hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← ISO 9001 hub

ISO certification guide

How to Choose an ISO Consultant in 2026: A Scored Checklist

Clause by clause: ISO 9001:2026 requirements: every clause explained →

A ten-question scored checklist for comparing ISO consultants, with warning signs, first-meeting questions and links to country guides.

  • Updated October 2026
  • 7-minute read
  • Part of Sterling GRC insights

Key points

  • Choose an ISO consultant by scoring each candidate against the same ten questions, in writing, before you sign anything. A good consultant helps you build a management system that works and that an accredited certification body will accept; a poor one sells a certificate, a template pack or a promise. The checklist below gives each question a score from 0 to 2, for a total out of 20.
  • The scoring is Sterling's own method, offered to help you compare suppliers on equal terms; it is not part of any standard. We name no competitors here, and you should apply the same checklist to us.

What a consultant can and cannot do

A consultant prepares your organisation: assessing gaps, designing the system, training people and checking readiness. A consultant cannot certify you. Only an independent certification body, ideally accredited, can issue an ISO certificate after its own audits. Any supplier that implies otherwise, or that claims to control the outcome of your audit, has misunderstood or misrepresented how certification works.

Because the certification body must remain independent, the best consultants also stay out of the audit decision. They prepare you, they may attend the audit with you, and they leave the judgement to the auditors.

The scored checklist

Score each row 0 (no or unclear answer), 1 (partly, or only verbally) or 2 (clear answer, in writing, that you have checked).

#Question to askWhat a score of 2 looks like
1Do they explain that the certificate comes from an accredited certification body, not from them?Stated clearly in the proposal and the first meeting
2Will they name the people who will do the work?Roles, experience and sector background provided in writing
3Do they have experience in your sector and size of organisation?Relevant examples described in general terms, without breaching client confidentiality
4Do they start with a gap assessment?An assessment of your current practice comes before any promise of timeline or price
5Is the scope of work itemised?Each deliverable listed: documents, training, internal audit, audit support
6Is the quotation complete?A transparent quotation that shows what is included and what is excluded, including later years
7Do they let you choose the certification body?Several accredited options offered, with no pressure to use one
8Do they build the system around your processes?No generic manual presented as finished work
9Do they transfer knowledge to your team?Training and handover included, so that you can run the system yourself
10Do they support the life of the certificate?Help with surveillance audits and the 2026 edition changes is described

Add the scores and read the total as follows.

  • 16 to 20: a strong candidate. Check references and the contract, then proceed.
  • 11 to 15: acceptable with conditions. Ask for the missing points in writing before you commit.
  • 10 or below: keep looking, or ask the supplier to rewrite the proposal.

Treat any 0 on rows 1, 6 or 7 as a warning in itself, whatever the total. Those three cover the points where buyers most often lose money or end up with a certificate nobody accepts.

Why each question matters

Accreditation and independence (rows 1 and 7)

If the supplier steers you to one certification body without explaining why, or suggests the certificate is part of its own package, ask who is accredited and by which accreditation body. You can then check the accreditation yourself with that body.

People and sector experience (rows 2 and 3)

Proposals often showcase senior people who then disappear after the contract is signed. Ask who attends the meetings, who writes the documents and who leads the internal audit. A consultant who has worked in your sector will spot the requirements an auditor cares about, such as customer-specific or regulatory expectations.

Method and scope (rows 4, 5 and 8)

A gap assessment first, then an itemised scope, then a system designed around your processes: this order protects you. Suppliers who skip the assessment cannot know the size of the job, so their timeline and price are guesses.

Price and contract (row 6)

A low opening price is not the same as a low total cost. Check which items are excluded, whether certification body fees are shown separately, and what surveillance years will cost. We give no prices here, because they differ by country, sector and organisation size.

Capability and continuity (rows 9 and 10)

The test of a good project is what happens after the certificate arrives. Your own team should be able to run internal audits, management reviews and corrective actions, and know how to move to the new editions of ISO 9001 and ISO 14001, published in September and April 2026.

Warning signs in a proposal

Some problems show up before you score anything. Pause if you see any of the following.

  • A fixed certificate date promised before any assessment of your organisation.
  • Pressure to sign this week to hold a price or a slot.
  • Documents offered as a ready-made pack with only your company name to be added.
  • No mention of the certification body, or a certification body you cannot find in an accreditation body's public listing.
  • Reluctance to put scope, exclusions and responsibilities in the contract.
  • Answers that change when you ask the same question a second time.

None of these proves bad faith on its own, but together they suggest that the supplier is selling speed rather than a working system. Our separate article on certification scams covers the more serious cases.

A worked example of scoring

Suppose three suppliers each answer the ten questions. Supplier A scores 2 on most rows but 1 on row 10, because it describes surveillance support only verbally; its total is 19. Supplier B offers a low price and a fast timeline, scores 0 on rows 4 and 6 because it starts without an assessment and leaves later years out, and totals 11. Supplier C is thorough on method but cannot name the people who will do the work, scoring 0 on row 2, and totals 15.

The totals do not make the decision for you. They show where to ask follow-up questions: supplier B must show what is missing from its quotation, and supplier C must put its team in writing. If either cannot, the comparison is already done.

Questions to ask in the first meeting

  • 1. Which accredited certification bodies have your clients used, and may I choose a different one?
  • 2. What would you do in the first two weeks?
  • 3. Which parts of my existing way of working can stay as they are?
  • 4. What do you need from my people, and how many hours a week?
  • 5. What happens if the certification audit finds nonconformities?
  • 6. What does your fee cover in years two and three?

References and what Sterling offers

On references: clients often cannot share their audit reports, so ask for something more practical. Request a short conversation with a client of similar size, or a description of a past project in general terms: the starting position, what was built, how the certification audit went and what support followed. Ask the reference what they would do differently. A consultant who is confident in the work will usually offer this without being pressed.

Sterling International Consulting has supported organisations for over 20 years, and its experts have worked in the field for 30+ years. Our 8,100+ client engagements span 60+ countries. We begin with a gap assessment and build the system around your processes, and the certification audit is carried out by an independent accredited body. Each client also receives a five-user Effivity subscription and awareness e-learning at no extra charge through Sterling Academy.

Read the guide for your country

Accreditation bodies, fee levels and common supplier practices differ across markets. Use the local guide to apply this checklist where you operate.

Frequently asked questions

Do I need an ISO consultant?

No standard requires one. A consultant is worth considering when you have a fixed deadline, little internal experience or several sites.

Can a consultant guarantee certification?

No. The decision belongs to the certification body. A supplier that guarantees the outcome is describing something it does not control.

Should the consultant and the certification body be the same company?

Be cautious. Certification depends on independent judgement, so ask how the supplier keeps consultancy and certification separate, and check the certification body's accreditation directly.

Is the lowest quotation the best choice?

Not automatically. Compare what is included, who does the work and what the later years cost, then judge value on the total.

How many consultants should I compare?

Three is usually enough. Give each the same brief, the same scope and the same ten questions so the scores are comparable.

Can I use the checklist for a consultant I already work with?

Yes. Scoring an existing supplier is a useful way to decide whether to continue, especially before a transition project.

Next step

Book a free gap assessment

Talk to a Sterling consultant

ISO 9001 implementation

ISO 9001 requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Talk to a consultant

Plan your next certification step with a Sterling consultant.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice