Independent guide: this website is not ACTiVA or any other consultancy or certification body. We do not offer consulting, training or certification. About this site.
ISO itself does not certify organisations. Certification is carried out by independent certification bodies. In the UK, the national accreditation body is UKAS, which checks that certification bodies are competent and impartial. See also ISO’s guidance on certification.
Step by step
- Decide on the scope. Which sites, products and services will the system cover?
- Do a gap analysis. Compare how you work today with the requirements of the standard.
- Build and run the system. Write the policy, objectives and the procedures you need, and use them for a few months so there are records to show.
- Carry out an internal audit and a management review. Certification bodies expect to see both before the main audit.
- Choose an accredited certification body and agree a quote.
- Stage 1 audit: the auditor reviews your documentation and checks that you are ready.
- Stage 2 audit: the auditor checks that the system is implemented and effective. Any nonconformities must be corrected.
- Certificate issued. A certificate is normally valid for three years, with surveillance audits during that time (usually every year) and a recertification audit before it expires.
How to spot a worthless certificate
- Check that the certification body is accredited, and that its accreditation covers your industry. You can check certificates through IAF CertSearch.
- Be wary of “certificates” offered after a short online questionnaire with no audit.
- Keep consultancy and certification separate. A certification body should not also write your system for you.
Do you need a consultant?
Not always. Many small businesses build their own system using the standard, free guidance and templates. A consultant can save time, but ask for a fixed scope and price, check references and make sure the system they design fits the way your business actually works.
Editions: ISO 9001:2015 and ISO 14001:2015 were both amended in 2024 to add climate change considerations, and a revised edition of ISO 9001 was scheduled for 2026 with a transition period for existing certificates. Check iso.org and your certification body for the edition and transition dates that apply to you.