Choosing the Right ISO 45001 Certification Body: What to Look For
Your certification body is your partner for three years. They audit your system, issue your certificate, and return annually to verify you’re maintaining standards. Choosing the wrong body wastes time, money, and credibility. Choosing wisely accelerates your journey to certification and ensures your certificate carries real weight.
This choice is more important than most organisations realise. A poor certification body might rubber-stamp a weak system. A good one will push you to genuinely improve. Let’s walk through what matters.
Why Accreditation Matters: The First Filter
Your certification body must be accredited by a national accreditation body. This isn’t optional. A non-accredited certifier can hand you a certificate, but it’s worthless. Clients and supply chain partners won’t recognise it. Insurance companies won’t acknowledge it. You’ll have wasted your investment.
Accreditation Bodies by Region
- Australia: JAS-ANZ (Joint Accreditation System of Australia and New Zealand). Look for their logo or search their register at jasanz.org.au
- United Kingdom: UKAS (United Kingdom Accreditation Service). Search their register at ukas.com
- Europe: National accreditation bodies vary by country (Germany: DAkkS, Netherlands: RvA, France: COFRAC). All are signatories to the European co-operation for Accreditation (EA).
- United States: ANAB (The American National Standards Institute), though ISO 45001 certification is less common in the US than in other regions
- Rest of World: Each country has a national accreditation body. Check if they’re signatories to the International Accreditation Forum (IAF).
All legitimate accreditation bodies are signatories to the IAF. This mutual recognition arrangement means a certificate from an IAF-accredited body in any country is recognised globally. Your Australian JAS-ANZ certificate will be recognised in the UK, Europe, and beyond.
When evaluating a certification body, always verify their accreditation directly on the accreditation body’s register. Don’t trust claims in their marketing. Go to JAS-ANZ.org.au, search their register, and confirm the body is listed with current accreditation for ISO 45001.
Red Flag: A certification body that can’t prove accreditation or claims accreditation is being processed. This is not acceptable. Only use accredited bodies.
Key Selection Criteria: Beyond Accreditation
Once you’ve confirmed accreditation, evaluate on these factors:
Sector Code Expertise
ISO 45001 hazards vary dramatically by industry. A construction safety system differs fundamentally from healthcare, which differs from manufacturing. Your certifier should understand your sector’s specific hazards, regulatory landscape, and risk controls.
When you contact a certification body, ask: “Do you certify ISO 45001 systems in [my industry]?” If they say yes, ask for references—other organisations they’ve certified in your sector. Call those organisations. Ask whether the auditor understood their industry and whether the audit was appropriately rigorous.
If a certification body certifies everything (construction, healthcare, IT, manufacturing, agriculture), it’s unlikely their auditors have deep sector expertise. Specialised bodies that focus on a few industries tend to conduct more rigorous audits because their auditors know the sector intimately.
Auditor Competence and Experience
You’re not hiring a certification body—you’re hiring the auditor they’ll assign to you. Request the CV of your proposed lead auditor before committing. Look for:
- ISO 45001 audit experience (how many systems have they certified?)
- Industry experience (have they worked in or audited your sector?)
- Formal qualifications (auditor certifications, health and safety qualifications)
- Recent audits (are they actively auditing, or have they been desk-bound for years?)
A good auditor has conducted dozens of ISO 45001 audits, understands your industry, holds relevant certifications, and is actively in the field. A weak auditor has minimal ISO 45001 experience, lacks sector knowledge, and may be newly certified.
Don’t hesitate to ask for a different auditor if the proposed one lacks relevant experience. Most certification bodies will accommodate this request.
Geographic Coverage and Multi-Site Capability
If you have operations across multiple locations, your certification body must be able to audit all of them or have partners who can. Some certification bodies operate nationally; others are regional. Some are part of multinational networks (one of the “big three” or “big four” certification bodies); others are independent.
For a multi-site certification, you need consistency. The same certifier (or certified partners) auditing all sites ensures consistent standards and understanding of your global system. Cobbling together auditors from different bodies creates inconsistency and confusion.
Ask whether they can audit all your sites from a single point of contact, and whether they coordinate across locations.
Turnaround Time Between Stages
How long between Stage 1 and Stage 2? Some bodies offer 2-3 weeks; others take 8-12 weeks. This affects your overall certification timeline. A long gap means your team must hold focus on findings for months, rather than addressing them while momentum is high.
Ask explicitly: “What’s your typical timeline between Stage 1 and Stage 2?” and “How soon can you schedule Stage 2 after we’ve addressed Stage 1 findings?”
Surveillance and Recertification Planning
Your certification body will conduct annual surveillance audits for three years, then a recertification audit. Ask about their approach:
- How do they plan surveillance audits? Is it risk-based, or do they follow a generic schedule?
- Will the same auditor conduct surveillance, or might it change?
- How much notice do you get for surveillance audits?
- What’s included in surveillance audit fees? Are there surprise costs?
A well-planned surveillance audit focuses on different areas each year so that by your recertification in year three, they’ve comprehensively reviewed the entire system. A poorly planned surveillance audit audits the same areas every year and misses other areas entirely.
Price Transparency
Ask for a complete quote covering:
- Stage 1 audit fee
- Stage 2 audit fee
- Each of three annual surveillance audits
- Recertification audit (year 3)
- Travel costs and expenses
- Certificate issuance and maintenance
- Any additional fees for multi-site audits
Hidden costs are a red flag. You should know the total three-year investment before you commit.
Price varies by organisation size and complexity. For a small organisation (10-50 people), expect $8,000-$15,000 per initial audit cycle. For a large organisation (500+ people), expect $15,000-$30,000+. Prices vary by region and certifier—shop around.
The Big Three Certification Bodies vs. Boutique Providers
In many countries, the market is dominated by large multinational certification bodies (the “Big Three” or similar). They have scale, geographic coverage, and brand recognition. They’re often (but not always) good choices.
Large Certification Bodies: Advantages and Risks
Advantages: National and international coverage, multiple auditors (so you can choose), established processes, strong accreditation track records.
Risks: Less sector specialisation (auditors spread across many industries), potential auditor variability, less flexibility on approach, bureaucratic processes, sometimes higher cost.
Boutique Providers: Advantages and Risks
Advantages: Often specialised in specific sectors, more personal attention, flexibility, more experienced auditors, potentially lower cost.
Risks: May lack geographic coverage if you’re multi-site in different regions, smaller team means less flexibility if your auditor is unavailable, less established track record.
Neither is universally better. A large certifier that specialises in your industry can be excellent. A boutique certifier that covers your regions and sectors can be better than a large generalist.
Focus on sector expertise, auditor competence, and geographic capability. Don’t choose based on brand alone.
10 Questions to Ask Before Signing with a Certification Body
When you’ve narrowed to your top choice, ask these questions before committing:
- Accreditation Verification: “Can you confirm your accreditation status and provide a link to your listing on [relevant accreditation body register]?”
- Auditor Details: “What is the CV of the proposed lead auditor? How many ISO 45001 systems have they certified? Do they have experience in [my industry]?”
- Sector Experience: “How many ISO 45001 certifications have you completed in my industry? Can you provide references?”
- Turnaround Time: “What’s your typical timeline between Stage 1 and Stage 2? How quickly after we address findings can you schedule Stage 2?”
- Multi-Site Capability: “If we expand to multiple sites, can you audit all of them? How do you ensure consistency across sites?”
- Surveillance Planning: “How do you plan surveillance audits? Will we have the same auditor? How much notice do we get?”
- Price Details: “Provide a complete three-year quote covering all audits, travel, and fees. Are there any additional costs I should know about?”
- Communication Approach: “How often will we communicate during the certification process? Can we reach our auditor if we have questions between audits?”
- Dispute Resolution: “If we disagree with a finding, how is this resolved? What’s your appeals process?”
- System Requirements: “What documentation and evidence do you require at Stage 1? Are there specific formats you prefer?”
Don’t accept vague answers. If they say “turnaround is typically 4-6 weeks” but can’t commit to a specific timeline, that’s a warning. If they say “price varies” but won’t provide a detailed quote, move on.
Red Flags: When to Walk Away
Certain signs indicate a certification body isn’t trustworthy. If you see these, look elsewhere:
Red Flag 1: Can’t Prove Accreditation
They claim accreditation but can’t point you to their listing on the accreditation body register. This is disqualifying. Don’t use non-accredited certifiers under any circumstances.
Red Flag 2: “Guaranteed Certification” or “We’ve Never Failed Anyone”
Legitimate auditors sometimes find major nonconformities. If a certification body claims 100% pass rate and guaranteed certification, they’re not auditing rigorously. You want an auditor who’ll find your gaps—that’s how you improve.
Red Flag 3: No Auditor CV or Minimal Experience
They won’t share the auditor’s CV or admit the auditor has minimal ISO 45001 experience. This suggests weak auditors. You deserve experienced auditors.
Red Flag 4: Unreasonably Low Price
If the price is significantly below market rate, ask why. Are they cutting corners? Will they spend less time auditing? Are there hidden costs? Cheap isn’t always better.
Red Flag 5: Unwillingness to Discuss Sector Expertise
You ask about experience in your industry, and they deflect or claim “all industries are similar.” They’re not. An auditor who doesn’t understand your sector will miss critical issues.
Red Flag 6: Consultant Conflicts of Interest
Some consultants have financial relationships with certification bodies (referral fees, commissions). Ask your consultant if they’re paid for recommending a particular certifier. Transparent disclosure is good. Hidden relationships are problematic.
This isn’t to say consultants shouldn’t work with certification bodies—they often do, and it’s normal. But you should know about it.
1st Party, 2nd Party, and 3rd Party Audits: What’s the Difference?
As you research certification, you’ll hear these terms. Understanding them matters.
1st Party Audit: Your own staff auditing your own system. This is your internal audit (Clause 9.2). It’s not certification.
2nd Party Audit: A customer or supply chain partner auditing your system to verify you meet their requirements. This isn’t certification either, though it can assess against ISO 45001.
3rd Party Audit: An independent, accredited certification body auditing your system. This is the audit that results in ISO 45001 certification.
Only 3rd party audit by an accredited certifier results in a valid ISO 45001 certificate.
Multi-Standard Certification: ISO 9001 Quality + ISO 14001 Environment + ISO 45001 Safety
Many organisations pursue multiple ISO standards. If you’re considering ISO 9001 (quality), ISO 14001 (environment), and ISO 45001 (safety), should you use the same certification body for all three?
Advantages of Multi-Standard Certification
- One certification body, one set of audits, coordinated schedule
- Integrated audit approach (auditor reviews how standards overlap)
- One point of contact for all certifications
- Potentially lower overall cost
- Aligned surveillance audits (all audited in same visit)
Risks of Multi-Standard Certification
- Auditor must be competent in all three standards (harder to find experienced auditors)
- Less sector specialisation (they spread expertise across quality, environment, and safety)
- If one standard audit reveals issues, all three may be delayed
If using one certifier for multiple standards, verify they’re accredited for all three, and that the auditor has competence in all three standards, not just one.
How Ethical Consultants Guide Certification Body Selection
If you’re working with a consultant, they may recommend certification bodies. How should this work ethically?
A good consultant will:
- Provide multiple options, not just one recommendation
- Explain criteria for comparison (sector expertise, auditor experience, price, turnaround time)
- Disclose any financial relationships (referral fees, preferred partner arrangements)
- Let you make the final choice
- Not claim to guarantee certification (no consultant can guarantee this)
A problematic consultant will:
- Recommend only one body, claiming it’s the only option
- Hide financial relationships
- Claim the consultant and certifier are “necessary partners”
- Claim they have relationships that guarantee a smooth audit
Your consultant and your certification body should be independent. The consultant helps you build your system. The certifier audits it impartially. Both are crucial, but they shouldn’t be entangled.
Key Takeaways
Your certification body is a three-year partner. Choose wisely. Verify accreditation, check auditor credentials, evaluate sector expertise, compare prices, and ask detailed questions before committing.
The right certification body will push you to genuinely improve your system. The wrong one will rubber-stamp weaknesses. The difference is significant.
Start your search with the accreditation body register. Verify accreditation. Research sector experience. Request auditor CVs. Compare prices. Ask detailed questions. Then make a deliberate choice based on your specific needs, not brand or convenience.
Frequently Asked Questions
Yes, it matters significantly. While all accredited bodies must meet international standards, their auditors vary widely in experience and sector expertise. Choose a body with strong experience in your industry and competent auditors.
Yes, but it’s disruptive. You’d typically complete a recertification audit with the new body. However, it’s better to choose the right body upfront and build a long-term relationship.
Some certification bodies offer preliminary audits or mock audits for a fee. This can help you assess their audit style and find gaps before Stage 1. However, it’s not essential if you’ve prepared thoroughly.
Communicate with the certification body immediately. Most will accommodate a request to change auditors. You don’t want to proceed with an auditor you don’t trust for the full three-year relationship.
It depends on your specific needs. Large bodies have scale and geographic coverage. Small bodies may have deeper sector expertise. Focus on sector experience, auditor competence, and geographic capability, regardless of body size.
Visit the accreditation body’s website register directly. In Australia, search JAS-ANZ.org.au. In the UK, search ukas.com. Verify the certifier is listed and accredited specifically for ISO 45001.
Your consultant can recommend options, but you should make the final choice. A good consultant will present multiple options with pros and cons, disclose any financial relationships, and let you decide.
Conclusion: A Strategic Choice
Choosing a certification body is a strategic business decision, not a checkbox. This choice affects your audit timeline, the quality of feedback you receive, your three-year cost, and the credibility of your final certificate.
Invest time in the selection process. Verify accreditation, evaluate auditors, compare options, and ask tough questions. Then choose the body that best matches your needs and has the auditors with genuine expertise in your sector.
The right certification body accelerates your journey to certification and ensures your final certificate carries real weight in the market and your supply chain.
Need Help Evaluating Certification Bodies?
We can help you develop selection criteria, request and compare proposals, and evaluate auditor credentials. Contact us to discuss your certification body selection process.
Recent Comments