Questions and Answers

No. In most cases, the transition is carried out during a planned surveillance or recertification audit, and in rare cases during a dedicated transition audit.

When a new version of an ISO standard is published, a transition period is defined during which certified organisations must align their systems with the new requirements. After this period expires, the old certificates lose their validity.

Readiness for certification is assessed through an internal audit of the management system against the requirements of the relevant standard. It is important that the key processes are implemented, risks and objectives are defined, and evidence of their application is available. Conducting an internal audit and a management review are key indicators of readiness.

Certificates issued according to БДС EN ISO/IEC 27001:2017 are valid, as stated in them, no later than 31.10.2025. After this date, the certificate will be invalid (revoked). The transition to the new version of the standard can be done at your choice at the next supervisory, at the next recertification or at a separate (extraordinary) audit if you are ready and express your desire, but before the specified date.

Certification is an independent assessment by a third party of the compliance of a management system with the requirements of a standard. The decision to issue a certificate is made after an audit – a process of assessing the compliance of management systems with the requirements of the standard for which the certificate is issued.

ISO is an independent, non-governmental international organization that brings together experts to share knowledge and develop international standards in support of innovation, governance and addressing global challenges.

Yes, the certificates have a 3-year validity period. Each year, during this cycle, we will conduct a surveillance audit to confirm the compliance of your management systems with the requirements of ISO standards and the validity of the certificate issued. Its validity can be extended for another 3 years with a re-certification audit.

No. ISO certificates are voluntary. They demonstrate to your customers, partners and the government good practices, policies and processes implemented by your organization that support business, human resources management, the environment, safety, etc.
Each ISO standard has its advantages:

  • ISO 9001 helps you prioritize your company’s business goals and put your customers first;
  • ISO 27001 protects company information, personal data and reputation;
  • ISO 14001 reduces your impact on the environment;
  • ISO 45001 helps protect your employees.

Certificates are issued for compliance of the organization’s policies, regardless of the number of employees, the number of branches and the nature of activity.

Yes, it is, if applicable. The organization could benefit more and reduce costs by implementing an integrated management system in accordance with a combination of standards, for example:

  • ISO 9001 and ISO 14001,
  • ISO 9001, ISO 14001 and ISO 45001
  • ISO 9001 and  ISO 27001, etc.

The transfer of a certificate is defined as the recognition of an existing valid certification of a management system provided by one accredited certification body by another accredited certification body for issuing its own certificate (with the same scope and validity period of the certification). Contact our experts for more details HERE.

No, certificates of compliance with an ISO standard are not issued for a product or service. They are proof of good management of the organization.

The process begins when you make an inquiry to us. We will look at your available management systems, provided company information, etc. and we will send you an offer. Once you accept the proposal, we will prepare a plan for the certification audit. The audit is conducted in two stages. At the Stage 1, our auditors and experts will evaluate the implemented management systems, talk to employees, visit the company’s sites, which are included in the scope of the certificate, and will prepare a report with findings and recommendations. In the Stage 2, the auditors will follow up on the corrective actions taken to eliminate the non-conformities identified in Stage 1, will hold meetings with management and will make recommendations for certification in a report. In the last step, the Certification Body will issue a certificate. Contact us or send an inquiry HERE.

We will do everything necessary to speed up the certification process. However, technological time is required, which depends on the scope of the certificate, the number of employees, the number of sites and their location, etc. The process from the receipt of the application to the issuance of the certificate takes from 2 to 6 months.

The cost depends on the specific characteristics of your organization. It includes all expenses incurred by us, including business trips, hiring external experts if necessary, issuing documents and more. Contact us for more details HERE.

We will make sure to contact you or the Quality Manager and remind you that the date of the surveillance audit is approaching.

Do not hesitate, contact an associate HERE, who will discuss with you the possibilities and deadlines for renewal.

No, you do not need to appoint a Quality Manager. We recommend that you appoint such an employee, but you can choose a representative who will take responsibility in your organization for developing, implementing and maintaining management systems and for achieving certification.

No, the Certification Body at Smart Certification performs audits for initial and re-certification by an independent third party and does not offer consulting services and training for the implementation of management systems.