ISO 27001 certification bodies

These 0 bodies audit and certify ISMSs against ISO/IEC 27001. We look up each one's accreditation on IAF CertSearch and the national register, and show when we checked.

Certification bodies: common questions

What is an ISO 27001 certification body?

It's an independent organisation that audits your information security management system (ISMS) against ISO/IEC 27001 and issues the certificate if you pass. Some people call it a registrar.

Why does accreditation matter?

A national accreditation body that belongs to the IAF, such as UKAS in the UK or ANAB in the US, has assessed an accredited body itself. Customers and procurement teams usually expect a certificate from one.

Can my consultant also certify me?

No. A certification body has to stay independent of the work it audits, so it can't certify a system that it, or a closely linked consultancy, helped you build.

How do I check a certificate or a body?

Search for the certificate or the body on IAF CertSearch and the national accreditation register. Then check that the certificate's scope matches what your customer needs.