-
Certification bodies A certification body audits your management system and issues the certificate. You need one to obtain and keep an ISO certificate; the body is accredited by the national accreditation body or a recognised foreign body. The certification body may not also be your adviser: help with setting things up comes from an implementation partner. View
-
Internal auditors An internal auditor checks whether your management system works the way you have written it down. You need one for the mandatory internal audit if you cannot do it yourself. Often this is a freelancer or a colleague of your implementation partner. View
-
Implementation partners An implementation partner helps you set up the management system. You need one if you are certifying for the first time and do not have the knowledge in-house. Many implementation partners also carry out the internal audit, with a colleague who was not involved in setting it up. View
-
GRC tooling & software GRC software helps you maintain the management system: risks, controls, documents and audits in one place. It is useful if you have a lot to keep track of and do not want to do that in separate files. Software does not replace an implementation partner: they help you set up the system. View