How to choose an accredited ISO registrar

Choosing a certification body (CB), also called a registrar, is a procurement decision with a long tail. You will live with the certificate mark, the auditor style, and the surveillance calendar for at least three years. Treat it like selecting an external financial auditor: competence and independence first, logo familiarity second.

This guide is written for mid-market manufacturers and professional-services firms — typically operations, quality, IT, or compliance leads — who need accredited certification to ISO 9001, ISO/IEC 27001, ISO 14001, ISO 45001, and/or ISO/IEC 42001.

1. Decide what “accredited” must mean for you

A useful certificate is issued by a CB that is accredited by an accreditation body (AB) operating under the IAF Multilateral Recognition Arrangement. In the United States that AB is often ANAB. In the United Kingdom it is often UKAS. Other IAF MLA marks (RvA, JAS-ANZ, DAkkS, and others) are also widely accepted.

What is not sufficient:

• A CB that is “ISO certified” itself and therefore claims it can certify you.
• A training company that “issues ISO certificates.”
• A consultant who offers to audit and certify the system they wrote.

Ask for the legal entity name, the accreditation body, and the standard + revision on the schedule of accreditation. Then look that entity up in the AB directory and in IAF CertSearch. For the step-by-step lookup, see how to verify an ISO registrar’s accreditation.

If a key customer specifies “ANAB only” or “UKAS only,” that constraint belongs in the RFQ. Do not discover it at Stage 2.

2. Separate the brand from the entity

Global groups (BSI, SGS, Bureau Veritas, Intertek, DNV, TÜV-family firms, LRQA, DEKRA) operate many legal entities. The brochure is not the certificate. Your contract should name the company that holds the accreditation you care about.

Specialist firms (for example a 27001/42001 assessor) may be a better technical fit even if they are less famous on a factory floor. Conversely, a security boutique is the wrong lead CB for a multi-plant 9001/14001/45001 program.

3. Match competence to your work, not your slide deck

Ask for:

• IAF or EA codes they will register you under.
• Two or three anonymized examples of similar audits (process type, not client name if confidential).
• Named lead-auditor competence for 27001 or 42001 if those are in scope.
• Language and shift coverage for shop-floor interviews.

A CB that is excellent in food plants can still be a poor choice for a professional-services ISMS, and the reverse.

4. Design the program before you collect prices

Write down, in one page:

• Standards and editions.
• Sites, headcount bands, and which sites are central functions.
• Integrated versus separate certificates.
• Transfer of existing certificates, if any (see how to transfer an ISO certificate).
• Constraints (customer-named brands, AB marks, no remote Stage 2 — see remote vs on-site — etc.).

Send the same page to every CB. Otherwise you will compare unlike day counts and blame “price.” The copyable checklist and what to leave out live in how to build a registrar RFQ / scope pack.

This site does not publish audit prices. Day rates and travel vary by country, sector, and integration. Any blog that quotes a single “ISO 9001 cost” for all manufacturers is guessing. What you can demand is a transparent day calculation (see what CB quotes include).

5. Run a three-to-five CB compare

A workable mid-market shortlist:

1. One global TIC brand your customers already recognize.
2. One North American or regional registrar with manufacturing density (if you are a plant).
3. One security-competent CB if 27001/42001 matter.
4. Optional: the CB that already audits a sister company, if accreditation and chemistry are still right.

Use the directory to build that set, then request quotes with the same scope pack.

Score them on:

Criterion	Why it matters
Accredited scope (live)	Without it the certificate may not survive customer due diligence
Sector competence	Audit quality and nonconformity usefulness
Integration design	Avoids duplicate days and conflicting findings
Scheduling honesty	Mid-market plants cannot pause a line for a surprise week
Transfer / certificate mark	Switching CBs has administrative cost — transfer guide
Cultural fit	You will argue about evidence for three years

The table is the short list of criteria. For the copyable scorecard, qualitative weights, and how to read replies without logo bias, use how to shortlist and score 3–5 ISO registrars.

6. Watch for independence problems

Consultants may recommend “their” registrar. That can be efficient. It can also be a conflict. ISO/IEC 17021-1 restricts CBs from certifying systems they consulted on. If one firm wrote your procedures, they should not be the certifier. Who sells implementation versus accredited certification — and what belongs on a consulting SOW versus a registrar RFQ — is consultant vs certification body.

Internal champions sometimes pick the CB that promised the shortest audit. Short is not the same as competent. Under-scoping is how certificates get challenged later.

7. Recheck 42001 like it is a new market

ISO/IEC 42001 accreditation is newer than 9001. Press releases age quickly. If AIMS is in your 12–24 month plan, put “confirm live 42001 scope” on the quarterly quality-planning calendar — not only on the original RFQ.

8. Make the decision in writing

Record why you chose the CB: accreditation IDs, codes, integration approach, and any customer constraint. A copyable memo lives on the shortlist and scorecard page. Future you, or the next quality manager, will need that note when someone asks why you are not using the logo they saw at a trade show.

When you are ready, compare bodies in the directory and send one scope pack through Get quotes. If you already hold a certificate and the fit is wrong, read how to transfer before you collect a second set of Stage 2 prices.