How to choose an accredited ISO registrar

Choosing a certification body (CB), also called a registrar, is a procurement decision with a long tail. You will live with the certificate mark, the auditor style, and the surveillance calendar for at least three years. Treat it like selecting an external financial auditor: competence and independence first, logo familiarity second.

This guide is written for mid-market manufacturers and professional-services firms — typically operations, quality, IT, or compliance leads — who need accredited certification to ISO 9001, ISO/IEC 27001, ISO 14001, ISO 45001, and/or ISO/IEC 42001.

1. Decide what “accredited” must mean for you

A useful certificate is issued by a CB that is accredited by an accreditation body (AB) operating under the IAF Multilateral Recognition Arrangement. In the United States that AB is often ANAB. In the United Kingdom it is often UKAS. Other IAF MLA marks (RvA, JAS-ANZ, DAkkS, and others) are also widely accepted.

What is not sufficient:

• A CB that is “ISO certified” itself and therefore claims it can certify you.
• A training company that “issues ISO certificates.”
• A consultant who offers to audit and certify the system they wrote.

Ask for the legal entity name, the accreditation body, and the standard + revision on the schedule of accreditation. Then look that entity up in the AB directory and in IAF CertSearch.

If a key customer specifies “ANAB only” or “UKAS only,” that constraint belongs in the RFQ. Do not discover it at Stage 2.

2. Separate the brand from the entity

Global groups (BSI, SGS, Bureau Veritas, Intertek, DNV, TÜV-family firms, LRQA, DEKRA) operate many legal entities. The brochure is not the certificate. Your contract should name the company that holds the accreditation you care about.

Specialist firms (for example a 27001/42001 assessor) may be a better technical fit even if they are less famous on a factory floor. Conversely, a security boutique is the wrong lead CB for a multi-plant 9001/14001/45001 program.

3. Match competence to your work, not your slide deck

Ask for:

• IAF or EA codes they will register you under.
• Two or three anonymized examples of similar audits (process type, not client name if confidential).
• Named lead-auditor competence for 27001 or 42001 if those are in scope.
• Language and shift coverage for shop-floor interviews.

A CB that is excellent in food plants can still be a poor choice for a professional-services ISMS, and the reverse.

4. Design the program before you collect prices

Write down, in one page:

• Standards and editions.
• Sites, headcount bands, and which sites are central functions.
• Integrated versus separate certificates.
• Transfer of existing certificates, if any.
• Constraints (customer-named brands, AB marks, no remote Stage 2, etc.).

Send the same page to every CB. Otherwise you will compare unlike day counts and blame “price.”

This site does not publish audit prices. Day rates and travel vary by country, sector, and integration. Any blog that quotes a single “ISO 9001 cost” for all manufacturers is guessing. What you can demand is a transparent day calculation (see what CB quotes include).

5. Run a three-to-five CB compare

A workable mid-market shortlist:

1. One global TIC brand your customers already recognize.
2. One North American or regional registrar with manufacturing density (if you are a plant).
3. One security-competent CB if 27001/42001 matter.
4. Optional: the CB that already audits a sister company, if accreditation and chemistry are still right.

Use the directory to build that set, then request quotes with the same scope pack.

Score them on:

Criterion	Why it matters
Accredited scope (live)	Without it the certificate may not survive customer due diligence
Sector competence	Audit quality and nonconformity usefulness
Integration design	Avoids duplicate days and conflicting findings
Scheduling honesty	Mid-market plants cannot pause a line for a surprise week
Transfer / certificate mark	Switching CBs has administrative cost
Cultural fit	You will argue about evidence for three years

6. Watch for independence problems

Consultants may recommend “their” registrar. That can be efficient. It can also be a conflict. ISO/IEC 17021-1 restricts CBs from certifying systems they consulted on. If one firm wrote your procedures, they should not be the certifier.

Internal champions sometimes pick the CB that promised the shortest audit. Short is not the same as competent. Under-scoping is how certificates get challenged later.

7. Recheck 42001 like it is a new market

ISO/IEC 42001 accreditation is newer than 9001. Press releases age quickly. If AIMS is in your 12–24 month plan, put “confirm live 42001 scope” on the quarterly quality-planning calendar — not only on the original RFQ.

8. Make the decision in writing

Record why you chose the CB: accreditation IDs, codes, integration approach, and any customer constraint. Future you, or the next quality manager, will need that memo when someone asks why you are not using the logo they saw at a trade show.

When you are ready, compare bodies in the directory and send one scope pack through Get quotes.