Certification terms

Accreditation is what the certification body receives: recognition that it is competent to certify. Put simply: accreditation is the certificate for the certification body.

Certification is what you receive: a certificate proving that you meet a standard.

Certification bodies (DNV, Kiwa, etc.) audit you. By choosing an accredited certification body, you can be sure your certificate has value.

Through the IAF (International Accreditation Forum) these organisations recognise each other's accreditations. You can verify certificates through IAF CertSearch.

The IAF sector cluster is the cluster for which certification bodies are accredited. Only bodies accredited for this cluster may handle the request, so it determines who receives the request.

Switching certification body is governed by an international document: IAF MD 2. These are the rules that all accredited certification bodies must follow.

The new certification body reviews your latest audit reports, any open nonconformities and your complaints history. This is called a 'pre-transfer review'.

A surveillance audit every year. A full recertification every three years. Your certificate is valid for three years, provided you pass the annual audits.

Which parts of your organisation, systems and locations fall under the ISMS? You can start small and expand later.

The certification audit consists of two stages. There are usually two to four weeks between stage 1 and stage 2, so you can resolve any shortcomings.

In between you have surveillance audits: annual checks to see whether you still meet the requirements.