Accreditation criteria: ISO/IEC 17021-1
Management System Certification Body Accreditation
Standard
ISO/IEC 17021-1
At a glance
Who it's for
- Information security (ISO/IEC 27001) certifiers
- Certifiers of sector-specific management systems (food, compliance, anti-bribery and more)
Key requirements
- Personnel competence: qualified and competent personnel with appropriate qualifications and experience
- Impartiality: independence and freedom from conflicts of interest in certification decisions
- Assessment methods: valid and reliable assessment methods and processes for certification activities
- Confidentiality: proper handling and protection of client information and certification data
Benefits of accreditation
- Credibility: independent evidence of certification competence within the approved scope
- Standards conformity: demonstrate competence against applicable accreditation requirements
- Stakeholder confidence: build trust with clients, regulators and other stakeholders through accredited certification
Overview
What does a management system certification body do?
A management system certification body is an organization tasked with evaluating and certifying an entity's management systems against established standards or frameworks, such as ISO management system standards.
Management system certification bodies play a pivotal role in verifying the effectiveness, efficiency and conformity of an organization's management systems to internationally recognized standards. Through comprehensive assessments, they help organizations demonstrate their commitment to continuous improvement, regulatory compliance and customer satisfaction.
Certification by a management system certification body provides assurance to stakeholders, enhances market competitiveness and fosters trust in the organization's ability to deliver consistent quality and performance.
Criteria
ISO/IEC 17021-1
ISO/IEC 17021-1 is the international standard that specifies requirements for the competence, impartiality and consistency of management system certification bodies. Accreditation to ISO/IEC 17021-1 demonstrates that a certification body has the technical competence, resources and management system in place to conduct certification activities effectively and impartially. The ISO/IEC 17021 series covers the qualification and competency of personnel, the validity and reliability of assessment methods, the impartiality and independence of certification decisions, and the confidentiality of client information.
Process
Your 7-step path to accreditation
- 01
Application
Certification bodies initiate the accreditation process by submitting an application form along with required documentation, such as quality manuals, procedures and evidence of competence in specific management system standards.
- 02
Office assessment
ACBNA conducts an on-site assessment to evaluate the certification body's compliance with ISO/IEC 17021-1 requirements, including a review of documentation, interviews with personnel and observation of assessment activities.
- 03
Witness assessment
As part of the process, ACBNA requires witness assessments where an ACBNA assessor shadows an auditor during an assessment to ensure compliance with accreditation standards, reinforcing impartiality, consistency and reliability.
- 04
Review by accreditation committee
The assessment findings are reviewed by the accreditation committee, which determines whether the certification body meets the accreditation criteria. The committee may request additional information or clarification before making a decision.
- 05
Committee decision
Based on the assessment findings and recommendations, the accreditation committee makes a decision regarding accreditation status. Accredited bodies receive a certificate and are listed on ACBNA's official registry.
- 06
Annual surveillance
Accredited certification bodies undergo regular surveillance assessments to ensure ongoing compliance with accreditation requirements. These may include site visits, document reviews and interviews with personnel.
- 07
Reaccreditation at 4 years
Accreditation is valid for four years. To maintain accreditation, certification bodies must undergo reaccreditation at the end of this period, involving a comprehensive reassessment of competence, management system and compliance with ISO/IEC 17021-1.
Standards
Management system standards we accredit
56 standards grouped into 9 technical categories, covering management system disciplines and supporting guidance.
Artificial Intelligence
7- ISO/IEC 17021-1:2015
Conformity Assessment — Requirements for Bodies Providing Audit and Certification of Management Systems — Part 1: Requirements
- ISO/IEC 23894:2023
Information Technology — Artificial Intelligence — Guidance on Risk Management
- ISO/IEC 27090:2026
Cybersecurity — Artificial Intelligence (AI) — Addressing Security Threats and Compromises to AI Systems
- ISO/IEC 42001:2023
Information Technology — Artificial Intelligence — Management System (AIMS)
- ISO/IEC 42005:2025
Information Technology — Artificial Intelligence — AI System Impact Assessment
- ISO/IEC 42006:2025
Information Technology — Artificial Intelligence — Requirements for Bodies Providing Audit and Certification of Artificial Intelligence Management Systems
- ISO/IEC 5338:2023
