How to Get Help for Authority Certification Network
Navigating compliance certification — whether for a management system, a product, a personnel credential, or an entire organizational scope — involves regulatory frameworks, accreditation hierarchies, and procedural requirements that are not self-evident. Knowing where to turn for reliable guidance, how to evaluate sources, and what questions to ask before committing to a certification path can prevent costly errors and wasted time. This page provides a direct guide to finding qualified help within the compliance and standards space covered by this network.
Understanding What Kind of Help You Actually Need
Before seeking external guidance, it helps to identify the specific category of problem. Compliance and certification questions generally fall into four distinct types:
Informational questions concern definitions, frameworks, and how standards work. Examples include understanding the difference between regulatory and voluntary certification, or what an accreditation body actually evaluates versus what a certification body certifies.
Procedural questions concern the steps, timelines, documentation requirements, and audit mechanics of achieving or maintaining a specific certification. These include how surveillance audits function, what triggers a recertification cycle, or how nonconformities are handled during a certification audit.
Jurisdictional questions involve which standard applies in which context — whether a federal regulation requires third-party certification, whether a state or sector-specific rule supersedes a voluntary standard, or whether a certification obtained under one body transfers to another.
Dispute or enforcement questions arise when a certificate is suspended, withdrawn, or when a certification body's conduct is in question. These often require engagement with an accreditation body or, in regulated industries, a governmental authority.
Identifying which category your question falls into determines who is qualified to help and what recourse exists if initial guidance proves insufficient.
Where to Find Authoritative Information
The most reliable primary sources for compliance and standards information are accreditation bodies, standards development organizations, and government regulatory agencies — not certification consultants or certification bodies themselves, who have a financial interest in the outcome.
International Accreditation Forum (IAF): The IAF coordinates the mutual recognition of accreditation across member bodies globally. Its published documents, including the IAF Mandatory Documents series, govern how accreditation bodies operate and what they require of certification bodies. For anyone questioning the legitimacy of a certification body or the validity of a certificate, the IAF's member directory and MLA (Multilateral Recognition Arrangement) signatories list is the correct starting point. See iaf.nu.
ANSI National Accreditation Board (ANAB) and American Association for Laboratory Accreditation (A2LA): In the United States, these are the primary accreditation bodies for certification bodies operating under ISO/IEC 17021-1, ISO/IEC 17065, and ISO/IEC 17024. Both publish lists of accredited certification bodies and the specific scopes of their accreditation. Understanding the role these bodies play is covered in more detail at /anab-and-a2la-accreditation-bodies.
ISO (International Organization for Standardization): ISO publishes the underlying standards — including ISO/IEC 17021-1, which governs management system certification, ISO/IEC 17065, which governs product and process certification, and ISO/IEC 17024, which governs personnel certification. Standards are available for purchase directly from ISO or through ANSI. For readers working through the requirements of a specific standard, the reference text is the standard itself, not a summary produced by a certification body.
For sector-specific and regulated environments — healthcare, aviation, food safety, environmental compliance — the relevant federal agency (CMS, FAA, FDA, EPA) is the authoritative source on whether a certification is legally required and what bodies are approved to issue it.
Common Barriers to Getting Reliable Help
Several structural problems in the certification industry make it harder than it should be to get neutral guidance.
Conflicts of interest are endemic. Certification bodies sell certifications. Consultants who prepare organizations for audits often have referral relationships with specific certification bodies. Neither source is neutral. This does not make them useless — but it means their guidance should be verified against primary sources before major decisions are made.
Terminology is inconsistently used. The word "certification" is applied to management systems, products, personnel credentials, and self-declarations. These are legally and procedurally distinct. A product certification carries different obligations, risks, and renewal requirements than an ISO 9001 registration. Conflating them leads to misapplied guidance.
Scope creep in certification claims. Organizations sometimes represent their certification as broader than the accredited scope actually covers. Understanding scope of certification boundaries and how to read a certificate of conformance accurately is essential before relying on a supplier's or vendor's certification claims.
Access to the standard text itself. Many people attempt to understand requirements through secondary summaries rather than the standard. The ISO/IEC 17021-1 requirements page at /iso-iec-17021-certification-requirements provides structured reference to the standard's provisions.
Questions to Ask Before Engaging a Certification Body or Consultant
When evaluating a certification body or seeking guidance from a consultant, the following questions establish whether the source is qualified and whether the advice is trustworthy:
Is the certification body accredited, by whom, and for what specific scope? Accreditation to ISO/IEC 17021-1 does not automatically mean accreditation for every standard the body offers. Request the accreditation certificate and verify it directly with the accreditation body named.
What is the certification cycle, and what does surveillance entail? The surveillance audits and recertification framework is standardized under ISO/IEC 17021-1, but implementation varies. Understanding the full three-year cycle before signing a contract prevents surprises.
How are nonconformities classified and resolved? The nonconformity handling process directly affects timelines and costs. A body that cannot clearly explain its major and minor nonconformity handling procedures should not be trusted with a certification audit.
If working with a consultant: Does the consultant have any referral arrangement with the certification body they recommend? This is a direct conflict of interest question. A qualified independent consultant should be able to recommend multiple accredited bodies and explain the differences.
When to Escalate Beyond Informal Guidance
If a certification body has acted inconsistently with its accreditation requirements — issuing or withdrawing certification improperly, failing to follow documented processes, or misrepresenting its scope — the correct escalation path is to the accreditation body that issued the certification body's accreditation.
ANAB and A2LA both maintain formal complaint processes. IAF-accredited bodies are obligated under their MLA agreements to address legitimate complaints about member certification bodies. Filing a complaint with an accreditation body is a formal process with documented procedures; it is not the same as a customer service dispute.
For regulated certifications tied to a federal or state requirement, the regulatory agency itself — not the certification body — has jurisdiction over compliance disputes. In those cases, the process framework for compliance provides relevant context on how regulatory and voluntary certification obligations interact.
How to Evaluate Sources of Certification Information
Not all published guidance on certification is accurate, and some is actively misleading. When evaluating any source — including this one — apply the following standards:
Does the source cite primary documents? Authoritative guidance cites the relevant ISO standard, IAF mandatory document, or regulatory code by name and clause. Vague references to "industry standards" without specificity are a warning sign.
Is the source independent of the certification body being evaluated? Guidance published by a certification body on its own processes should be read as promotional material and verified against the standard and the body's accreditation certificate.
Is the information current? ISO standards are periodically revised. IAF mandatory documents are updated. A reference to ISO 9001:2008 in 2024 guidance indicates the source has not been maintained. The regulatory update function maintained through this network is one tool for tracking active changes.
For questions specific to the compliance certification lifecycle or the mechanics of how certification bodies operate under third-party certification processes, the reference pages on this site provide structured, source-cited explanations designed to support informed decision-making — not to sell a service.
References
- 2011 Guidance for Industry: Process Validation — General Principles and Practices
- National Institute of Standards and Technology
- 2010 ADA Standards for Accessible Design — U.S. Department of Justice
- 10 CFR Part 435 — Energy Efficiency Standards for Federal Buildings
- ISO 9001:2015 — Quality Management Systems Requirements (ISO)
- 18 U.S.C. §1001 — False Statements to Federal Agencies (Cornell LII)
- National Institute of Standards and Technology (NIST)
- enforced by the California Privacy Protection Agency