The certification process follows the same logic in every management system standard. At each step you receive written output and know the next step in advance.
1. Application and quote
The application form asks for scope, headcount, locations and sector. The application review is completed within one working day and a quote with the audit duration (man-days) and a fixed fee is sent. Audit duration is calculated from headcount and risk level according to international IAF rules.
2. Contract and audit plan
When you approve the quote a contract is signed. The audit team sends the plan, with dates and the processes to be audited, 10 days in advance.
3. Stage 1 audit
Documentation, policy, objectives and internal audit and management review records are examined. It is often done in the office; a stage 2 readiness report results. If anything is missing you are given time to complete it.
4. Stage 2 audit
The system is seen in operation on site: interviews, observation and record review. Findings are classified as major nonconformity, minor nonconformity or observation. A certificate is not issued until major nonconformities are closed.
5. Certification decision
A decision committee independent of the audit team reviews the file. With a positive decision the certificate is issued; validity is three years.
6. Surveillance and recertification
The certificate holder undergoes a surveillance audit every year. A recertification audit takes place at the end of the third year. Certificate status (valid, suspended, withdrawn) is shown instantly in the verification tool on our site.