ISO Certification: Consultant vs. Certification Body Explained
If you’ve started looking into ISO certification, you’ve almost certainly encountered both terms. ISO consultants. Certification bodies. Sometimes the same company seems to offer both, which adds to the confusion.
They are not the same thing, and mixing them up causes real problems — usually at the point where you’ve paid one and assumed it covered both.
Here’s the actual difference, in plain terms.
What an ISO Consultant Actually Does
An ISO consultant works with your business, on your side, to get you ready for certification. Think of them as a preparation partner rather than an assessor.
What a consultant typically covers:
- Gap analysis — comparing your current processes against what the relevant ISO standard actually requires, and identifying what’s missing
- Documentation — helping you write or structure the policy documents, procedures, and records the standard needs
- Staff training — making sure the people in your business understand what the standard expects of them and how your system works
- Internal audit support — running a practice audit before the real one, so you’re not discovering problems on the day
A consultant is usually hired directly by your business, works during the preparation phase, and doesn’t issue the certificate. They’re not independent from you — they’re working for you.
The quality of ISO consultants varies considerably. Some are former auditors with deep standard knowledge. Others are generalists who’ve worked through enough certifications to know the paperwork. When you’re choosing one, ask specifically about their experience with your standard and sector. For more on what to look for, the guide on what to look for in an ISO consulting company covers that in detail.
What a Certification Body Actually Does
A certification body is the independent organisation that assesses your business against the standard and, if you pass, issues the certificate.
What a certification body does:
- Conducts the Stage 1 audit (reviewing your documentation)
- Conducts the Stage 2 audit (visiting your site and verifying implementation)
- Raises nonconformances where requirements aren’t met
- Issues the certificate if the audit is successful
- Carries out annual surveillance audits and three-yearly recertification audits
The critical word here is independent. A certification body cannot also be your consultant — they can’t help you prepare and assess whether you’re ready. That’s a conflict of interest, and reputable certification bodies won’t do it.
In the UK and internationally, certification bodies are expected to be accredited by an IAF (International Accreditation Forum) member body — in the UK, that’s UKAS. Accreditation confirms the certification body is operating independently and to a recognised standard. According to the IAF’s accreditation requirements, impartiality is non-negotiable for any body issuing management system certificates.
Why a Business Might Need Both
Most businesses going through ISO certification for the first time need both a consultant and a certification body — but for different things.
The typical sequence looks like this:
- You hire an ISO consultant to run the gap analysis and help build your management system
- The consultant prepares your documentation, trains your team, and runs an internal audit
- Once you’re ready, an independent certification body comes in to conduct the formal audit
- If the audit goes well, the certification body issues your certificate
The consultant doesn’t assess you. The certification body doesn’t prepare you. They play different roles in the same process.
How to Tell Which One You’re Actually Talking To
This is where it gets genuinely confusing, because some organisations use the language interchangeably — or deliberately blur the lines.
Signs you’re talking to a consultant:
- They offer gap analysis, documentation help, or training as part of their service
- They work with you over weeks or months ahead of the audit
- They charge a project or day rate rather than an audit fee
- They won’t issue the certificate themselves
Signs you’re talking to a certification body:
- They’re accredited by UKAS or an equivalent IAF member
- They conduct audits and issue certificates
- They operate independently from any advisory or consulting work
- They’re auditing against the standard, not helping you meet it
A company that offers both is a red flag. It can happen informally — someone at the same firm does the consulting, a colleague does the audit — but a properly accredited certification body will have policies that prevent this.
Which One Does AceQu Provide?
AceQu’s ISO certification services cover the full preparation side — gap analysis, documentation support, internal audit preparation, and audit liaison. The team works with your business to get the management system built and ready for assessment.
The formal certification audit is then carried out by an independent accredited certification body. That separation is deliberate, and it’s what makes the certificate meaningful once it’s issued.
If you’re trying to work out exactly where to start — whether you need a consultant first, a certification body, or both — get in touch and the team can walk you through the sequence based on your current situation.
