A certification body built around the audit trail.

Why we exist

A certificate is meant to tell your customers that your management system works, not just that it is written down. That only holds if the audit tests real evidence, the decision is made independently, and the certification body is honest about what it found.

We set up Audit & Certification Services to do exactly that, for organisations that need their certificate to stand up to scrutiny from customers, tender panels and regulators.

Who audits you

Our auditors have run certified management systems from the inside as well as audited them. Between them, the team brings executive technology and security leadership, lead auditor experience at a certification body, and experience auditing a certification body itself against ISO/IEC 17021-1.

Sector experience includes software and SaaS, local government, critical infrastructure and operational technology, and telecommunications. The team is led by the holder of an Australian Government security clearance.

Before anyone leads an audit for us, they are evaluated against the competence requirements of ISO/IEC 17021-1 and of the scheme standard for that audit. Their performance is then reviewed on every audit they lead.

Human in the loop.

Certification depends on competent people who test evidence, understand context and stay accountable for their conclusions. We use software to keep records and the audit trail in order. Every finding, grading and certification decision is made by an accountable person, never by a tool.

How we stay independent

We certify; we do not consult. We do not provide consultancy on the management systems we certify, and we do not recommend consultants.

The person who audits you never makes the certification decision. A reviewer independent of the audit team does, on the evidence in the report.

We pay no referral fees or commissions, and accept none. Every engagement is screened for conflicts of interest before we accept it, and our approach to impartiality is reviewed each year with independent interested parties.

What we certify

ISO/IEC 27001 information security, ISO/IEC 27701 privacy, ISO/IEC 42001 AI management and ISO 9001 quality management, for organisations across Australia and New Zealand. Where your systems are integrated, we audit them together. Whether an audit is on-site or remote is decided by your scope and risk.

Company details

Audit & Certification Services Pty Ltd · ABN 52 669 242 719 · ACN 669 242 719

Melbourne, Victoria · info@acscert.com.au · 1300 670 765