ISO Consultants near you

Most engagements begin with a gap analysis: comparing what the organisation already does against the requirements of the standard. Well-run businesses usually find they satisfy more of it than expected, but informally, without the documented processes and records an auditor can examine. The consultant's real job is to close those gaps without burying the operation in paperwork it will abandon within a year.

Building the system follows. Scope is defined, processes are documented, responsibilities are assigned and the records that evidence conformity start being kept. Two internal steps then have to happen before any external audit is worth booking: an internal audit, in which the organisation checks itself against the standard and records what it finds, and a management review, in which leadership formally considers whether the system is working and what needs to change. Standards expect both, and auditors look for them early.

External certification audit is generally carried out in two stages by the certification body: a first stage reviewing documentation and readiness, and a second examining implementation in practice. Findings are raised, the organisation corrects them, and a certificate is issued by the certification body if the outcome is satisfactory. The consultant can prepare you for all of this and can be present, but the audit decision belongs to the certification body alone.

ISO develops and publishes the standards. It does not audit organisations or issue certificates against them; that is done by certification bodies, which are separate commercial organisations. The credibility question is therefore not whether a certification body exists but whether it is accredited, and by whom.

In Canada, the Standards Council of Canada is the accreditation body, and it describes itself as the only internationally recognised accreditation body in the country offering a management systems accreditation programme. That programme is based on ISO/IEC 17021-1, the international standard for bodies providing management systems audit and certification, with sub-programmes covering quality, environmental, occupational health and safety, information security and energy management systems among others. The Council evaluates and accredits certification bodies to confirm their competence to audit and certify organisations; accreditation is not granted to the organisations seeking certification themselves.

Recognition travels through the International Accreditation Forum. The Council is a signatory to the Forum's Multilateral Recognition Arrangement for most of its management systems sub-programmes, which is why a certificate from a body it accredits is accepted internationally. That is the practical reason to care about accreditation: an unaccredited certificate may satisfy nobody outside the room it was printed in. Ask a certification body which accreditation it holds and for which sub-programme, and check it against the accreditation body's own records rather than a logo on a website.

Certification is not a one-off event. Certification bodies carry out periodic surveillance audits during the life of a certificate to confirm the system is still operating, and recertification is required at the end of the cycle rather than the certificate simply continuing. A system that is assembled for the initial audit and then quietly abandoned tends to be found out at the first surveillance visit.

The organisations that get value from certification treat the system as the way the work is done rather than as a parallel set of records. Internal audits continue on a schedule, management review happens as a real meeting with decisions attached, nonconformities are recorded and closed out, and improvements are documented as they happen. The measure of a good consulting engagement is whether the system is still running, and still useful, at the first recertification.

These are three distinct roles and the boundary between the first two is enforced by the accreditation rules. A consultant helps you design, document and implement the system. A certification body audits it independently and issues the certificate. Keeping those separate is the whole basis of the certificate being worth anything to a customer, since impartiality is what accreditation under ISO/IEC 17021-1 is built around.

Doing it in-house is entirely possible, and organisations with an existing quality or safety function often should. The standards are published documents, and nothing requires an external consultant. What in-house work needs is genuine time from someone who understands both the standard and the operation. Where consultants earn their fee is in speed, in knowing what auditors actually look for, and in avoiding the over-documentation that first-timers reliably produce. A sensible middle path is to use a consultant for the gap analysis and system design, then run the internal audits and management review yourself, so the capability stays in the building.

Scope depends on the standard, the number of sites and employees in scope, the complexity of the processes being certified, and how much of a documented system already exists. An organisation with mature procedures and existing audit records needs much less help than one starting from nothing. Remember that a consultant's fee and the certification body's audit charges are separate arrangements with separate organisations, and that the certification body is engaged by you rather than by the consultant. Ask for both to be set out clearly before committing.

On LokalMatch you describe which standard you are pursuing, what prompted it, the size and structure of your operation and your target timeframe, and ISO consultants working in your area get in touch. LokalMatch is not a certification body, does not audit or certify anyone and does not screen, rank or recommend the consultants who respond; consultants pay for the requests they receive, so speaking to several costs you nothing. Ask each consultant which accredited certification bodies their clients have used, and treat an offer to handle the certification itself as a reason to look elsewhere.