What is the ISO?
The International Organization for Standardization (ISO) is an independent non-governmental international organisation. It brings together experts from 170 different countries to share knowledge and develop voluntary, consensus-based international market standards. These standards support innovation and provide solutions to global challenges.
The ISO ensures that products and services are safe, reliable, and of good quality. For a UK business, following ISO guidelines helps you stay competitive in a global market by showing you’re playing by the same high-quality rules as businesses all over the world.
What are ISO standards?
ISO standards are essentially the ‘formula’ for the best way of doing something. They cover everything from making a product and managing a process to delivering a service or supplying materials. There are over 25,000 different standards covering almost every industry you can think of, including technology, food safety, and agriculture.
Common standards you might come across include:
-
ISO 9001, which sets out the criteria for a quality management system and helps businesses keep a high level of productivity and quality while delivering products and services to customers
-
ISO 14001, which focuses on environmental management, and works well if you make an Environmental policy
-
ISO 27001, which deals with information security, and works well if you make an Information security policy
-
ISO 45001, which helps you manage occupational health and safety, risk assessments, and hazard identification
-
ISO 22301, which gives you the framework for business continuity management, helping your business stay resilient and bounce back quickly if there’s a major disruption
-
ISO/IEC 42001, which is the standard for artificial intelligence (AI) management systems, ensuring that any AI you use or build is developed safely and ethically
See the ISO website for a list of popular ISO standards.
What is ISO certification?
An ISO certification is a seal of approval that your business runs according to one of the ISO standards. When you’re certified, you have written proof that your processes meet specific international requirements. To get certified, you’ll need to prove you have the right systems in place, such as having a clear quality policy and keeping accurate records of your business activities.
What is a quality policy?
A quality policy is a brief document that outlines your business’s commitment to quality. It serves as the foundation for your quality management system, especially if you’re aiming for ISO 9001 certification. Your policy should explain your business's goals for quality, how you intend to meet customer requirements, and your commitment to getting better at what you do.
You must ensure that everyone in your business understands the quality policy. It shouldn't just sit on a shelf; it needs to be a living part of your business culture. When you make a quality policy, you’re providing a framework for setting quality objectives and showing auditors that your leadership is serious about maintaining high standards.
What are the benefits of ISO certification?
While getting certified isn't usually a legal requirement, it offers a huge competitive advantage. For many businesses, it’s the key to winning new business. Many government bodies and large corporations won't even consider a tender unless the supplier is ISO certified. It proves you have a professional setup and that you take risk management seriously.
Beyond winning contracts, certification helps you save money in the long run. By following these standards, you’ll likely find that you reduce waste, have fewer product failures, and improve your overall efficiency. It also boosts your reputation and credibility, showing customers that they can trust you to protect their data or deliver a consistent service.
How does a business become ISO certified?
Achieving certification is a structured process that usually follows these steps:
-
choose the right standard - identify which ISO standard fits your business goals
-
gap analysis - compare your existing processes against the standard's requirements to see what needs to change
-
documentation - make a quality policy and document your procedures to meet the standard's criteria
-
implementation - roll out the new processes and ensure your staff are trained to follow them
-
internal audit - carry out your own check to ensure the system is working effectively before the formal assessment
-
external audit - hire an accredited body to perform a two-stage audit. The first stage checks your documentation, while the second stage involves a site visit to see your processes in action
If you pass the audit, you'll be awarded a certificate that typically lasts for three years, provided you pass annual surveillance checks.
What is the cost of ISO certification?
The cost of certification depends on the size of your business and the complexity of your operations. You’ll need to account for the initial audit fees, the time spent developing your management systems, and ongoing costs for annual surveillance audits to keep your certificate active.
If you use an external consultant to help you prepare, their fees will be an additional consideration.
What are the factors for choosing an ISO certification body?
Choosing the right body to audit you is just as important as the certification itself. In the UK, you should check if the body is accredited by the United Kingdom Accreditation Service (UKAS). A UKAS-accredited certificate is the 'gold standard' and is the one most likely to be recognised by government departments and major clients.
To ensure these bodies operate fairly, they follow guidelines set by the ISO Committee on Conformity Assessment (CASCO). This is the specific ISO committee that develops the rules for how the certification process itself should work. By adhering to CASCO’s standards, certification bodies ensure that their audits are consistent, impartial, and reliable across the globe.
You should also consider:
-
their experience in your specific industry
-
the total cost, including any hidden travel expenses for the auditor
-
their reputation and how recognisable their 'mark' or logo is to your customers
-
whether they offer integrated audits, if you want to be certified for multiple standards at once
If you need to prepare for your audit, you can use our Bespoke drafting service to make a quality policy or other essential business documents. Do not hesitate to Ask a lawyer if you have any questions about how ISO standards might affect your business operations.
