Definition · Plain-language
Certification body
A certification body is an independent, third-party organisation that audits and certifies management systems against standards such as ISO 9001.
The step most authors miss
Doing CRediT right? Don’t stop at the statement.
A CRediT statement credits you inside one paper. The recognition CRediT was built for happens when those roles are tied to you, persistently. Sign in with your ORCID — free — and claim your CRediT contributions on casrai.org, the home of the standard. They become a verified, portable part of your identity, not a line that disappears into one PDF.
Free: claim your contributions, then export a journal-ready CRediT statement, schema.org structured data, JATS XML, CSV or BibTeX — and preview your public profile. A membership publishes that profile publicly and verifies the journals you serve.
What a certification body does
A certification body provides independent, third-party assessment of whether an organisation’s management system meets the requirements of a standard. It plans and conducts the initial certification audit, decides whether to grant certification, issues the certificate, and carries out subsequent surveillance and recertification audits. Crucially, it is independent of the organisation it assesses: it neither consults on building the system nor has an interest in the outcome, which is what gives its certificate value. ISO itself does not perform this role — it writes the standards, while certification bodies assess conformity against them.
Why accreditation matters
For a certification to be trusted, the certification body must itself be competent and impartial — and this is assured through accreditation. A national accreditation body assesses certification bodies against international requirements, notably ISO/IEC 17021-1 for management-system certification, checking their competence, consistency and impartiality. An accredited certificate therefore carries an extra layer of confidence: not only has the organisation been audited, but the auditor has been independently judged fit to do so. This two-tier structure — accreditation above certification — underpins international trust in certificates.
Certification body versus accreditation body
It is easy to confuse the two, but they sit at different levels. A certification body audits and certifies organisations against a standard. An accreditation body sits above it, assessing and formally recognising the competence of certification bodies themselves. There is typically one recognised national accreditation body per country, coordinated internationally through bodies such as the International Accreditation Forum. Understanding this hierarchy explains a common phrase: a certificate is most credible when issued by an accredited certification body, meaning its competence has itself been independently verified.
Key facts
At a glance
- Definition: third-party organisation that audits and certifies management systems
- Role: conducts certification, surveillance and recertification audits, issues certificates
- Independence: must be impartial; does not consult on the system it audits
- Accredited by: a national accreditation body
- Key requirement: ISO/IEC 17021-1 for management-system certification bodies
- Note: ISO writes standards; it does not certify organisations
Common misconceptions
What people often get wrong
Often heard: ISO is the body that certifies organisations to its standards.
Actually: ISO develops the standards but does not audit or certify organisations. Independent certification bodies assess conformity and issue certificates; ISO has no certification or enforcement role of its own.
Often heard: A certification body and an accreditation body are the same thing.
Actually: They operate at different levels. A certification body audits and certifies organisations; an accreditation body sits above it, assessing and recognising the competence and impartiality of certification bodies themselves.
Often heard: Any certificate is equally trustworthy regardless of who issued it.
Actually: A certificate carries the most confidence when issued by an accredited certification body, whose competence has been independently verified against ISO/IEC 17021-1. Unaccredited certification offers weaker assurance.
Going deeper
