ISO certification follows the same basic path for most management system standards, whether you are certifying to ISO 9001, ISO 14001, ISO 45001 or ISO 27001. This guide explains the steps, typical timeline and what drives the cost.
1. Prepare your management system
Your organisation implements the standard’s requirements, runs it for a period, completes an internal audit and holds a management review. Certification bodies cannot design your system for you – that would compromise their impartiality.
2. Application and quotation
You share your scope, sites, number of employees and the standards required. The certification body calculates the audit duration and quotes.
3. Stage 1 audit
A review of your documented system, scope and readiness. Any concerns are raised before Stage 2.
4. Stage 2 audit
An on-site assessment of whether the system is implemented and effective. Nonconformities must be corrected and accepted before a certificate can be issued.
5. Certificate, surveillance and recertification
The certificate is valid for three years. Surveillance audits take place at least once a year in years one and two, and a recertification audit is carried out before expiry.
How long does it take?
Once your system is running and an internal audit and management review are complete, Stage 1 and Stage 2 are usually completed within a few weeks to a few months, depending on readiness, how quickly nonconformities are closed and scheduling.
What affects the cost?
- Number of employees – the main driver of audit days under international accreditation rules.
- Number of sites and the activities at each.
- Complexity and risk of your processes.
- Number of standards – an integrated audit of several standards can reduce total audit time.
- Travel to remote or multiple locations.
Accredited certification
Accredited certification bodies are themselves assessed against ISO/IEC 17021-1 by a national accreditation body. Accredited certificates are widely recognised by clients and in tenders. Always check which accreditation covers your certificate – see how to verify an ISO certificate.
Transferring an existing certificate
A valid accredited certificate can usually be transferred to another certification body without starting again, subject to a pre-transfer review.
See ISO certification in the UAE or which ISO standard your business needs.
Need help? Call +971 58 815 0808 or email info@cibmars.com.