ISO/IEC 27001:2022
Information security management systems, for organisations seeking a structured way to manage information security risks.
Management System Certification
Evidence before assumption.
Certification body for organisations that want their management systems tested with care, clarity and human judgement.
Human in the loop. It is how we audit: experienced people follow the evidence, ask the next question and remain accountable for the conclusion.
Certification scope
Focused by design.
Our certification scope covers three management system standards.
ISO/IEC 42001:2023
Artificial intelligence management systems, for organisations that need accountable governance across the AI system life cycle.
ISO 9001:2015
Quality management systems, for organisations that want a disciplined, internationally recognised framework for consistent quality
The certification cycle
A visible path to a defensible decision.
Certification is more than an audit visit. It begins with application review, moves through a two-stage initial audit and continues through surveillance and recertification.
Application review
We confirm the proposed scope, sites, activities, scheme and audit time before accepting the engagement.
Stage 1 audit
We assess readiness, context, documented information and planning for the management system.
Stage 2 audit
We test implementation and effectiveness, record findings and gather objective evidence.
Decision and cycle
An independent certification decision is followed by surveillance and, normally, recertification before the cycle ends.
Independence matters
Certification without consultancy.
We do not provide consultancy on the management systems we certify. Certification decisions are based on objective evidence and protected from commercial, financial and other pressure.
Read our impartiality statement