Which certificates do you already have? Which certificates do you already have? Even if they are not part of this request. A certification body can then combine audits, which saves days.
ISO 9001 Quality ISO 14001 Environment ISO 27001 Information security ISO 45001 Health and safety ISO 42001 AI management system NEN 7510 Information security in healthcare No certificates yet
Search for your certificate, or type it in yourself
Upload your certificates
This is the fastest route: we read your certificates and fill in the questions that follow for you. Certification bodies also need them for a complete quotation.
Choose files No files chosen yet
Upload your latest audit report
This lets a new certification body take over your current cycle. We take your audit date and open nonconformities from it.
Choose files No files chosen yet
By uploading, you agree that we have your documents read automatically by OpenAI, which does not keep them afterwards. More about this in our privacy policy .
Scope of the certification Certification bodies use this to calculate the number of audit days.
Which locations are they? * The town and the number of employees per location is enough.
Location 1, town FTE
Location 2, town FTE
Location 3, town FTE
Location 4, town FTE
Location 5, town FTE
Location 6, town FTE
Location 7, town FTE
Location 8, town FTE
Location 9, town FTE
Location 10, town FTE
More than ten locations? List the rest in the last question of the request.
Are all locations managed from one head office, with one management system? * If so, a certification body may take a sample instead of visiting every location. That saves a lot. Management system = the agreements and documents with which you record and improve your work.
Yes No
Do several legal entities need to be on the certificate? * For example a holding company with operating companies that all fall under the certificate.
Yes No
Which entities are they? * Name and Chamber of Commerce (KvK) number per entity. We will ask for the extracts later; you do not need to look for them now.
How are these entities related? With independent members, a certification body may be less quick to take a sample.
Holding company with operating companies Group of independent companies Cooperative or franchise with independent members
What does your organisation do? Certification bodies use this to decide which auditor suits you.
Describe in a few sentences what your organisation does. * This will literally become the scope on your certificate, so keep to the core activities. Scope means: what exactly will be stated on your certificate.
Where is the work done? Office Workshop or production Project sites at clients Field service on the road Working from home
How often do you work at temporary sites, such as construction sites? A certification body will then also visit a project. That counts towards the audit duration.
Now and then, a single project Continuously, several projects at once
Do you design products or services yourself? If you only carry out what the client specifies, you can exclude the design chapter of ISO 9001.
Yes, we design ourselves No, we work to the client's specifications Partly
Do you outsource processes or functions to third parties? Think of production, maintenance, administration or IT management.
Yes No
What do you outsource, and to whom?
Do you work in shifts? If so, an auditor may also need to visit outside office hours.
Yes No
Are there parts of the standard that do not apply to you? If you do not know, leave it empty; the certification body will look at this too.
Your current certification With these details a certification body can take over your current cycle without starting again.
Who is your current certification body? * Make a choice 3angles Certify Aboma Certification Brand Compliance BSI Group The Netherlands Bureau Veritas The Netherlands CERCOMS Cetradex Certificatie CIIO Control Union Certifications DEKRA Certification DIfAM Certification Digitrust DNV Business Assurance Duijnborgh Certification EBN Certification ECAS EIK Certificering EY CertifyPoint Forvis Mazars Certification Hub Keurmerkinstituut Kiwa Nederland LRQA Nederland NHG Praktijk Accreditering Noordbeek Certification Normec Certification Normec Certification Institute (NCI) Normec NCK ProCertify SGS Nederland SKG-IKOB Certificatie SKH TÜV NORD Nederland TÜV Rheinland TÜV SÜD Other
Is your certificate accredited? * You can recognise it by the logo of an accreditation body on the certificate, such as the RvA, UKAS or DAkkS. Only an accredited certificate can be taken over by another certification body.
Yes No I don't know
What kind of audit was that? The initial certification The first surveillance audit The second surveillance audit A recertification I don't know
Are there still open nonconformities from that audit? Open nonconformities are no problem for a switch, but a certification body does need to know about them.
Yes No
What kind of nonconformities are they?
Why do you want to switch? Helps us approach the right certification bodies.
Costs and rates A better fit with my sector Dissatisfied with the auditor Reputation and reliability A different approach to the audits Other
Anything you would like to add?
A few more questions about information security ISO 27001 and NEN 7510 have their own calculation table for audit days.
How are your people distributed? In FTE, an estimate is enough. The auditor talks with people from each group.
Management and leadership team Security officer and IT Primary process, own staff Primary process, hired in Support, excluding HR and IT HR
Which important systems and cloud services do you use? Roughly: your critical systems, your cloud services and whether you have your own servers.
Which partners do you work with on a long-term basis? Think of hosting, IT management, data processing, interim staff or trainers. Name and what for is enough.
Is IT management part of what you outsource? Yes No
Do you process special or sensitive personal data? Think of medical data, criminal records or biometrics. With healthcare data, NEN 7510 comes in addition to ISO 27001.
Yes No
Are there complaints or contacts with a supervisory authority about information security or privacy? For example a report to the Dutch Data Protection Authority or a complaint from a client.
Yes No
What is it about, and what is the current status?
How complex is your information security? Choose for each topic what fits best. A certification body uses this to estimate the audit duration without calling first.
Sensitive information and availability Little confidential information, one main process Some sensitive data, limited connections A lot of sensitive information, high availability requirements, many connections
Risk and legislation of your activities Low risk, no special legal requirements Some risk or limited regulation High risk or heavy requirements, such as healthcare, government or finance
How far along is your ISMS? Fully implemented, with internal audits and improvements Partly implemented, a few audits done New or not yet complete
How much of your IT have you outsourced? Little, or to certified suppliers with clear agreements Some A lot, to several suppliers
Your IT landscape Few systems, highly standardised A few platforms, reasonably standardised Many platforms, servers, databases or networks
Do you develop software yourself? No, only standard software Some custom work or own configuration Yes, business-critical software developed in-house
Locations, data centres and fallback No or one fallback location, low availability requirements A few locations, average availability requirements Several data centres or fallback locations, 24/7
Your security controls Few, standard controls An average number, normal complexity Many or highly technical controls, such as cryptography
Changes since your previous audit None Minor changes in policy or scope Major changes in scope, processes or organisation
What makes the audit shorter or longer A certification body may adjust the audit duration accordingly. Stating this in advance prevents a quotation that changes afterwards.
What fits your organisation? Each point can shorten the audit duration.
Our management system has been running for years and we keep it up to date We do not develop products or services ourselves Processes largely run through software and fixed workflows We work a lot remotely and our evidence is available digitally A large part of our people do the same work
Have you been certified before, for this or another standard? Yes No
What applies to you? Each point can lengthen the audit duration.
Many different or complex processes Work with hazardous substances Complicated logistics between the locations Locations that differ greatly in size
How much legislation and regulation applies to your organisation? * Little: the general rules, such as the GDPR Average: a few regulations specific to my sector A lot: heavy rules, such as an environmental permit or supervision of my sector
Which languages do your people speak on the shop floor? * An auditor must be able to talk with your people. For other languages an interpreter is needed.
Only Dutch or English Other languages as well
