How accreditation works
The six steps from application to surveillance.
Every certification body goes through the same six steps. Each step is recorded, and the body is told the outcome of each step in writing.
Step 1: Application
The body applies by email, stating the standards, IAF sector codes and countries it wants to be accredited for (see how to apply). ISAO acknowledges the application and confirms the fees.
Step 2: Document review
An ISAO assessor reviews the body's management system documents, procedures, auditor competence records and impartiality arrangements. Gaps are reported to the body, which must close them before the assessment continues.
Step 3: Office assessment
Assessors visit the body's office, in person or remotely, to check that its procedures are followed in practice. They review certification files, interview staff and examine how certification decisions are made.
Step 4: Witness audit
An ISAO assessor observes one or more of the body's auditors carrying out a real audit at a client organisation, to confirm that audits are competent and consistent.
Step 5: Decision
The assessment report goes to the ISAO accreditation committee. People who took part in the assessment do not take part in the decision. If accreditation is granted, ISAO issues a certificate of accreditation with a schedule setting out the scope, and records the certificate on the public register, where anyone can check it.
Step 6: Surveillance
Accredited bodies are assessed at least once a year during the four-year accreditation cycle. Surveillance can lead to an extension or reduction of scope, a suspension or a withdrawal. Reaccreditation takes place before the cycle ends.
How long accreditation takes depends mainly on how quickly the body closes any nonconformities.