Information reviewed: 14 November 2026. Global purchasing guidance for management system certification.
A certification proposal can offer responsive service and practical scheduling while preserving an independent decision. Problems arise when commercial promises, consultancy relationships or personal interests are allowed to influence the assessment. Buyers should understand those relationships before an engagement begins, particularly when one contact appears to arrange implementation, auditing and certification together.
Impartiality means the assessment can reach a supported conclusion even when that conclusion is commercially inconvenient. This guide helps buyers ask proportionate questions about the people, organisations and decisions involved. It does not presume that every referral or shared professional connection is improper.
Understand the assurance being purchased
Management system certification is intended to provide third-party assurance. ISO/IEC 17021-1 addresses competence, consistent operation and impartiality of bodies providing that service. The customer remains responsible for operating its management system and meeting the applicable requirements.
This makes the division of responsibility important. A consultant may help an organisation develop its arrangements. An auditor examines evidence against defined criteria. The certification body controls the certification decision. Understanding those functions helps a buyer recognise when a sales offer blurs responsibilities that should be clear.
Separate implementation help from independent evaluation
An organisation can legitimately purchase implementation support. It can also train its employees and seek explanations of a standard. Those services need an honest description, suitable competence and appropriate arrangements. They should not be represented as assurance that another party must award certification.
Ask what the proposed adviser will actually do. Preparing procedures, designing a control or giving client-specific implementation solutions raises a different question from explaining general requirements to a mixed training audience. The service’s substance matters more than the word training, coaching or support on the invoice. Explain the actual activity when asking the certification body about a potential conflict.
Examine the relationship rather than the brand alone
Identify the legal entities and any relevant control relationships. European Accreditation’s published interpretation addresses the restriction on management system consultancy by the certification body, the same legal entity and entities under its organisational control. Related arrangements and individual personnel can require further consideration under the applicable impartiality rules.
Do not assume that changing a department name or using a separate invoice settles the question. Equally, do not declare every independent consultancy referral prohibited. Ask the responsible certification body to assess the actual relationship, explain its safeguards and confirm that the proposed arrangement is acceptable under its accreditation requirements.
Understand why time-related safeguards need context
Impartiality guidance can refer to a two-year period in particular consultancy situations. European Accreditation’s questions and answers discuss different scenarios, including related bodies and individuals. These should not be reduced to a universal statement that any connection becomes acceptable automatically after a fixed interval.
Provide accurate dates and descriptions of prior work. Ask which provision applies, whether the person can participate and who has made that judgement. A buyer should not negotiate an informal exception with the individual whose relationship creates the concern. The certification body needs to address the relevant risk through its established process.
Ask who controls each part of the engagement
Before appointment, identify who reviews the application, selects the audit team, evaluates the evidence and makes the certification decision. The enquiry need not demand private personnel files. It should establish where authority lies and how a difficult question is escalated.
Commercial administration and technical authority can sit in different parts of a legitimate organisation. What matters is whether the provider can explain the chain. If a local agent promises an outcome that the issuing body will not confirm, keep the matter unresolved. A polished quotation does not remove the need for an accountable decision process.
Treat an independent decision as a real condition
Payment purchases a defined assessment service, not a favourable finding. A provider should explain the conditions for certification, how findings are handled and what happens if the evidence does not support the expected result. A proposal that promises success regardless of assessment removes the purpose of independent evaluation.
Ask the provider to distinguish its scheduling commitment from its certification decision. It may be reasonable to agree a reporting target or response time. An unconditional promise to certify by a fixed date is different, particularly before scope, readiness and evidence have been reviewed. Preserve the written explanation rather than relying on a salesperson’s reassurance.
Review referral and commission arrangements proportionately
A recommendation can help a buyer find an appropriate provider. It can also create a financial interest that deserves disclosure and management. Ask whether a relevant payment or relationship exists and whether it affects who may participate in the assessment.
The practical concern is preferential treatment or compromised judgement, not the mere existence of business development. Avoid demanding unrelated commercial records. Request enough information to understand the relationship and the certification body’s controls. Where the issue is material, obtain its response from the responsible operation rather than only the referring consultant.
