Does the International Organization for Standardization (ISO) issue certificates directly?

No. The International Organization for Standardization (ISO) develops and publishes international standards, but never conducts audits or issues certificates. Certification is performed by independent third-party Certification Bodies accredited under ISO/IEC 17021-1 by national accreditation bodies (such as NAAU in Ukraine, UKAS in the UK, or DAkkS in Germany).

Should a Ukrainian company obtain a national DSTU ISO certificate or an international ISO certificate?

If your primary goal is bidding on Prozorro public procurement tenders, meeting Ukrainian statutory licensing rules, or supplying domestic clients, a DSTU ISO certificate from a Ukrainian body accredited by NAAU is ideal. Because NAAU is a signatory to the EA MLA and IAF MLA, NAAU-accredited certificates carry international recognition. If a foreign buyer explicitly specifies a global registrar accredited by UKAS, DAkkS, or ANAB in the contract, choose an international body.

How can I verify the authenticity of a supplier's ISO certificate?

Follow three verification steps: 1) search for the company name or certificate number in the global IAF CertSearch database (iafcertsearch.org); 2) verify that the issuing certification body holds an active accreditation certificate in the NAAU registry (naau.org.ua) or the respective foreign IAF member directory; 3) confirm that the supplier's EA/NACE industry code falls within that certification body's accredited scope.

How long is an ISO certificate valid and why are annual surveillance audits mandatory?

Under ISO/IEC 17021-1, a management system certificate is issued for a 3-year period, conditional on passing annual Surveillance Audits at 12 and 24 months. If an organization refuses or delays a scheduled surveillance audit, the certification body is required to suspend and subsequently withdraw the certificate.

Can an enterprise implement and certify multiple ISO standards simultaneously?

Yes, through an Integrated Management System (IMS). Because ISO 9001 (quality), ISO 14001 (environment), ISO 45001 (occupational health and safety), ISO 50001 (energy), and ISO/IEC 27001 (information security) share the same 10-clause Harmonized Structure (Annex SL), they can be implemented as a single system and audited together with a 20-30% reduction in total audit man-days under IAF MD 11.

Why do testing laboratories under ISO/IEC 17025 require NAAU accreditation rather than certification?

DSTU EN ISO/IEC 17025:2019 is not a management system standard governed by ISO/IEC 17021-1; it establishes requirements for the technical competence of testing and calibration laboratories. Therefore, formal recognition of a laboratory's competence to issue internationally accepted test reports is granted exclusively through accreditation by the national accreditation body (NAAU).

How do accredited certification bodies calculate the cost and duration of an ISO audit?

Accredited certification bodies must calculate minimum audit duration in man-days using the mandatory tables in international document IAF MD 5. The calculation is based on effective personnel headcount (including shift workers and on-site contractors), industry complexity/risk category, the number of physical sites, and whether product design (Clause 8.3) is included in scope.

ISO Certification in Ukraine: Standards, NAAU & IAF Guide

International ISO certification architecture: NAAU and IAF accreditation hierarchy, business standards matrix, and the 3-year audit cycle

Need a certification consultation?

Free Consultation

How the Global ISO Accreditation System Works: Why ISO Never Issues Certificates and What IAF and NAAU Do
National DSTU ISO vs. International ISO Certificate: Choosing for Prozorro Tenders vs. Export Contracts
Matrix of the 8 Core ISO Standards for Business: Scope, National DSTU Adoptions, and Industry Triggers
Integrated Management Systems (IMS): How the Annex SL Harmonized Structure Cuts Audit Costs by Up to 30%
The Three-Year Certification Lifecycle Under ISO/IEC 17021-1: Stage 1, Stage 2, Surveillance, and Recertification
Six Red Flags of Unaccredited '3-Day Certificates' and How to Verify Certificates via IAF CertSearch

ISO Certification in Ukraine and for Export: Comparing Core Standards, NAAU/IAF Accreditation, and Verifying Legitimate Certificates

On This Page

Frequently Asked Questions

Tags

Related resources