ISO ARTICLES CERTIFICATION & EXTERNAL AUDIT

The Difference Between Certification and Accreditation

Preparing credible evidence and decisions for external assessment.

ISO Articles / Certification & External Audits

Certification is a third party decision about conformity; accreditation is independent recognition of the certification body’s competence for defined conformity assessment activities.

ISO Toolkits Editorial Team Practical certification guidance Approx. 7 min read

Editorial questions and answers. This is an explanatory analysis, not an interview with a named expert.

Professionals considering the difference between certification and accreditation in a management-system context
Editorial illustration: Professionals considering the difference between certification and accreditation in a management system context. Illustrative scene, not an actual certification event.

Confusion over these terms can mislead procurement, marketing and governance. ISO develops the referenced standards but does not audit and certify companies. Certification bodies issue management system certificates; accreditation bodies assess the competence and impartiality of those certification bodies against applicable requirements, including ISO/IEC 17021-1. An accreditation mark is not automatically evidence that every service and standard offered by an organization is covered.

Illustrative case. Illustrative case: An export buyer receives two ISO 9001 certificates. One identifies an independent certification body with verifiable accreditation for the management system activity; the other carries an attractive gold emblem with no traceable accreditation claim. The buyer should examine scheme, certificate status, scope and issuer rather than treating the seals as interchangeable.

For the authoritative context, see ISO: Certification and choosing a certification body and the applicable certification body rules.

Certification concerns the client system: The claim should withstand a transaction level evidence test, not only a document review.

01Who issues what

The management system standard defines requirements for the organization. A certification body audits against those requirements and makes an independent certification decision. An accreditation body assesses the certification body’s competence, impartiality and consistent operation in an identified scope.

Illustrative situation. A tender says the supplier must be “accredited to ISO 9001.” That wording usually confuses two distinct relationships: The supplier is certified to ISO 9001; the certification body may be accredited for that activity.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. For who issues what, distinguish a verified fact from a plausible explanation. An unresolved inconsistency should lead to additional evidence, a qualified conclusion or documented corrective action, not a convenient assumption.

Practical test. Request a certificate naming the standard, issuer, organization, locations, scope and validity; ask separately for accreditation evidence. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

02Why ISO/IEC 17021-1 matters

ISO/IEC 17021-1 is a key normative reference for bodies that audit and certify management systems. Accreditation against relevant conformity assessment requirements helps establish assurance that certification decisions are competent and impartial, beyond the appearance of the certificate itself.

Illustrative situation. An organization chooses the lowest quote without asking how independence, competent auditors and the certification decision will be managed. Operational conflicts emerge only after the audit.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. A sound decision on why iso/iec 17021-1 matters identifies its owner, affected population, the relevant requirements and the review date. Without those elements, even a genuine improvement can be difficult to verify later.

Practical test. Verify the proposed issuer’s accredited scope for management system certification and its current standing with the accreditation body. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

03Why ISO/IEC 17011 matters

ISO/IEC 17011 specifies requirements for accreditation bodies accrediting conformity assessment bodies. This is a separate layer of assurance from assessing the client organization; the accreditation body does not thereby certify the client’s products or management system.

Illustrative situation. A buyer contacts an accreditation body expecting it to reissue a company’s ISO 9001 certificate. The proper path is through the certification body, with independent cross checks available through the relevant accreditation directory.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. To evaluate why iso/iec 17011 matters, compare the written rule with at least one credible operation record and an exception. The resulting conclusion should explicitly state where it applies and where available evidence cannot support broader assurance.

Practical test. Confirm that the cited accreditation body is genuine and that its directory identifies the certification body and activity. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

Professionals reviewing operational evidence relevant to why iso/iec 17011 matters
Editorial illustration: Professionals reviewing operational evidence relevant to why iso/iec 17011 matters. Illustrative scene, not an actual certification event.

