{"id":16504,"date":"2023-01-03T10:18:09","date_gmt":"2023-01-03T09:18:09","guid":{"rendered":"https:\/\/brandcompliance.com\/?post_type=docs&p=16504"},"modified":"2025-06-17T16:51:53","modified_gmt":"2025-06-17T14:51:53","password":"","slug":"how-long-iso-certification","status":"publish","type":"docs","link":"https:\/\/brandcompliance.com\/en\/docs\/how-long-iso-certification\/","title":{"rendered":"How long does ISO certification take?"},"content":{"rendered":"

\"ISO-certificering\"Many people interested in obtaining an ISO certification<\/a> wonder how much time such certification takes. How long does the process with a certifying body take to obtain an ISO certificate? In this article we explain how the required time is determined. There is no fixed time frame, but there is a fixed method! Read all about it below.<\/span>\u00a0<\/span><\/p>\n

Initial audit<\/h2>\n

In order to achieve ISO certification, a so-called initial audit is completed. An initial audit consists of stage 1 and stage 2.<\/span>\u00a0<\/span><\/p>\n

During stage 1<\/a>, it is assessed whether the organization is ready for stage 2 on the basis of documented information in your management system and the understanding of the requirements of the standard.<\/span>\u00a0<\/span><\/p>\n

During stage 2<\/a>, the implementation and effectiveness of the management system are assessed. Are all processes executed as described? Is the policy adhered to? Are employees aware of their contribution to the management system?<\/span>\u00a0<\/span><\/p>\n

Man-day table<\/span><\/b>\u00a0<\/span><\/h2>\n

How much time is needed for the initial audit is determined in the ‘man-day table’ from the accreditation standard. An accreditation standard contains requirements that certification bodies, such as Brand Compliance, must adhere to. For example, ISO 17021 for certification of ISO 9001 and ISO 27006 for certification of ISO 27001.<\/span>\u00a0<\/span><\/p>\n

Example<\/span><\/b>\u00a0<\/span><\/h3>\n

Let’s sketch an example for the ISO 27001 certification<\/a>. In accordance with accreditation standard ISO 27006 for an organization with 1 to 10 FTE, a total of 5 days of audit time is calculated for an initial audit. Of this time, 70% is spent on the audit at your location or by means of remote audit techniques. The remaining 30% is used for administrative tasks related to the audit, such as drawing up the audit plan and writing the audit report.<\/span>\u00a0<\/span><\/p>\n

Factors<\/span><\/b>\u00a0<\/span><\/h3>\n

In addition to the factor of the number of FTEs, there are more factors that must be taken into account in arriving at a time calculation.<\/span>\u00a0<\/span><\/p>\n

Some examples:<\/span>\u00a0<\/span><\/p>\n