Glenn; that's exactly what I tried to describe, apart from you certifying everything internally as well (which is good).
To be honest, I think that's how every company should set it up...