Win clients with certification · accredited certification your customers can verify
Certification to win contracts: a certificate every buyer can check.
Buyers now check certificates before they award work. Sterling guides you to the standard your customers ask for, with your people, Effivity software and training, then prepares you for an audit by an independent, accredited certification body whose accreditation we check before you sign. Expert and experienced consultants in 60+ countries. We ensure successful certification for our clients.
- A certificate from an accredited body, with a scope covering what your customers contract you for, that a buyer can confirm with the body or in IAF CertSearch
- One proposal for consulting, Effivity software and Sterling Academy learning, with the certification body's fees shown on their own line
- The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides
- Pass the supplier checkA certificate that answers the tender clause, the vendor questionnaire and the procurement portal at the first attempt.
- Verifiable in minutesIssued by an accredited body, so a buyer can confirm it with that body or in IAF CertSearch without chasing you.
- A scope that matches the saleThe activities, products and sites on the certificate are the ones your customers are contracting you for.
- A system behind the paperWhen a customer audits you as a supplier, they find the same working system the certification body found.
Which certificate do your buyers expect?
Start with the certificate your customers ask for, not the one that is quickest to get.
Read the tender, the supplier questionnaire or the customer's supplier manual first: it usually names the standard and sometimes the scheme. Automotive and aerospace buyers name sector schemes with their own rules on who may certify. If nobody has named a standard, Select the Standard™ shows what your sector expects, and several standards can be certified together as one integrated system.
- ISO 9001Quality management
- ISO 14001Environmental management
- ISO 45001Health & safety
- ISO/IEC 27001Information security
- FSSC 22000GFSI food safety
- ISO 13485Medical devices
- IATF 16949Automotive supply
- AS9100Aerospace supply
- ISO 22301Business continuity
- ISO 37001Anti-bribery
- ISO/IEC 20000-1IT service management
- ISO/IEC 42001AI management
- All standards & frameworksThe full catalogue, with sector schemes
The engagement, step by step
From the buyer's requirement to a certificate they can check.
Every engagement runs on Sterling OS™ in five stages, each with deliverables, decision owners and a weekly working session with your consultant. On a win-clients engagement one discipline runs through all five: every decision is tested against what your buyers will look for when they check the certificate. Timings are indicative for a single site.
- 01
Buyer requirement, scope and gap analysis
Weeks 1 to 2What happens
We start from the documents your buyers send: tender clauses, supplier questionnaires, supplier manuals and framework agreements. From them we fix the standard and any sector scheme, then set a certificate scope that covers the activities, products and sites you sell. The gap analysis compares what exists today with every requirement.
You receive
- Buyer requirements matrix: each customer demand mapped to a standard and a scope
- Agreed certificate scope and gap analysis report
- Implementation plan worked back from your bid or supplier-approval date
Your side
The tender or customer documents, a project owner, and the decisions on scope and sites.
- 02
Build and implement
Weeks 3 to 12What happens
Your process owners and your consultant build the processes, controls and records in the weekly session, on Sterling's template sets, and put each into use once it is agreed. Requirements your customers already impose, on delivery, data handling or product safety, go into the system as requirements it must meet and show evidence for.
You receive
- The documented management system, fitted to how you deliver for customers
- Registers for customer and legal requirements, risks and suppliers
- Awareness e-learning under way, with Certificates of Completion
Your side
Process owners in the weekly session and agreed changes put into daily work.
- 03
Operate and build evidence
From week 8What happens
The system runs long enough to produce the records a certification auditor, and later a customer's supplier auditor, will ask to see: complaints handled, suppliers evaluated, objectives measured, incidents investigated. Your consultant reviews the evidence as it builds up and corrects course early.
You receive
- Evidence dashboards in Effivity, by process and by requirement
- Internal auditor training for your audit team, as applicable to your standard
- A monthly progress review against your bid calendar
Your side
Working the way the system says, and telling us where it does not fit.
- 04
Internal audit and choosing the body
Weeks 14 to 18What happens
A full internal audit and a management review test the system before the certification body does. In parallel we compare certification body proposals and check each body's accreditation on the accreditation body's register: the standard, the sector scope, and recognition under the Global ACI arrangement, which replaced the IAF MLA and ILAC MRA on 1 January 2026.