04Recognition arrangements affect acceptance

Cross border acceptance depends on the relevant scope and recognition arrangements, not merely on whether a logo mentions an international association. Where acceptance matters commercially, check which accreditation arrangements and specific activities are covered.

Illustrative situation. A client abroad rejects a certificate because its issuer cannot demonstrate that the advertised accreditation applies to the requested scheme.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. For recognition arrangements affect acceptance, expand the review beyond the individual interviewed. Examine another relevant owner, shift, site or customer transaction if variation could change the credibility of the explanation.

Practical test. Use the issuing accreditation body and IAF resources to validate scope and recognized status before representing international acceptance. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

Evidence questions for the audit team

  • Which records show that the team completed this check: Claims accurately worded?
  • How would the process owner explain recognition arrangements affect acceptance under an actual exception?
  • What contradictory evidence could change the conclusion, and who is authorized to resolve it?

05Verification is a structured exercise

Online tools such as IAF CertSearch can help verify certificate details. Database coverage and timing may vary, so a missing record should prompt further checking with the certification and accreditation bodies, not an unsupported accusation of fraud.

Illustrative situation. A procurement analyst enters a supplier name and sees an expired entry. Before rejecting the bid, the analyst asks the issuer for the current certificate number and verifies the status and site scope.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. The assurance question for verification is a structured exercise is whether the stated arrangement would still operate if the usual approver were absent or an urgent customer change occurred. Evidence of delegated authority and traceable decisions can be decisive.

Practical test. Cross check certificate number, legal name, edition, issuing body, accreditation and certificate validity using primary sources. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

06Do not overstate the certificate

An accredited management system certificate still is not product approval, a regulatory permit or assurance of flawless future performance. Commercial claims must stay within certification scope and standard; external obligations remain independently applicable.

Illustrative situation. A supplier advertises an “accredited ISO certified product” based only on its organization’s management system certificate. A product specific assurance is not established by that evidence.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. Treat do not overstate the certificate as a boundary decision rather than a document count. Match the commercial or organizational claim to actual process authority and check whether outsourced interfaces have clear acceptance responsibilities.

Practical test. Review website and tender wording for unsupported product claims, ambiguous accreditation references or excluded sites. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

07A procurement decision uses proportional confidence

Accreditation often adds useful assurance, but purchasing decisions must still consider technical capability, contract requirements, supply risk and actual supplier performance. A genuine certificate is one source in supplier due diligence, not a substitute for it.

Illustrative situation. Two vendors hold genuine accredited certificates. One lacks required capability for the buyer’s specialist testing methods; the purchasing decision must therefore look beyond certificates.

The distinction among standard setter, certification body and accreditation body is central. Each layer performs a different assurance function and is subject to different criteria. When testing a procurement decision uses proportional confidence, assess not only whether an activity was completed but whether the resulting output was acceptable and monitored. Evidence of an adverse result is particularly useful for examining system learning.

Practical test. Combine certificate validation with scope relevance, performance history and sector specific competence. The reviewer should retain the relevant criterion, sampled evidence and rationale for any judgement, so another competent person can understand why the decision was reached. If the evidence is inconsistent, ask neutral questions and examine a second record before treating the explanation as established fact.

Conclusion: Evidence before assumptions

Certification is a third party decision about conformity; accreditation is independent recognition of the certification body’s competence for defined conformity assessment activities. A responsible organization should use the specific situation, the applicable standard and the certification body’s formal process to determine next steps. The most reliable conclusions are those linked to named owners, verifiable records and the declared scope rather than promotional timelines or template completion.

For management, the practical decision is to identify remaining uncertainty, assign responsibility and plan a verification event. That allows the organisation to improve its system even where no new external finding is raised, while preserving an accurate description of what certification does and does not establish.

Decision checkpoint

Request a certificate naming the standard, issuer, organization, locations, scope and validity; ask separately for accreditation evidence. Record the outcome and revisit it when scope, significant risks or processes change.