Use a responsibility and conflict worksheet
This original worksheet helps organise an enquiry. It does not prescribe additional accreditation requirements or determine whether a relationship is permissible.
|
Arrangement to explain |
Practical question |
Useful response |
|
Implementation support |
Who designed the client’s controls? |
Clear activity and entity description |
|
Prior auditor involvement |
Did the proposed person advise this client? |
Disclosure and responsible-body review |
|
Referral relationship |
Is there a relevant commercial interest? |
Explanation of relationship and safeguards |
|
Audit conclusions |
Who can change or challenge findings? |
Defined technical review and dispute route |
|
Certification decision |
Who has authority to decide? |
Independent decision arrangements |
Give each unresolved point an owner. The worksheet should create a clear purchasing record rather than an accusation file. If a provider gives an adequate explanation, retain it with the agreed service description. If it cannot resolve a material concern, consider a different arrangement before appointment.
Distinguish helpful explanation from designing the solution
During assessment, a customer needs to understand what finding has been raised and what evidence supports it. Asking the auditor to clarify the criterion or observed gap is reasonable. Asking the auditor to design the organisation’s corrective solution raises a different impartiality issue.
ANAB’s published client guidance distinguishes thorough evidence-based auditing from consulting or supplying solutions. A useful practical response is to ask: “Which requirement and evidence support this finding?” The organisation can then choose and implement its own effective action. An external consultant may assist where appropriate, but responsibility for the system stays with the organisation.
Manage personal familiarity and previous employment openly
A proposed auditor may have worked in the same industry, known an employee or previously held a role in the business. Relevant experience can be valuable. Relationships also need to be considered for possible influence on the particular assessment.
Disclose facts early and ask the certification body to review them. Avoid arranging private assurances between the auditor and management. The purpose is to allow an appropriate assignment decision and prevent avoidable disputes later. A conflict question should be assessed on its substance, not dismissed because a person is respected or described as a specialist.
Use complaints and appeals through the proper route
A complaint about service and an appeal against a decision can require different processes. Ask the provider where those procedures are available, how to submit relevant evidence and what acknowledgement or response arrangements apply. The procedure should be understandable before a dispute occurs.
Keep the submission focused on the decision or service concerned. A disagreement does not establish bias by itself, and an unfavourable finding may be technically justified. Where escalation to an accreditation body is relevant, follow that body’s process. A directory publisher cannot overturn an audit conclusion merely because a provider appears in its rankings.
Consider a fictional bundled offer
Imagine an invented maintenance business offered a single package described as procedures, implementation, audit and guaranteed certification. The seller states that the certificate will come from CB Name, but does not identify who performs the consultancy or how the issuing body controls the decision.
The buyer requests the entities, service responsibilities and proposed personnel. It also sends the claimed guarantee to CB Name for clarification. If the issuer provides a clear, appropriate route, the business can evaluate that route. If the guarantee remains unexplained, the buyer can select another offer without first making a public allegation that the entire business is fraudulent.
Assess governance through usable evidence
Useful public information can include the responsible legal entity, impartiality commitment, certification conditions and routes for complaints and appeals. Ask how significant changes or conflicts are notified. The evidence should help a customer understand accountability, rather than simply display a large collection of policy titles.
Do not assume that publishing confidential client lists proves good governance. Appropriate confidentiality can be part of professional conduct. A provider can explain its procedures and capability without releasing another customer’s audit report. Record unavailable public information fairly and distinguish it from evidence of an actual failure.
Bring impartiality into provider comparisons
Give shortlisted bodies the same relationship information and ask the same questions. Compare how clearly they identify responsibility and resolve the concern. Low price, a famous brand or friendly communication does not independently establish that a particular arrangement is impartial.
Research-based rankings can describe governance evidence without publishing private scores or declaring an organisation free from every possible conflict. Global ISO Register’s methodology sets out its wider editorial approach. Buyers should still review their own consultancy history, proposed team and contract before appointment.
Maintain the arrangement after appointment
Notify the provider when relevant circumstances change. A replacement auditor, new consultancy engagement, ownership change or different service package may require another review. Keep the current relationship description accessible to the person managing certification.
An effective arrangement is one that can respond to a real concern with an accountable process. Clear boundaries help everyone: the customer knows who owns implementation, the auditor can assess evidence and the certification body can make a supported decision. That clarity is more useful than a broad promise that there can never be a conflict.
Sources and article note
Framework references: ISO/IEC 17021-1, European Accreditation questions and answers and ANAB client rights and responsibilities. Confirm the current applicable requirements and specific relationship with the responsible certification or accreditation body.
The worksheet and scenario are editorial guidance, not findings about a named provider. Read the ranking methodology for the site’s research approach. Explore providers through the directory.
Use the contact page for corrections. Certification bodies may submit organisation details for review. A listing does not approve a particular consultancy relationship or certification decision.