You receive
- Internal audit report, with corrective actions closed on evidence
- Management review record with decisions and actions
- Certification body comparison, with accreditation and sector scope checked
Your side
Management in the review, and the choice of which accredited body to contract.
- 05
Certification audit and verification
Weeks 16 to 24What happens
The body runs its Stage 1 readiness review and then the Stage 2 audit. We prepare your team for both, attend as agreed and support the response to any findings until the body decides. When the certificate is issued, we check its scope and sites against the buyer requirements matrix before you send it to a single customer.
You receive
- Stage 1 and Stage 2 support, with any nonconformities closed
- The certificate checked against every buyer requirement in the matrix
- A short note for your sales team on how customers can confirm the certificate
Your side
Your people doing their jobs as usual, then the certificate shared with your customers.
Who does what
Choose how much of the work Sterling carries.
Design™ and Drive™ are alternative support levels on one method, never steps in sequence. Under Design™ your team implements with Sterling's templates, workshops and coaching; under Drive™ Sterling consultants carry the work with your process owners. In both, Sterling handles the buyer-facing checks: scope, accreditation and the certificate itself.
| Task | Design™ guided | Drive™ fully managed |
|---|---|---|
| Buyer requirements and certificate scope | Sterling from your tender and customer documents | Sterling from your tender and customer documents |
| Gap analysis and implementation plan | Sterling worked back from your bid date | Sterling worked back from your bid date |
| Process mapping and documentation | Together your team drafts on Sterling's templates, Sterling reviews | Sterling with your process owners |
| Registers: customer requirements, risks, suppliers | Your team coached in the weekly session | Sterling populated with your data |
| Awareness and practitioner training | Sterling Sterling Academy | Sterling Sterling Academy |
| Internal audit and management review | Together your trained auditors, Sterling facilitates | Sterling audit conducted, review facilitated |
| Certification body comparison and accreditation check | Sterling you choose and contract the body | Sterling you choose and contract the body |
| Stage 1 and Stage 2 preparation and findings closure | Sterling until the body decides | Sterling until the body decides |
| Certification decision | The independent, accredited certification body never Sterling | |
Not sure which level fits? If a quality, HSE or IT lead can give the programme a few hours a week, Design™ usually works; if the bid date is close or that capacity does not exist, Drive™ is the safer choice. The discovery call settles it.
What you receive
Everything a buyer-ready certificate needs. Nothing charged separately.
- Buyer requirements matrixEvery tender clause and customer demand mapped to a standard, a scope and the evidence that answers it.
- Scope and gap analysis reportThe certificate scope your buyers need and every shortfall against the standard, with owners and dates.
- The documented management systemProcesses, controls and records on Sterling's template sets, built around how you deliver to customers.
- Effivity workspace, configuredDocuments, registers, audits, actions and training records in one place, included at no additional cost.
- Trained peopleAwareness e-learning for everyone and practitioner courses for those who run the system, with Certificates of Completion.
- Internal audit and management reviewThe system tested before the certification body sees it, with corrective actions closed on evidence.
- Certification body shortlist, checkedProposals compared, and each body's accreditation and sector scope confirmed on the accreditation body's register.
- Certificate verification checkThe issued certificate checked against your buyers' requirements, and how customers confirm it with the body or IAF CertSearch.
Effivity · included with the engagement
Your system runs in software from the first workshop.
Effivity is the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant configures it within the agreed scope, so evidence accumulates as people do their work and the certification auditor reviews a live system rather than a binder. Sterling consulting clients get their subscription included with the engagement, at no additional cost.
ISO & GRC softwareSterling Academy · included with the engagement
Your people learn the standard, not just the forms.
E-learning with practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online, with progress by department for the certification audit. Sterling consulting clients get preferential course access and special pricing, including complimentary awareness training for their people as part of the engagement.
Contact us about Academy accessHow we price
One all-inclusive proposal. Every component visible. No surprises, ever.
What a certification programme costs depends on the standard, how mature your processes already are, the scope, the sites and the headcount, so no single figure is useful and every Sterling proposal is built for your organisation. What stays constant is how the proposal is put together.
- One all-inclusive proposal for Sterling's work, software and learning. Consulting, Effivity and Sterling Academy access in one figure; the fee does not move when the work takes longer than we planned.
- Certification-body fees identified separately. The body's audit days, travel and surveillance arrangements are shown as their own line, so the full programme cost is comparable across proposals.
- Payment milestones tied to deliverables, not to the calendar: the gap analysis report, the documented system, the internal audit, the certificate.
- Deliverables, responsibilities, assumptions and exclusions in writing, and nothing to sign to receive the proposal.
To prepare your proposal we need
- The standard, or the tender or customer document that asks for it
- The activities, products and sites the certificate must cover
- Approximate headcount
- Whether you hold a certificate today, and from which body
- The bid, renewal or supplier-approval date you are working to
That is enough for a scoped, all-inclusive proposal from a Sterling consultant in your region. There is no need to prepare a manual first.
Request a scoped proposalA Sterling consultant replies within one working day.
Standards
Standards this service covers
- ISO 9001ISO 9001 certification consulting: a quality management system built with your people, evidence prepared and support until an accredited body certifies you.
- ISO/IEC 27001ISO/IEC 27001 certification consulting: an ISMS built with your people, evidence prepared, and support through Stage 1, Stage 2 and surveillance audits.
- SOC 2SOC 2 Readiness and compliance consulting: controls mapped to the Trust Services Criteria and evidence prepared for the CPA firm's SOC 2 attestation report.
- ISO 14001ISO 14001 certification consulting: aspects, impacts and compliance obligations controlled, with support until an accredited body certifies you.
- ISO 45001ISO 45001 certification consulting to prevent work-related injury and ill health, with an OH&S system built with your people and audit-ready, in 60+ countries.
- ISO 13485ISO 13485 certification consulting for medical device makers: design controls, risk, traceability and complaints, prepared for an accredited audit.
- IATF 16949IATF 16949 certification consulting for automotive part makers: defect prevention, less variation and waste, prepared for an IATF-recognised body's audit.
- AS9100AS9100 certification consulting for aerospace and defence suppliers: ISO 9001 plus product safety, configuration and FAI, ready for an IAQG scheme audit.
- FSSC 22000FSSC 22000 certification consulting for GFSI-recognised food safety: ISO 22000, sector PRPs and FSSC requirements, ready for a licensed body's audit.
- ISO 22301ISO 22301 certification consulting to keep delivering through disruption: impact analysis, continuity plans and exercises, prepared for an accredited audit.
Don’t be fooled by certification scams
Sterling against the alternatives.
The market offers four ways to a certificate. Three of them leave you with a system that does not run, a certificate that fails a customer's check, or both. This is what each route actually gives you.
| What you get | Template kit, do it yourself | "Certified in 10 days" seller | Body-shopping consultant | Sterling |
|---|---|---|---|---|
| A system built around your operation | Only if your team has the time and the expertise | No: a template with your name on it | Depends on the individual assigned | Yes, with your process owners, on Sterling's template sets |
| Your people trained | Not included | Not included | Sometimes, at extra cost | Included: awareness, practitioner and internal auditor training |
| Software to run the system | Paid for separately | None | Paid for separately | Effivity, included at no additional cost |
| Internal audit and management review before the audit | If you know how | A formality, if at all | Usually | Always, with findings closed on evidence |
| Certificate from an accredited body | Your choice | Often not accredited, or not for your scope | Usually | Always: accreditation checked before you sign |
| Who is accountable if the audit goes badly | You | Nobody | The individual, if still available | Sterling, under the Sterling Promise, until you are certified |
| Fee transparency | Kit price only | One invoice for consulting and certificate | Day rates, open-ended | One all-inclusive proposal; certification-body fees shown separately |
| After the certificate | On your own | Gone | Another contract | Sustain™: surveillance, internal audits, refreshers, transitions |
Sterling's position. Sterling does not certify. We consult, train and prepare you; an independent, accredited body audits and decides. We do not sell certificates without implementation, and we tell you when an offer you have received is one. All ten warning signs of shortcut certification · How to check any ISO certificate
Client experience
On the record: what clients say about working with Sterling.
The president and CEO writes that the certification is helping the company win business, and that Sterling's training of the team on the standard made a large difference to the development and improvement of its operations.
