Explanation
You first build out your management system and then have it assessed by a certification body. The body carries out an audit, reviews documents and evidence, talks to employees and reports its findings. Once any nonconformities are resolved, the certificate follows.
A certificate does not last forever. It has a period of validity and the body returns in between for checks. If the findings are then serious or are left open, the certificate can be restricted or withdrawn. How often and for how long is set out in the scheme and in your agreements with the body.
Certification is different from working to a standard. You can follow ISO 9001 without being certified. The certificate is proof towards clients and principals, and some ask for it when you tender or want access to projects. A gap analysis, internal audits and a management review are the usual preparation.
Example from practice
A contractor who wants to take part in tenders that ask for a certificate first does a gap analysis, carries out internal audits and holds a management review. The certification body's audit follows after that.
© 2026 BrydgeOne. General information, not legal or other professional advice. No rights can be derived from this explanation.
