Accredited under ISO/IEC 17021 as 3rd Party Certification Body
ISO/IEC 17021-1 specifies requirements for competent, consistent and impartial bodies providing audit and certification of management systems.
ISO/IEC 17021-1:2015
ISO/IEC 17021-1:2015 specifies requirements for bodies providing audit and certification of management systems.
The standard is designed to ensure that certification bodies operate competently, consistently and impartially.
Its purpose is to maintain trust and confidence in management system certification through integrity, transparency and technical competence.
Requirements for ISO/IEC 17021 Accreditation
Impartiality
- Certification decisions must remain independent.
- Potential conflicts of interest must be identified and controlled.
- Auditing activities must be conducted objectively.
Competence
- Auditors must have appropriate qualifications and experience.
- Technical experts must demonstrate relevant competence.
- Competence must be maintained through training and evaluation.
Audit Process
- Audits must follow documented and consistent processes.
- Audit planning must reflect the organisation and applicable risks.
- Audit findings and conclusions must be appropriately documented.
Management System
- Certification bodies must maintain documented procedures.
- Relevant records must be maintained and controlled.
- Continual improvement mechanisms must be implemented.
Confidentiality
Client information, audit records and confidential business information must be appropriately protected.
Certification Decision
- Certification decisions must be independent from the audit team.
- Processes must exist for granting certification.
- Processes must exist for maintaining certification.
- Processes must exist for suspension and withdrawal.
Transparency
Certification bodies should provide appropriate public information regarding certification processes, scopes and certification status.
Management System Certification
ISO/IEC 17021 accredited certification bodies may provide certification for management system standards within their approved accreditation scope. Examples can include:
- ISO 9001 — Quality Management Systems.
- ISO 14001 — Environmental Management Systems.
- ISO 45001 — Occupational Health and Safety Management Systems.
- ISO 22000 — Food Safety Management Systems.
- ISO 27001 — Information Security Management Systems.
Business Benefits
Credibility and Trust
Accredited certification increases confidence that certification activities follow recognised international requirements.
Global Recognition
Certification issued within internationally recognised accreditation frameworks may support wider acceptance across global markets.
Regulatory and Tender Requirements
Certain buyers, regulators and tendering organisations may require management system certification issued by an accredited certification body.
Risk Reduction
Structured audit processes can help identify weaknesses, compliance risks and areas requiring corrective action.
Operational Improvement
Management system audits may identify opportunities to improve processes, controls and operational performance.
Enhanced Reputation
Accredited certification can demonstrate an organisation's commitment to recognised management practices.
Supply Chain Assurance
Certification may provide additional assurance to customers, suppliers and other supply-chain stakeholders.
Key Components of ISO/IEC 17021-1
- Impartiality and independence.
- Competence of personnel.
- Management system requirements.
- Application review.
- Audit planning.
- On-site auditing.
- Audit reporting.
- Certification decisions.
- Surveillance activities.
- Confidentiality.
- Complaints and appeals.
- Control of certification marks.
Accreditation Bodies
ISO/IEC 17021 accreditation is normally granted by recognised national accreditation bodies. The exact issuing accreditation body and approved certification scope should be confirmed from the current accreditation certificate.