, either as preparation for the certification audit or as the system's own annual requirement.
Do you audit suppliers?
Yes. Second-party audits of suppliers and subcontractors, with agreed criteria and a report including an action plan.
Can the same consultant prepare and certify?
No. Whoever prepares cannot certify. That separation is a rule of independence and is what gives the certificate value with clients and regulators.
Training
What training do you provide?
Training on standard interpretation, internal auditor, team awareness, and specific topics such as HACCP, information security, compliance and occupational health and safety.
Is training delivered at our premises?
It can be on site at your premises, in a classroom or remote, depending on the number of participants and how geographically dispersed the teams are.
ESG and compliance
Where do you start with ESG?
With a diagnosis of what already exists and a materiality analysis, to identify the environmental, social and governance topics that really affect the business and those banks, investors and large clients will ask about.
What makes a compliance programme defensible?
Policies approved at the highest level, documented risk assessment, proportionate controls, a whistleblowing channel, recorded training and monitoring with evidence. Frameworks such as ISO 37301 and ISO 37001 provide the structure.
How is bribery risk with partners handled?
With risk-proportionate due diligence, anti-bribery contractual clauses, payment controls and a gifts and hospitality register, in line with ISO 37001.
Do you help structure risk management?
Yes. Risk identification, assessment and prioritisation, assignment of controls and owners, and integration into management's decision cycle, based on ISO 31000.
Cybersecurity
Do we need ISO 27001 or technical measures?
They solve different problems. Technical measures protect systems; ISO 27001 organises information security management and proves to third parties that governance, risk and control exist.
What cybersecurity support do you provide?
Maturity assessment, risk analysis, policies and procedures, incident response, team awareness and preparation for ISO 27001 and ISO 27701.
Sectors
Which sectors do you serve?
Industry, agribusiness, construction and infrastructure, oil and gas, energy, mineral resources, food industry, healthcare, banking and financial services, logistics and transport, trade and retail, public sector, international organisations and professional services, among others.
Which standards make sense in the food industry?
ISO 22000 with HACCP is the basis for hazard control in the food chain, often combined with ISO 9001 and, in energy-intensive plants, ISO 50001.
And in construction, oil and gas?
In these sectors the usual requirement combines ISO 9001, ISO 45001 and ISO 14001, because project owners and operators assess quality, people's safety and environmental performance together.
Our sector is not listed. What now?
Tell us, because the network is broad and multi-sector. If there is no direct coverage, we say so clearly instead of taking the work.
DQS
What is DQS?
DQS is an international management systems certification body with auditors worldwide. In Angola, Angola Global Hub is its exclusive Channel Partner.
Is the DQS certificate recognised outside Angola?
Yes. It is international management systems certification, which matters for companies that export or work within international supply chains.
Must we certify with DQS?
No. The choice of certification body is the company's. Export Lab's preparation work is valid for any accredited body.
For consultants
Is there any cost to join the network?
No. Joining the Export Lab network has no membership fees, dues or monthly charges.
Are there commissions on my fees?
No commissions are deducted from your work. We originate and contract the clients; you deliver the expertise and receive the agreed amount.
Do I have to work exclusively?
No. We do not require exclusivity. The network brings you additional projects; it does not tie you down.
How do I apply?
You send your CV and areas of expertise, we talk, we formalise the collaboration agreement, you get a network profile and start receiving project invitations.
What levels exist in the network?
Associate Consultant, Senior Consultant and Lead Auditor on the management systems track, Specialist in specific technical areas, and Area Partner above those.
Did not find your answer?
Tell us your company's challenge and a technical lead will reply.