How certification works: from standard to certificate

You want to become ISO certified. But as soon as you start exploring your options, the terminology can make your head spin. Accreditation, certification bodies, RvA, IAF - who does what? And why should it matter to you?

In this article I explain the entire chain. From international standards to the certificate on your wall. No jargon, just clear explanations. So that you know what you are buying when you choose a certifier.

Why certify at all?

Back to basics. An ISO certificate is official proof that your company meets certain quality requirements. Consider ISO 9001 for quality management or ISO 27001 for information security.

That certificate doesn’t just hang on the wall. It means:

• Customers trust you more quickly - you have demonstrated that your processes are in order
• You are eligible for tenders - many clients require an ISO certificate
• You work more structurally - the certification process forces you to record processes

But who actually decides whether your company meets those requirements? And who checks whether the person is judging objectively?

That’s where the certification chain comes into play.

The chain in four layers

The certification world is structured like a pyramid. Each layer controls the layer below it. This creates a system of checks and balances.

1. ISO: the standards maker

At the top is the International Organisation for Standardization - better known as ISO. This is not a company and not a government, but a partnership of more than 160 countries.

ISO develops the standards that you will soon have to meet. They do not decide for themselves what “good quality” is, but bring together experts from all over the world to reach a consensus. The result: international standards such as ISO 9001, ISO 14001 and ISO 27001.

Important: ISO itself does not certify anyone. They just make the rules of the game.

2. Accreditation bodies: the supervisors

Who checks whether certifiers are doing their work properly? These are the accreditation bodies.

In the Netherlands this is the RvA - the Accreditation Council. They assess whether a certifier:

• Is expert enough to carry out audits
• Works independently and impartially
• Meets strict quality standards

The word “accreditation” literally means: giving confidence. The RvA gives confidence to certifiers by checking whether they are doing their work properly.

3. Certifiers: the auditors

This is the layer that you as a company have to deal with. A certifier carries out the actual audit at your company.

In the Netherlands you can choose from almost 50 accredited certifiers, from large international parties to smaller specialized agencies.

A certifier:

• Assess whether your company meets the standard
• Conducts annual surveillance audits
• Issues the certificate (and can also revoke it)

4. Your company: the certificate holder

You are at the bottom of the pyramid. If you pass the audit, you will receive a certificate that is valid for three years. In the meantime, you will receive surveillance audits - annual checks to check whether you still meet the requirements.

Visual: the entire chain

┌─────────────────────────────────────┐
│ ISO │
│ Creates international standards │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│ Accreditation bodies │
│ (RvA, UKAS, DAkkS) │
│ Check the certifiers │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│ Certifiers │
│ (DNV, Kiwa, BSI, TÜV, etc.) │
│ Conduct audits at companies │
└──────────────┬──────────────────────┘
               │
┌──────────────▼──────────────────────┐
│ Your company │
│ Receives the ISO certificate │
└─────────────────────────────────────┘

Each layer controls the layer below it. ISO sets the rules, accreditation bodies check the certifiers, certifiers check you.

Why accreditation matters

When choosing a certifier, accreditation is an important factor. Not every party that issues certificates is accredited.

A certificate from a non-accredited party:

• Is not always recognised by customers or contracting authorities
• Has less value abroad
• Provides no guarantee that the audit was objective

With an accredited certificate you can be sure that:

• The certifier meets strict quality requirements
• Your certificate is internationally recognised
• There is independent supervision of the audit process

Frequently asked questions

Does my certifier have to be accredited by the RvA?

Not necessarily. An accreditation by UKAS, DAkkS or another recognised foreign accreditation body is just as valid. These organisations recognise each other’s accreditations through the IAF (International Accreditation Forum). Your certificate will then be accepted worldwide.

What if my customer specifically requires an RvA certificate?

This occurs with some Dutch tenders or clients. In that case, check in advance whether your certifier is accredited by the RvA. Most major certifiers have accreditations from multiple bodies.

Can I see if a certifier is accredited?

Yes. You can search for accredited organisations on the RvA website. Foreign accreditation bodies also have public registers. Or you can ask the certifier yourself for their accreditation certificate - they must be able to show this.

What is the difference between certification and accreditation?

• Certification is what you get: a certificate that proves that you meet a standard
• Accreditation is what the certifier receives: recognition that they are authorized to certify

Simply put, accreditation is the “certificate for the certifier”.

How do I know if a certificate is real?

You can verify certificates via CertSearch from the IAF. This is an international database in which accredited certifiers register their issued certificates.

In summary

The certification chain is a system of mutual control:

1. ISO makes the standards
2. Accreditation bodies (RvA, UKAS) monitor the certification bodies
3. Certifiers (DNV, Kiwa, etc.) check you
4. You get the certificate

By choosing an accredited certifier, you can be sure that your certificate has value. It is recognised by customers, contracting authorities and abroad.