ISO/IEC 17021-1 is the international standard containing principles and requirements for bodies that provide audit and certification of management systems. It addresses the competence, consistency, impartiality, structure, resources, information, certification processes, and management system of a certification body.
ISO/IEC 17021-1:2015 specifies principles and requirements for bodies providing audit and certification of management systems.
ISO identifies competence, consistency, and impartiality as central elements of the standard.
It applies to management system certification bodies carrying out third-party conformity assessment activities.
A certification body does not necessarily have to offer every type of management system certification covered by the standard.
ISO/IEC 17021-1 addresses areas including: Impartiality Competence Responsibility Openness Confidentiality Responsiveness to complaints Risk-based considerations Legal and contractual matters Liability and financing Organizational structure Personnel competence Auditor and technical expert management Personnel records Outsourcing Public information Certification documents Confidentiality and information exchange Initial certification Audit planning Surveillance Recertification Special audits Suspension and withdrawal Reduction or extension of certification scope Complaints and appeals Certification records Management system requirements ISO's overview of conformity assessment bodies confirms that ISO/IEC 17021-1 contains requirements covering general, structural, resource, information, process, and management-system areas for management-system certification bodies.
Why this matters for a certification body The standard affects the whole certification operation, not only the auditor conducting an audit.
A certification body therefore needs controlled processes and reliable records throughout its certification lifecycle.
CABflo is certification body management software. It helps organise records and workflows across the certification cycle. It does not replace professional judgment, make certification decisions, or guarantee ISO/IEC 17021-1 conformity or accreditation.