ISO 9001 Certification Process: How to Choose an Accredited Certification Body
The ISO 9001 certification process normally involves implementing a quality management system, evaluating readiness, undergoing certification audits and receiving an independent certification decision. Choose a certification body whose accreditation and scope fit your needs. ISO does not issue the certificate, and a consultant does not make the certification decision. Kickstart provides consulting, readiness, documentation and coordination support only.
What ISO 9001 covers
ISO 9001 specifies requirements for a quality management system, often called a QMS. It concerns how an organisation manages processes to provide consistent products and services and improve its system. It is not a product safety approval or a promise that every individual output will be defect-free.
As checked on 27 August 2026, ISO’s official ISO 9001 page identifies ISO 9001:2015 as the published standard and describes an ongoing revision expected in September 2026. Do not treat a draft or expected publication date as an already available certificate requirement. Confirm the current edition and any official transition arrangements when planning an audit.
ISO consulting vs certification: keep the roles separate
Consulting helps the organisation prepare and operate its management system. Certification evaluates that system through an independent certification body. Accreditation is a separate assessment of a conformity-assessment body’s competence for a defined scope. These roles should be clear before accepting a proposal.
|
Role |
Typical responsibility |
What it does not mean |
|---|---|---|
|
Organisation |
Implements and maintains its own QMS |
Responsibility is not transferred to the consultant |
|
Consultant |
Supports readiness, documentation and implementation |
Does not make the independent certification decision |
|
Certification body |
Conducts the certification process and decides whether to certify |
Is not ISO itself |
|
Accreditation body |
Assesses certification-body competence within an accreditation scope |
Does not implement the applicant organisation’s QMS |
ISO’s certification guidance confirms that ISO does not perform certification or issue certificates. Kickstart Business Advisors LLP is not a certification body or accreditation authority.
Define the certification scope first
Write a clear description of the activities, locations and organisational boundaries intended for certification. Include the processes that influence the products or services within that scope, including relevant outsourced arrangements. A vague scope makes both implementation and certification-body quotations harder to evaluate.
As practical preparation, identify the management-system owner and the people responsible for key processes. Explain why certification is being pursued: customer requirements, a tender condition, internal improvement or another defined objective. Check any customer’s acceptance requirements before choosing a certification body. Do not assume all certificates are equally suitable for every procurement process.
Readiness assessment and QMS implementation
Compare the organisation’s current working practices with the applicable standard. The purpose is to identify gaps that affect the system, not to generate a large folder of documents unrelated to day-to-day operations. Prioritise the processes that influence customer requirements, quality risks and consistent delivery.
Useful implementation work may include clarifying process responsibilities, controlling documented information, defining objectives and monitoring how problems are handled. Records should reflect work actually performed. Backdated or invented records defeat the purpose of readiness work and can undermine the certification assessment.
The amount of preparation depends on what already exists and how consistently it is used. A mature small organisation may need different support from a multi-site business introducing formal controls for the first time. A fixed promise of certification in a few days is not a credible substitute for assessing those facts.

Internal audit and management review
Before the certification assessment, the organisation should be able to evaluate its own QMS and show how management reviews its performance. Internal audit is not merely a rehearsal for answering an external auditor. It should identify whether the system is implemented effectively and where corrective action is needed.
Keep evidence of findings, responsibilities, actions and follow-up. Management review should connect the system’s results with decisions about improvement and resources. Use the applicable ISO 9001 requirements as the reference; a consultant’s generic checklist does not replace the standard or the organisation’s own operating context.
How to choose an accredited ISO certification body
Start with accreditation evidence that can be checked independently. In India, the NABCB management-system certification directory lists accredited bodies and scope information. Look for the relevant quality-management-system accreditation and its current scope and status, not just a logo on a quotation.
A NABCB accredited certification body may hold several different accreditations. Confirm that the accreditation being cited covers the proposed QMS certification activity and relevant scope. Where another accreditation body is involved, verify it through that body’s official records and check the customer’s recognition requirements.
Ask the proposed certifier to explain the legal entity that will issue the certificate, its accreditation, audit scope, audit effort, auditor competence, independent decision process and ongoing requirements. Request a written proposal that separates initial assessment, travel, follow-up, surveillance and other charges so the comparison is meaningful.
Certification-body evaluation checklist
The following checks help compare proposals without ranking bodies or promising that one certificate will be accepted everywhere. Resolve unclear answers before signing the contract.
|
Check |
Evidence to request |
Warning sign |
|---|---|---|
|
Accreditation |
Official directory entry and relevant scope |
Only an unverified logo or a vague internationally approved claim |
|
Issuing entity |
Exact legal name and certificate-verification route |
Seller cannot identify the body making the decision |
|
Audit plan |
Scope, sites, audit stages and proposed effort |
Guaranteed certificate with no meaningful assessment |
|
Independence |
Clear separation between consulting and certification decisions |
Consultant promises to award its own independent approval |
|
Ongoing obligations |
Surveillance, changes, complaints and certification conditions |
Proposal discusses only delivery of a PDF |
|
Commercial terms |
Written scope and transparent charges |
Important follow-up costs are left unexplained |

ISO 9001 Stage 1 and Stage 2 audit
Initial management-system certification normally uses a two-stage audit approach. Stage 1 examines matters relevant to readiness and planning; Stage 2 evaluates implementation and effectiveness within the certification scope. The certification body determines the appropriate arrangements and identifies issues requiring attention.
Audit effort is not the same for every applicant. Factors can include personnel, complexity, activities and sites. The IAF management-system audit-duration guidance explains why audit time needs a reasoned basis. Do not assume Stage 1 is always remote or that a small headcount automatically removes an audit stage.
If nonconformities are raised, understand the evidence and corrective action the certification body requires. Keep responsibility for addressing the underlying problem with the relevant process owner. Closing a finding should mean more than editing a procedure for appearance’s sake.
Certification decision, surveillance and continuing work
The certification body reviews the assessment outcome and makes the certification decision under its process. A consultant cannot guarantee that decision. After certification, maintain the system and meet the body’s surveillance and continuing-certification requirements. Changes to activities, sites or the organisation may need to be communicated.
Verify the resulting certificate’s legal entity, scope, sites, standard, dates and status. ISO’s certificate-verification guidance points users towards independent verification routes, including the relevant accreditation body. Keep the QMS active between audits; the certificate is evidence of a process, not an end to management responsibility.
How Kickstart can assist
Kickstart Business Advisors LLP provides ISO consulting, readiness assistance, documentation support, implementation guidance and certification-body coordination. The independent certification body conducts its assessment and decides whether to issue a certificate. We do not issue ISO certificates or claim accreditation to do so.
Review our ISO consulting and certification-coordination service or contact us with your activities, locations, current QMS position and customer requirements. A focused readiness discussion can help define the work before quotations and audit dates are agreed.
Sources checked on 27 August 2026. This is general process guidance; use the applicable standard and certification-body requirements for your organisation. Images are AI-generated illustrations.
