How ISO Certification Works
A step-by-step guide to understanding the ISO certification process for your organization.
Important: Certification vs. Training
ISO certification applies to organizations, not individuals. A company becomes "ISO certified" after an accredited certification body audits and verifies its management system. Individuals complete training and receive training certificates—this is different from certification.
The Certification Journey
From initial planning to certified status
Choose Your Standard
Identify which ISO standard(s) align with your business goals and customer requirements. Common choices include ISO 9001 for quality, ISO 14001 for environment, and ISO 45001 for health & safety.
Gap Analysis
Assess your current management system against the requirements of the chosen standard. This identifies what you already have in place and what needs to be developed or improved.
System Development
Develop the policies, procedures, and processes required by the standard. This includes documentation, training, and establishing the necessary controls.
Implementation
Put your management system into practice. Train your team, run the processes, and collect evidence that your system is working as intended.
Internal Audit
Conduct internal audits to verify your system meets the standard requirements. Address any nonconformities before the certification audit.
Management Review
Top management reviews the performance of the management system, audit results, and opportunities for improvement. This is required by all ISO standards.
Stage 1 Audit
A certification body reviews your documentation and assesses readiness for the full certification audit. Any issues are identified for correction.
Stage 2 Audit
Comprehensive audit of your management system implementation. Auditors verify that your processes work in practice and meet all requirements.
Certification Decision
Based on audit findings, the certification body makes a decision. If successful, your certificate is issued, valid for 3 years.
Surveillance & Renewal
Annual surveillance audits ensure you maintain the system. After 3 years, a recertification audit renews your certification.
Typical Timelines
3-6
months for small organizations with existing processes
6-9
months for medium organizations or first-time certification
9-12+
months for large or complex organizations