ISO certification guide
How to Choose an ISO Consultant in 2026: A Scored Checklist
Clause by clause: ISO 9001:2026 requirements: every clause explained →
A ten-question scored checklist for comparing ISO consultants, with warning signs, first-meeting questions and links to country guides.
Key points
- Choose an ISO consultant by scoring each candidate against the same ten questions, in writing, before you sign anything. A good consultant helps you build a management system that works and that an accredited certification body will accept; a poor one sells a certificate, a template pack or a promise. The checklist below gives each question a score from 0 to 2, for a total out of 20.
- The scoring is Sterling's own method, offered to help you compare suppliers on equal terms; it is not part of any standard. We name no competitors here, and you should apply the same checklist to us.
What a consultant can and cannot do
A consultant prepares your organisation: assessing gaps, designing the system, training people and checking readiness. A consultant cannot certify you. Only an independent certification body, ideally accredited, can issue an ISO certificate after its own audits. Any supplier that implies otherwise, or that claims to control the outcome of your audit, has misunderstood or misrepresented how certification works.
Because the certification body must remain independent, the best consultants also stay out of the audit decision. They prepare you, they may attend the audit with you, and they leave the judgement to the auditors.
The scored checklist
Score each row 0 (no or unclear answer), 1 (partly, or only verbally) or 2 (clear answer, in writing, that you have checked).
| # | Question to ask | What a score of 2 looks like |
|---|---|---|
| 1 | Do they explain that the certificate comes from an accredited certification body, not from them? | Stated clearly in the proposal and the first meeting |
| 2 | Will they name the people who will do the work? | Roles, experience and sector background provided in writing |
| 3 | Do they have experience in your sector and size of organisation? | Relevant examples described in general terms, without breaching client confidentiality |
| 4 | Do they start with a gap assessment? | An assessment of your current practice comes before any promise of timeline or price |
| 5 | Is the scope of work itemised? | Each deliverable listed: documents, training, internal audit, audit support |
| 6 | Is the quotation complete? | A transparent quotation that shows what is included and what is excluded, including later years |
| 7 | Do they let you choose the certification body? | Several accredited options offered, with no pressure to use one |
| 8 | Do they build the system around your processes? | No generic manual presented as finished work |
| 9 | Do they transfer knowledge to your team? | Training and handover included, so that you can run the system yourself |
| 10 | Do they support the life of the certificate? | Help with surveillance audits and the 2026 edition changes is described |
Add the scores and read the total as follows.
- 16 to 20: a strong candidate. Check references and the contract, then proceed.
- 11 to 15: acceptable with conditions. Ask for the missing points in writing before you commit.
- 10 or below: keep looking, or ask the supplier to rewrite the proposal.
Treat any 0 on rows 1, 6 or 7 as a warning in itself, whatever the total. Those three cover the points where buyers most often lose money or end up with a certificate nobody accepts.
Why each question matters
Accreditation and independence (rows 1 and 7)
If the supplier steers you to one certification body without explaining why, or suggests the certificate is part of its own package, ask who is accredited and by which accreditation body. You can then check the accreditation yourself with that body.
People and sector experience (rows 2 and 3)
Proposals often showcase senior people who then disappear after the contract is signed. Ask who attends the meetings, who writes the documents and who leads the internal audit. A consultant who has worked in your sector will spot the requirements an auditor cares about, such as customer-specific or regulatory expectations.
Method and scope (rows 4, 5 and 8)
A gap assessment first, then an itemised scope, then a system designed around your processes: this order protects you. Suppliers who skip the assessment cannot know the size of the job, so their timeline and price are guesses.
Price and contract (row 6)
A low opening price is not the same as a low total cost. Check which items are excluded, whether certification body fees are shown separately, and what surveillance years will cost. We give no prices here, because they differ by country, sector and organisation size.
Capability and continuity (rows 9 and 10)
The test of a good project is what happens after the certificate arrives. Your own team should be able to run internal audits, management reviews and corrective actions, and know how to move to the new editions of ISO 9001 and ISO 14001, published in September and April 2026.
Warning signs in a proposal
Some problems show up before you score anything. Pause if you see any of the following.
- A fixed certificate date promised before any assessment of your organisation.
- Pressure to sign this week to hold a price or a slot.
- Documents offered as a ready-made pack with only your company name to be added.