The plant manager reports that the collaboration delivered HACCP and ISO 9001:2015 certification, tightened internal processes and gave the company a credential that directly supports its expansion into international markets.
The director writes that, for a growing firm, putting in place the systems and processes needed for certification was an important milestone: work began in late June, certification followed in mid-September, and Sterling's practical guidance helped the firm move through the process in a short timeframe while establishing management systems that fit its business and operations.
The finance controller and the production director write that the efficient handling of documentation, audits and training let the company meet its certification deadline, and that the templates provided streamlined the documentation and helped it meet the required compliance standards.
Each account is drawn from a signed letter or e-mail on file and reported in our words, with the signatory's role and organisation attached; the original letters are available on request. Ask for references in your sector before you decide.
- 60+countries where Sterling has delivered certification
- 21countries with a Sterling office, eight regions, one coordinated team
- 2003the year the group began implementing ISO management systems; the same method, refined, since
- 8,100+client engagements across the group, from single-site SMEs to multinationals
FAQs
Questions clients ask before they engage us.
The answers for your organisation come from the discovery call. These are the questions a customer's certification requirement usually raises.
Does certification help win contracts?
It helps when your customers require or prefer it, which is common in tenders, regulated supply chains and outsourcing contracts. A certificate lets a buyer tick a qualification box without auditing you from scratch, and it shortens supplier questionnaires. It does not win work on its own: price, capability and references still decide. What loses work is a certificate a buyer cannot verify, or one whose scope does not cover what they are contracting.
How can a customer check our certificate?
A customer can contact the certification body that issued it, or search IAF CertSearch, the global database of accredited management system certifications, by company name or certificate details. They can then check the body's own accreditation on the accreditation body's register or the Global ACI list of recognised accreditation bodies. ISO itself does not certify or issue certificates, so a certificate presented as issued by ISO fails that check at once.
What does accredited certification mean?
It means the certification body has itself been assessed by an accreditation body and found competent to certify that standard in your sector. Accreditation bodies recognised under the Global ACI arrangement, which replaced the IAF MLA and ILAC MRA on 1 January 2026, accept each other's accreditations. That is why an accredited certificate travels across borders, although a regulator, a tender or a customer can still set its own conditions.
What if our certificate is not in IAF CertSearch?
Ask your certification body to confirm the certificate in writing and to upload it, and point customers to the body's own register in the meantime. Uploading to IAF CertSearch is voluntary for certification bodies, so the database is not complete and a missing entry does not by itself mean a certificate is invalid. A listing does, however, remove one question from a buyer's check.
Can we get certified in time for a tender deadline?
Often, if the deadline leaves room for the system to run long enough to produce evidence and for the body to schedule Stage 1 and Stage 2; for a single site that is typically three to six months. A provider promising a certificate in days is not offering accredited certification. If the tender closes first, ask the buyer whether a programme in progress is acceptable, and we will help you describe it accurately.
Why would a customer reject our certificate?
The usual reasons are that the certification body was not accredited, its accreditation did not cover your sector, the certificate's scope did not include the product, service or site being contracted, or the certificate was no longer valid. Each is visible in minutes to a buyer who checks. We review an existing certificate against the customer's requirement, tell you which of these applies, and plan the fix.
Can we keep our current certification body?
Yes, provided it is accredited for your standard and sector scope by an accreditation body your customers recognise; we check that on the public registers first. If it is not, a certificate from an accredited body is the fix, and your consultant helps you compare accredited bodies' proposals and audit arrangements. The contract with the certification body is always yours.
Does Sterling issue the certificate?
No. Sterling guides the system into place, trains your people, provides Effivity and prepares you for the audit. An independent, accredited certification body audits you and makes the certification decision. That separation is what makes the certificate credible to your customers: a provider offering consulting and the certificate together is offering something a careful buyer will reject.
Do automotive and aerospace schemes work differently?
Yes. IATF 16949 can be certified only by certification bodies recognised by IATF. AS9100 certification comes from accredited certification bodies in the IAQG certification scheme, and certified organisations are listed in the IAQG's OASIS database, where aerospace buyers look them up. Customers in both sectors check those routes, so we confirm a body's standing in the scheme before you contract it.
Keep exploring
More Sterling services
Talk to a consultant
Plan the certificate that wins your next contract.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice