There are two decisions here, and most people collapse them into one. First, do you need an accredited certificate at all. Second, which body issues it. Getting the first one wrong costs money; getting it right can save a great deal.
Accreditation, in plain terms
A certification body audits your management system and issues the certificate. An accreditation body assesses the certification body and confirms it is competent and consistent. Two layers, two different organisations.
In the UK the accreditation body is UKAS. It is not the only one, and it is not a global authority. The United States has ANAB, Australia and New Zealand have JAS-ANZ, and most countries have their own. What connects them is the International Accreditation Forum and its Multilateral Recognition Arrangement. Signatories to the IAF MLA recognise each other's accredited certificates.
That last point matters more than the UKAS name does. A certificate issued under ANAB or JAS-ANZ accreditation is not a lesser certificate. Under the IAF arrangement it carries the same recognition. The right question is not "is it UKAS", it is "is the accreditation body an IAF MLA signatory".
Where UKAS specifically matters is when someone has asked for it by name. UK public sector tenders and some large UK supply chains do specify UKAS, and if yours does then that is the answer and there is nothing to weigh up. Read the requirement before assuming.
Three things to review before you choose
Work through these in order. The first one decides most of it.
1. Is accredited certification actually required
Go and read the wording. Tenders, framework applications and supply chain questionnaires vary a lot. Some name UKAS specifically. Some say accredited without naming a body, which the IAF arrangement satisfies. Some say certified to ISO 9001 and say nothing about accreditation at all, and a surprising number of businesses assume the strictest reading of that and pay for it.
If nobody is asking, the honest position is that accredited certification may not be the right option for you, because it costs materially more in both money and time for recognition you are not currently using.
2. Cost
Accredited certification is more expensive, and the reasons are structural rather than a margin decision by the certification body. IAF mandatory documents set minimum audit days based on headcount, sites and risk, and an accredited body cannot go below them. More audit days means a higher fee, at initial certification and at every surveillance visit for three years.
Compare total three-year cost rather than the first invoice. The gap between accredited and non-accredited widens over the cycle.
3. Availability
This gets overlooked until it becomes the problem. There is a shortage of qualified auditors, and it bites. Some certification bodies simply cannot get an assessor to you in a workable timescale, and lead times of several weeks to a few months are normal, longer at year end when everyone is trying to close things off. If your tender deadline is six weeks away, availability may decide this for you rather than preference.
So ask the question early and ask it specifically: when can you actually do the stage 1 and stage 2 audits. Not when can you send a quote. A body that is cheaper on paper but cannot assess you until the spring is not cheaper if you lose the contract in the meantime. It is worth getting that date in writing before you sign, and worth asking two or three bodies the same question, because the answers vary far more than the prices do.
Scope availability matters too. For long-established standards there are plenty of accredited bodies to choose from. For newer standards the number holding accreditation for that specific scope is much smaller, which means less choice, less price competition and longer waits. Check that accredited bodies actually cover your standard and your sector before you build a plan around it.
There is also a maturity constraint. An accredited body will generally want your management system to have been operating for a period, commonly three to six months, before it can be assessed. You cannot compress that by paying more.
When accredited certification is the right answer
- A customer, tender or framework asks for it, whether by naming UKAS or by asking for accredited certification generally
- You sell into regulated sectors, or into supply chains that audit their suppliers
- You trade internationally and need the certificate recognised in another country, which is precisely what the IAF arrangement provides
- You expect to be asked in future and would rather not do the work twice
When non-accredited certification is a reasonable choice
This is the part that tends to go unsaid, so here it is plainly. Non-accredited certification is not fraud. It is a legitimate service, and for some businesses it is the better commercial decision.
Accredited certification costs more and takes longer for three specific reasons. IAF mandatory documents set minimum audit days based on your headcount, sites and risk, and a certification body cannot go below them. Your management system generally needs to have been operating for a period, commonly three to six months, before it can be assessed. And the accreditation rules require certification to be separated from consultancy, so the implementation help has to come from somewhere else.
Those constraints exist to make the certificate mean something. But if nobody is asking you for an accredited certificate, you may be paying for recognition you never use.
Non-accredited certification can suit a small business that wants the discipline of an external audit without the cost, an organisation certifying for internal reasons rather than commercial ones, or a business that wants to test the water before committing to the accredited route later.
What you give up is real, so be clear about it. The certificate carries no IAF recognition, so it will not satisfy a customer who has specified accredited certification, and it will not travel across borders. If you later need an accredited certificate you start the process properly rather than upgrading.
Our own service covers both, which is why the homepage says UKAS and non-UKAS. The honest advice depends entirely on who is asking you for the certificate and why.
Telling a genuine body from a worthless one
The distinction that matters is not accredited versus non-accredited. It is honest versus dishonest.
A reputable non-accredited body tells you it is not accredited and explains what that means. A disreputable one implies accreditation it does not hold, or claims accreditation from an organisation that exists only to issue it.
The check takes two minutes. The IAF publishes its members. If a body claims accreditation, find the accreditation body on the IAF site. If the accreditation body is not there, the accreditation is worth nothing regardless of how official the logo looks. Then check the certification body on that accreditation body's own register, because accreditation is scope-specific.
Scope catches people out. A body accredited for ISO 9001 is not automatically accredited for ISO 27001, and accreditation can be limited by industry sector. Check the standard you want, and check your sector is covered.
Other things that should make you slow down: certification promised in days with no mention of audit duration, a price far below every other quote, no named assessor, and long lock-in contracts with lengthy notice periods.
What to ask any certification body
- Are you accredited, and by whom? Then verify the accreditation body on the IAF site and the certification body on that accreditation body's register. A legitimate provider expects this question.
- How many audit days, and how were they calculated? For accredited certification this follows IAF rules. A quote well below the others usually means fewer days than required, and that surfaces later as your problem.
- Who is the assessor and what is their sector background? An assessor who knows your industry finds useful things. One who does not spends the day on paperwork.
- What is the full three-year cost? Certification runs on a three-year cycle with surveillance visits in years one and two. A cheap first year with expensive surveillance is a common shape.
- What are the notice terms if we leave? Ask plainly and read the answer in the contract rather than the email.
Contract terms to read properly
Three-year terms are normal, because the certification cycle is three years. Automatic multi-year renewals with long notice periods are not, and they are difficult to unwind once signed.
Also ask what happens if you want to transfer. Accredited certificates can be transferred between accredited bodies, and a body that presents this as impossible is telling you how it keeps clients.
Does the name on the certificate matter
Among accredited bodies, less than people assume. Large international names carry recognition, which counts if your customers are large and international. Smaller accredited bodies are often cheaper, easier to schedule, and give you the same assessor year after year, which is worth more than it sounds.
An accredited certificate is an accredited certificate. Where the name genuinely matters is if a customer or framework names acceptable bodies, so check that before choosing rather than after.
A sensible process
Work out first whether anyone is actually requiring accredited certification, and if so whether they specify a particular accreditation body. That single answer decides most of it. Then get three quotes, compare audit days rather than headline price, verify accreditation and scope independently, ask about the assessor, and read the notice period.
We do this with clients as part of our certification support service. If the system needs building first, that is our ISO consultancy service. When the audit is booked, our guide to preparing for a certification audit covers what to have ready.
‹ Back to all articles