Information Technology — Artificial Intelligence — AI System Life Cycle Processes
Continuity, Risk & Resilience
3- ISO 22301:2019
Business Continuity Management System (BCMS)
- ISO 28000:2022
Security and Resilience — Security Management Systems
- ISO 31000:2018
Risk Management — Guidelines
Environment, Energy & Safety
5- ISO 14001:2015
Environmental Management System (EMS)
- ISO 39001:2012
Road Traffic Safety Management System (RTSMS)
- ISO 45001:2018
Occupational Health and Safety Management System (OH&SMS)
- ISO 46001:2019
Water Efficiency Management System
- ISO 50001:2018
Energy Management System (EnMS)
Industry & Sector-Specific
8- ISO 13485:2016
Medical Devices Quality Management System
- ISO 14298:2021
Security Printing Management System
- ISO 15378:2017
Quality Management Requirements for Primary Packaging Materials for Medicinal Products
- ISO 18788:2015
Management System for Private Security Operations
- ISO 19443:2018
Quality Management System for Nuclear Energy Supply Chain
- ISO 22000:2018
Food Safety Management System (FSMS)
- ISO 29001:2020
Sector-Specific Quality Management System for Petroleum, Petrochemical and Natural Gas Industries
- ISO 34101-1:2019
Sustainable and Traceable Cocoa Management System
Information Security & Technology
2- ISO 20000-1:2018
Information Technology Service Management System (ITSMS) — formally ISO/IEC 20000-1
- ISO/IEC 27001:2022
Information Security Management System (ISMS)
Project, Programme & Portfolio Management
7- ISO 21500:2021
Project, Programme and Portfolio Management — Context and Concepts
- ISO 21502:2020
Project, Programme and Portfolio Management — Guidance on Project Management
- ISO 21503:2022
Project, Programme and Portfolio Management — Guidance on Programme Management
- ISO 21504:2022
Project, Programme and Portfolio Management — Guidance on Portfolio Management
- ISO 21505:2017
Project, Programme and Portfolio Management — Guidance on Governance
- ISO 21508:2026
Earned Value Management in Project and Programme Management
- ISO 21511:2018
Work Breakdown Structures for Project and Programme Management
Quality, Governance & Compliance
10- ISO 21001:2018
Educational Organizations Management System (EOMS)
- ISO 30301:2019
Management Systems for Records
- ISO 30401:2018
Knowledge Management System
- ISO 37001:2025
Anti-Bribery Management System (ABMS)
- ISO 37301:2021
Compliance Management System (CMS)
- ISO 41001:2018
Facility Management System (FMS)
- ISO 44001:2017
Collaborative Business Relationship Management System
- ISO 55001:2024
Asset Management System (AMS)
- ISO 56001:2024
Innovation Management System
- ISO 9001:2015
Quality Management System (QMS)
Software & Systems Engineering
10- ISO/IEC 25010:2023
Systems and Software Quality Requirements and Evaluation (SQuaRE) — Product Quality Model
- ISO/IEC 330xx series
Information Technology — Process Assessment
- ISO/IEC/IEEE 12207:2017
Systems and Software Engineering — Software Life Cycle Processes
- ISO/IEC/IEEE 14764:2022
Software Engineering — Software Life Cycle Processes — Maintenance
- ISO/IEC/IEEE 15288:2023
Systems and Software Engineering — System Life Cycle Processes
- ISO/IEC/IEEE 15289:2019
Systems and Software Engineering — Content of Life-Cycle Information Items (Documentation)
- ISO/IEC/IEEE 16085:2021
Systems and Software Engineering — Life Cycle Processes — Risk Management
- ISO/IEC/IEEE 16326:2019
Systems and Software Engineering — Life Cycle Processes — Project Management
- ISO/IEC/IEEE 29119 series
Software and Systems Engineering — Software Testing
- ISO/IEC/IEEE 29148:2018
Systems and Software Engineering — Life Cycle Processes — Requirements Engineering
Sustainability & Community
4- ISO 20121:2024
Event Sustainability Management System
- ISO 21401:2018
Sustainability Management System for Accommodation Establishments
- ISO 24518:2015
Crisis Management of Water Utilities
- ISO 37101:2016
Management System for Sustainable Development in Communities
Scope
Accreditation scope domains
The industries and sectors in which management system certification bodys operate.
Food
Food products, beverages and tobacco (IAF code 3).
Mechanical
Basic metals, fabricated metal products, machinery, equipment, electrical and optical equipment, shipbuilding and other transport equipment (IAF codes 17, 18, 19, 20, 22).
Paper
Publishing companies and printing companies (IAF codes 8, 9).
Minerals
Mining and quarrying, non-metallic mineral products, concrete, cement, lime and plaster (IAF codes 2, 15, 16).
Construction
Construction (IAF code 28).
Goods production
Textiles, leather products, wood products, rubber and plastic products, manufacturing not elsewhere classified (IAF codes 4, 5, 6, 14, 23).
Chemicals
Chemicals, chemical products and fibers (IAF code 12).
Supply
Electricity supply, gas supply and water supply (IAF codes 25, 26, 27).
Transport & waste management
Recycling, transport, storage, communication and other social services (IAF codes 24, 31, 39).
Services
Wholesale and retail trade, financial intermediation, information technology, education, public administration and other services (IAF codes 29, 32, 33, 35, 36, 37).
Nuclear
Nuclear fuel (IAF code 11).
Pharmaceutical
Pharmaceuticals (IAF code 13).
Aerospace
Aerospace (IAF code 21).
Health
Health and social work (IAF code 38).
Explore other programs