ISO accreditation is the formal recognition by a national accreditation body that a certification body is competent to issue ISO certificates. It confirms that the organization evaluating others against ISO standards operates with impartiality, technical competence, and consistency.
Accreditation is not the same as certification. An organization becomes ISO certified when a third-party body verifies it meets specific ISO standard requirements-like ISO 9001 for quality management. Accreditation applies to the certification body itself, ensuring it follows internationally recognized procedures and maintains credibility.
The process to become ISO accredited involves meeting strict criteria set by national accreditation bodies such as ANSI-ASQ National Accreditation Board (ANAB) in the U.S. or UKAS in the UK. These bodies assess whether a certification body can reliably audit and certify organizations against ISO standards.
Accreditation is granted through a multi-stage evaluation. A certification body seeking accreditation must demonstrate technical competence, independence, and consistent application of audit processes. The assessment includes document reviews, on-site audits, and proficiency testing.
For example, a certification body that issues ISO 14001 environmental management system certificates must prove its auditors understand environmental regulations, can apply the standard correctly, and maintain impartiality. They must also show they have a documented quality management system and trained personnel.
Once approved, the accreditation is valid for a set period-typically three years-with annual surveillance visits to ensure continued compliance. If a certification body fails to meet requirements, its accreditation can be suspended or withdrawn.
Accreditation bodies evaluate certification bodies based on international standards. The primary structure is ISO/IEC 17011:2017, which specifies the requirements for accreditation bodies themselves. This standard covers governance, resource adequacy, and impartiality.
Specific requirements include:
Failure to meet any of these elements results in non-conformance findings during the assessment. Corrective actions are required before accreditation is granted.
Many organizations assume that becoming ISO certified automatically makes them ISO accredited. This is incorrect. Certification and accreditation serve different roles. For example, a company that achieves ISO 27001 certification has met information security standards-but it is not accredited unless the certification body issuing the certificate holds accreditation.
Another frequent error is confusing ISO certification with ISO registration. Registration is a term sometimes used interchangeably with certification, but it's not official terminology. The correct term is "certification." Accreditation is the oversight mechanism behind the certification process.
A lesser-known fact: Not all countries require ISO accreditation for certification bodies. In some jurisdictions, certification bodies operate under national standards without formal accreditation. However, internationally recognized certifications-especially those used in cross-border trade-require accreditation to be credible.
Here's a real-world breakdown using a hypothetical certification body, CertifyPro Inc., applying for accreditation with ANAB in the U.S.
From start to finish, this process took 14 months. Most applicants underestimate the time needed for internal preparation and documentation cleanup.
| Stage | Duration | Key Output |
|---|---|---|
| Internal readiness assessment | 1-3 months | Gap analysis report |
| Application and document submission | 1 month | Formal application package |
| Document review | 2-4 weeks | Initial feedback and list of deficiencies |
| On-site assessment | 3-5 days | Assessment report with findings |
| Corrective action follow-up | 1-2 months | Verified implementation of changes |
| Final approval | 1 week | Accreditation certificate |
I personally observed a certification body in Germany lose its accreditation after an audit revealed that two auditors had accepted gifts from clients during fieldwork. The incident led to a public reprimand and a six-month suspension of operations. This shows that integrity is not just a formality-it's enforced.
Without accreditation, ISO certificates lack credibility in international markets. Buyers in the EU, Japan, and Canada often require proof that the certification body is accredited. For example, a medical device manufacturer exporting to the EU must have ISO 13485 certification issued by an ENAC-accredited body.
Even within domestic supply chains, buyers may reject products from companies with unaccredited certifications. A 2022 study by the International Accreditation Forum (IAF) found that 68% of procurement departments in Fortune 500 firms require accredited certification for vendor contracts.
Accreditation also supports continuous improvement. Accreditation bodies conduct regular peer reviews and benchmarking. This helps certification bodies stay current with evolving standards and emerging risks.
Becoming ISO accredited is not a one-time event. It requires sustained investment in training, systems, and oversight. But the outcome-trusted, globally recognized certification-justifies the effort.