How ISO certification works

Three steps with MIYAAR CONNECT

MIYAAR CONNECT is an independent discovery and inquiry platform. We help you understand ISO standards and connect your inquiry with independent certification bodies. We do not audit, certify or accredit.

1. Describe your needs

Tell us what you need: first-time certification, renewal, transfer, or help choosing. If you are not sure which standard fits, start with find my standard or read which ISO standard does my company need.

2. Our team identifies a suitable certification partner

We review your inquiry and look for an independent certification body whose verified scope fits your standard, sector, location and any accreditation requirement. The method is explained in how we match. If no suitable partner is available, we tell you so.

3. You receive follow-up

Depending on the arrangement, you hear from our team, from the chosen certification body, or from both. How referrals work explains who may contact you and when your details are shared.

Any quotation, agreement, audit and certification decision comes from the certification body, which is clearly named when it is selected.

The typical certification process

Certification bodies working to ISO/IEC 17021-1 (the standard for bodies that audit and certify management systems) follow a broadly similar path. Details differ by body and by standard, so treat this as a general picture.

Application and contract review

You give the certification body information about your organization, sites, activities and the scope you want certified. The body reviews it, works out the audit effort and agrees terms with you. See certification cost for what drives that effort.

Stage 1 audit

A first review of whether your management system is ready for the full audit. It usually looks at documented information, your understanding of the requirements and your preparation. The body may raise concerns to fix before moving on.

Stage 2 audit

The main audit. Auditors check, through records, observation and interviews, that your management system is implemented and working against the standard. For a plain-language comparison, read Stage 1 vs Stage 2 audit.

Certification decision

Once audit findings are closed to the body's satisfaction, a person at the certification body, who was not part of the audit team, makes the decision. Auditors recommend. They do not decide alone.

Surveillance

If certified, the certificate is maintained through periodic surveillance audits during its validity period. See surveillance and recertification.

Recertification

Before the certificate period ends, a recertification audit reviews the whole system again to decide whether certification can continue.

What this means for you

How long each step takes depends on your organization and the certification body. See certification timeline. Check the certification body's accreditation for your scope before you sign. Accreditation check shows how.

For a closer look at the audit itself, read what happens during an ISO certification audit.