The ISO Certification Process

It is important to note that Batalas does not issue ISO certificates, that is the role of organisations known as certification bodies. The clear distinction between the roles of consultants and those of certification bodies is recognised by all those working within the internationally recognised certification market.

In the UK, the United Kingdom Accreditation Service (UKAS) accredits certification bodies to assess organisations against ISO requirements, issue certificates as appropriate, and place these organisations on their register.

The certification process is very straightforward:

Stage 1 – design and implement your QMS
Stage 2 – select a certification body
Stage 3 – your certification body conducts a document review
Stage 4 – your certification body conducts a compliance audit
Ongoing – your certification body conducts surveillance visits

Stage 1 – design and implementation – this is a large subject in itself therefore please look at how to design your Management System (MS) where we discuss MS design in detail.

Stage 2 – select a certification body

Certification bodies range from small industry specific organisations to internationally recognised organisations such as British Standards Institute (BSI), Lloyds Register Quality Assurance (LRQA), SGS etc. The key criteria in selecting a certification body are:

• the credibility of the certification body. Certificates issued by UKAS accredited certification bodies are accepted by all organisations throughout the world. Certification bodies which are not accredited by UKAS may not be accepted by your existing and potential customers
• the profile of the certification body in your market? If you sell products and services around the world then a certification body recognised in your key markets will be best. If your products and services satisfy a niche market then look for a specialist certification body
• the relationship with your auditor. You need to develop a good relationship with the people who will be conducting your audits
• value for money. An obvious criteria but one which should be the last consideration in your selection process.

Stage 3 – your certification body conducts a document review

The first stage of the actual audit is for the certification body auditor to conduct a review of your MS documentation to ensure that you have the essential elements in place before conducting a compliance audit. This audit is relatively short and sometimes takes place away from your site. A report will be issued pointing out any issues which need to be addressed before the compliance audit.

Stage 4 – your certification body conducts a compliance audit

The auditor will visit your site to observe your operation, talk to your staff and examine procedures and records to establish whether you meet the ISO requirements. If you pass this audit, even if you have a few minor non-conformities, you will receive a certificate. The certificate lasts for 3 years and therefore you will be subjected to a full system audit at these intervals.

Ongoing – your certification body conducts surveillance visits

In between full systems audits (every 3 years) the certification body auditor will conduct announced visits to check in detail elements of your management system and to ensure that the system as a whole is being maintained. The frequency of these visits is usually 6 or 12 monthly intervals.