You want to become ISO certified. But as soon as you start exploring your options, the terminology can make your head spin. Accreditation, certification bodies, the Dutch body, IAF - who does what? And why should it matter to you?
In this article I explain the entire chain. From international standards to the certificate on your wall. No jargon, just clear explanations. So that you know what you are buying when you choose a certification body.
Why certify at all?
Back to basics. An ISO certificate is official proof that your company meets certain quality requirements. Consider ISO 9001 for quality management or ISO 27001 for information security.
That certificate doesn't just hang on the wall. It means:
- Customers trust you more quickly - you have demonstrated that your processes are in order
- You are eligible for tenders - many clients require an ISO certificate
- You work more structurally - the certification process forces you to record processes
But who actually decides whether your company meets those requirements? And who checks whether the person is judging objectively?
That's where the certification chain comes into play.
The chain in four layers
The certification world is structured like a pyramid. Each layer controls the layer below it. This creates a system of checks and balances.
1. ISO: the standards maker
At the top is the International Organisation for Standardization - better known as ISO. This is not a company and not a government, but a partnership of more than 160 countries.
ISO develops the standards that you will soon have to meet. They do not decide for themselves what "good quality" is, but bring together experts from all over the world to reach a consensus. The result: international standards such as ISO 9001, ISO 14001 and ISO 27001.
Important: ISO itself does not certify anyone. They just make the rules of the game.
2. Accreditation bodies: the supervisors
Who checks whether certification bodies are doing their work properly? These are the accreditation bodies.
In the Netherlands this is the national accreditation body. They assess whether a certification body:
- Is expert enough to carry out audits
- Works independently and impartially
- Meets strict quality standards
The word "accreditation" literally means: giving confidence. The national accreditation body gives confidence to certification bodies by checking whether they are doing their work properly.
3. Certification bodies: the auditors
This is the layer that you as a company have to deal with. A certification body carries out the actual audit at your company.
Through CertificeerWijzer you will find 32 accredited certification bodies, from large international parties to smaller specialized agencies.
A certification body:
- Assess whether your company meets the standard
- Conducts annual surveillance audits
- Issues the certificate (and can also revoke it)
4. Your company: the certificate holder
You are at the bottom of the pyramid. If you pass the audit, you will receive a certificate that is valid for three years. In the meantime, you will receive surveillance audits - annual checks to check whether you still meet the requirements.
Visual: the entire chain
-
ISO
Creates international standards
-
Accreditation bodies (the Dutch body, UKAS, DAkkS)
Check the certification bodies
-
Certification bodies (DNV, Kiwa, BSI, TÜV, etc.)
Conduct audits at companies
-
Your company
Receives the ISO certificate
Each layer controls the layer below it. ISO sets the rules, accreditation bodies check the certification bodies, certification bodies check you.
Why accreditation matters
When choosing a certification body, accreditation is an important factor. Not every party that issues certificates is accredited.
A certificate from a non-accredited party:
- Is not always recognised by customers or contracting authorities
- Has less value abroad
- Provides no guarantee that the audit was objective
With an accredited certificate you can be sure that:
- The certification body meets strict quality requirements
- Your certificate is internationally recognised
- There is independent supervision of the audit process
In summary
The certification chain is a system of mutual control:
- ISO makes the standards
- Accreditation bodies (the Dutch body, UKAS) monitor the certification bodies
- Certification bodies (DNV, Kiwa, etc.) check you
- You get the certificate
By choosing an accredited certification body, you can be sure that your certificate has value. It is recognised by customers, contracting authorities and abroad.