- No mention of the certification body, or a certification body you cannot find in an accreditation body's public listing.
- Reluctance to put scope, exclusions and responsibilities in the contract.
- Answers that change when you ask the same question a second time.
None of these proves bad faith on its own, but together they suggest that the supplier is selling speed rather than a working system. Our separate article on certification scams covers the more serious cases.
A worked example of scoring
Suppose three suppliers each answer the ten questions. Supplier A scores 2 on most rows but 1 on row 10, because it describes surveillance support only verbally; its total is 19. Supplier B offers a low price and a fast timeline, scores 0 on rows 4 and 6 because it starts without an assessment and leaves later years out, and totals 11. Supplier C is thorough on method but cannot name the people who will do the work, scoring 0 on row 2, and totals 15.
The totals do not make the decision for you. They show where to ask follow-up questions: supplier B must show what is missing from its quotation, and supplier C must put its team in writing. If either cannot, the comparison is already done.
Questions to ask in the first meeting
- 1. Which accredited certification bodies have your clients used, and may I choose a different one?
- 2. What would you do in the first two weeks?
- 3. Which parts of my existing way of working can stay as they are?
- 4. What do you need from my people, and how many hours a week?
- 5. What happens if the certification audit finds nonconformities?
- 6. What does your fee cover in years two and three?
References and what Sterling offers
On references: clients often cannot share their audit reports, so ask for something more practical. Request a short conversation with a client of similar size, or a description of a past project in general terms: the starting position, what was built, how the certification audit went and what support followed. Ask the reference what they would do differently. A consultant who is confident in the work will usually offer this without being pressed.
Sterling International Consulting has supported organisations for over 20 years, and its experts have worked in the field for 30+ years. Our 8,100+ client engagements span 60+ countries. We begin with a gap assessment and build the system around your processes, and the certification audit is carried out by an independent accredited body. Each client also receives a five-user Effivity subscription and awareness e-learning at no extra charge through Sterling Academy.
Read the guide for your country
Accreditation bodies, fee levels and common supplier practices differ across markets. Use the local guide to apply this checklist where you operate.
Frequently asked questions
Do I need an ISO consultant?
No standard requires one. A consultant is worth considering when you have a fixed deadline, little internal experience or several sites.
Can a consultant guarantee certification?
No. The decision belongs to the certification body. A supplier that guarantees the outcome is describing something it does not control.
Should the consultant and the certification body be the same company?
Be cautious. Certification depends on independent judgement, so ask how the supplier keeps consultancy and certification separate, and check the certification body's accreditation directly.
Is the lowest quotation the best choice?
Not automatically. Compare what is included, who does the work and what the later years cost, then judge value on the total.
How many consultants should I compare?
Three is usually enough. Give each the same brief, the same scope and the same ten questions so the scores are comparable.
Can I use the checklist for a consultant I already work with?
Yes. Scoring an existing supplier is a useful way to decide whether to continue, especially before a transition project.
Next step
More GRC insights
Practical guides on certification, transitions and choosing support, written for the decision in front of you.
- Effivity for ISO 9001
- ISO 9001 gap analysis
- ISO 9001 for healthcare and laboratories
- How to Choose an ISO Consultant in 2026: A Scored Checklist
- ISO 9001 implementation plan
- ISO 9001 certification in India
- Integrated management system audit
- ISO 9001:2026 and ISO 14001:2026: The 12-Month Transition Calendar
- ISO Certification Scams to Avoid in 2026
- The 2026 ISO Certification Plan: 10 Steps from Zero to Certificate
Keep exploring
Explore more about ISO 9001
Watch a video on how to implement ISO 9001 here.
Watch a video on ISO 9001 requirements here.
Related guides
- ISO 9001:2026 transition serviceGap analysis to transition audit, by 30 September 2029
- ISO 9001 + ISO 14001 2026 transitionBoth standards in one coordinated programme
- The 2026 ISO Certification Plan: 10 Steps from Zero to CertificateA practical ten-step route from no management system to an accredited…
- ISO 9001:2026 and ISO 14001:2026: The 12-Month Transition CalendarA month-by-month plan for moving to ISO 9001:2026 and ISO 14001:2026,…
- ISO Certification Scams to Avoid in 2026How fake and unverifiable ISO certificates are sold, the warning…
Services for ISO 9001
Talk to a consultant
Plan your next certification step with a Sterling consultant.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice