Launching a Certification Body: Fourteen Schemes, One System
Starting a certification body looks straightforward from the outside. Recruit auditors, get accredited, sell certificates.
The reality announces itself the first time an accreditation body asks how you determine audit time for a 340-person manufacturing client with three shifts and two sites — and expects an answer grounded in IAF MD 5, adjusted for complexity and IAF code risk, documented in a worksheet, applied consistently across every client you have ever quoted.
Where the toolkits stop
Most ISO/IEC 17021-1 documentation packages cover the clauses of the standard competently: impartiality, competence, audit process, certification decision, appeals. Then they stop — and leave the buyer to write the scheme-specific layer themselves.
That layer is not a detail. For every standard the body certifies, it must define the certification standard and applicable CB requirements, the scope classification and IAF codes, the certification cycle, the audit-time determination basis, and the auditor competence criteria. A body offering ten schemes needs ten of these. Written by someone who understands both ISO/IEC 17021-1 and the sector-specific mandatory documents that sit behind each scheme.
That work, not the manual, is what delays most launches by a year.
What complete actually means
A genuinely complete certification body system carries fourteen scheme descriptions — quality, environmental, occupational health and safety, food safety, information security, anti-bribery, business continuity, facility management, compliance, HACCP, energy, medical devices, event sustainability and healthcare information security — each stating its standard, CB requirements, scope classification, certification cycle and audit-time basis.
Around that: an apex quality manual mapping every ISO/IEC 17021-1 requirement to its implementing document; twenty procedures covering application through certification decision, suspension and withdrawal, marks, complaints, appeals, witness monitoring, outsourcing, transfer, audit and review; twenty forms including the audit time calculation worksheet, Stage 1 and Stage 2 reports, and the technical review and decision record; eight registers including the impartiality risk register, auditor register and certified client directory; fourteen scheme-specific audit checklists; fourteen certificate templates; guidance and training.
Plus eight digital tools — browser-based instruments and an Excel workbook — for the calculations and registers a certification body touches daily.
Business in a box
At 108 items, this is less a documentation set than an operating platform. For a new body, it removes the year of drafting that separates funding from first audit. For an accredited body adding schemes, it removes the scheme-authoring bottleneck. For a consultancy, it is the base to deploy repeatedly.
The market for management system certification is not short of demand. It is short of bodies that can pass accreditation the first time.
A complete Integrated Certification Body Management System aligned to ISO/IEC 17021-1:2015 — 108 items covering fourteen certification schemes, with certificate templates and digital tools — is available now.
The toolkit for this guide: Integrated Certification Body Management System (ISO/IEC 17021-1, 14 Schemes). Instant download, fully editable, yours to keep.