ISO stands for International Organization for Standardization, an independent, non-governmental international body headquartered in Geneva that develops and publishes International Standards such as ISO 9001 (quality management) and ISO 14001 (environmental management). ISO writes the standards, but it does not certify anyone. An “ISO certificate” is always issued by a separate certification body, and its value depends on whether that body is accredited.
If you want to implement a management system and prepare for a certification audit, our ISO certification support service covers the work from gap analysis to audit day.
Why “ISO” and not “IOS”
ISO’s About ISO page explains that ISO is not an acronym. The short name is inspired by the Greek word isos, meaning “equal”. The organization’s full name, and therefore its initials, would differ across languages: in French it is Organisation internationale de normalisation. So the founders chose “ISO” as one short form recognisable everywhere. In ISO’s own words, whatever the country or language, “we are always ISO”.
Note the spelling. ISO’s official English name uses “Organization” and “Standardization” with a z, even in British and Indian English.
(Other expansions exist. The “ISO” setting on a camera refers to ISO speed ratings, which are defined in ISO standards such as ISO 12232 for digital still cameras. That use has nothing to do with certification.)
What ISO is
According to ISO’s own pages:
| Fact | Detail |
|---|---|
| Full name | International Organization for Standardization |
| Type | Independent, non-governmental international organization |
| Origin | Delegates from 25 countries met in London in 1946; ISO officially came into existence on 23 February 1947 |
| Headquarters | ISO Central Secretariat, Vernier (Geneva), Switzerland |
| Members | 177 national standards bodies, only one per country, in three categories: member bodies, correspondent members and subscriber members |
| Output | More than 26,000 International Standards and other deliverables, listed on the About ISO page at the time of writing |
| India’s member | Bureau of Indian Standards (BIS), a full member body |
ISO’s members are national standards bodies, not companies or consultants. India is represented by BIS, which takes part in ISO technical committees and adopts many ISO standards as Indian Standards. ISO says that selling its standards is what finances their development and maintenance, which is why the full text of ISO 9001 or ISO 14001 is a paid document.
ISO writes standards; it does not certify
This is the single most misunderstood point about ISO. ISO’s certification page is explicit: ISO “does not perform certification or issue certificates”, and it does not permit anyone to use the ISO logo in connection with certification. A company or organization therefore cannot be certified by ISO.
The system has three layers:
| Layer | Who | What they do |
|---|---|---|
| Standard setting | ISO (with national members such as BIS) | Publishes the standard, e.g. ISO 9001 |
| Certification | Independent certification bodies | Audit an organization and issue a certificate if its management system meets the standard |
| Accreditation | National accreditation bodies; in India, NABCB under the Quality Council of India | Assess and formally recognise that a certification body is competent and impartial |
ISO defines accreditation as formal recognition by an independent body that a certification body operates according to international standards. For management system certification, that standard is ISO/IEC 17021-1, which is one of NABCB’s accreditation schemes.
NABCB states that it is a member of the International Accreditation Forum (IAF) and a signatory to its Multilateral Recognition Arrangement (MLA). That is what lets a certificate from a NABCB-accredited certification body be recognised abroad. ISO’s certification page notes that the Global Accreditation Cooperation Incorporated (Global ACI) has now taken over the former roles of the IAF and of ILAC, the laboratory accreditation forum.
ISO also says accreditation is not compulsory, and that a certification body without it is not necessarily disreputable. But an unaccredited certificate carries no independent check on the certification body’s competence, and some buyers specifically ask suppliers for accredited certification. When choosing a certification body, ISO advises evaluating several, checking that they follow the relevant conformity assessment standard and checking their accreditation.
Even BIS runs a certification scheme of its own. According to its system certification overview, BIS has operated a Management Systems Certification Scheme since 1991, covering standards such as IS/ISO 9001, IS/ISO 14001 and IS/ISO 22000. In that role BIS is acting as a certification body, not as ISO.
Common ISO standards and their full names
The table shows the editions listed as current on iso.org in October 2026. Two of the best-known standards were revised in 2026, so older summaries may quote out-of-date years.
| Standard | Title / subject | Current edition | Used for |
|---|---|---|---|
| ISO 9001 | Quality management systems (QMS) | 2026 (published September 2026, replacing 2015) | Certification |
| ISO 14001 | Environmental management systems (EMS) | 2026 (published April 2026) | Certification |
| ISO 45001 | Occupational health and safety (OH&S) management systems | 2018, with Amendment 1:2024; a revision is under development | Certification |
| ISO/IEC 27001 | Information security management systems (ISMS) | 2022 | Certification |
| ISO 22000 | Food safety management systems (FSMS) | 2018 | Certification |
| ISO 13485 | Medical devices: quality management systems for regulatory purposes | 2016 | Certification |
| ISO 50001 | Energy management systems (EnMS) | 2018 | Certification |
| ISO/IEC 17025 | Competence of testing and calibration laboratories | 2017 | Accreditation of labs |
| ISO/IEC 17020 | Requirements for bodies performing inspection | 2026 (published March 2026, replacing 2012) | Accreditation of inspection bodies |
Two notes on the table:
- “ISO/IEC” means the standard is published jointly by ISO and the International Electrotechnical Commission (IEC).
- ISO/IEC 17025 and ISO/IEC 17020 are accreditation standards. Laboratories and inspection bodies are accredited to them by an accreditation body, not “ISO certified”. In India, NABL accredits laboratories (see what NABL accreditation is) and NABCB accredits inspection bodies (see Type A inspection bodies under ISO/IEC 17020).
If you hold a certificate to ISO 9001:2015 or ISO 14001:2015, ISO says certified organizations must transition to the new edition within the time frame set by their certification cycle, and should ask their certification body for details.
What “ISO certified” means, and what it does not
It means that a certification body has audited the organization’s management system and found that it meets the requirements of a named standard, for a defined scope and sites. Accredited management system certification runs on a three-year certification cycle (the basis of IAF’s audit-time rules in IAF MD 5), with surveillance audits in between and a recertification audit before the cycle ends.
It does not mean that:
- the product is certified. ISO 9001 certifies a quality management system, not the quality or safety of a product. NABCB’s conditions for use of its accreditation symbol forbid certification bodies from letting management system certification marks appear on product packaging or labels in a way that suggests the product itself has been certified.
- ISO approved anything. ISO’s name and logo guidelines tell others not to say that they, their products or their services are “endorsed, approved or certified by ISO”. “ISO approved” and “certified by ISO” are therefore wrong; “certified to ISO 9001:2026 by [certification body]” is accurate.
- the whole company is covered. The certificate covers the scope and sites printed on it, and nothing else.
- the certificate is still valid. Certificates can be suspended or withdrawn, and they lapse if surveillance and recertification audits are not completed.
Strictly, “ISO certified” is loose shorthand. ISO itself asks that standards be referred to by their full reference, for example “ISO 9001:2015”, so a precise claim names the standard and year.
How to check an ISO certificate
Step 1: Read the certificate
Note the organization name and address, the standard and edition, the scope, the certificate number, the issue and expiry dates, the certification body’s name and any accreditation mark. NABCB’s current conditions make the NABCB accreditation symbol mandatory on certificates issued under NABCB accreditation, so an accredited Indian certificate should carry it.
Step 2: Search IAF CertSearch
IAF CertSearch is the global database ISO points to for verifying accredited certificates. It combines data from accreditation bodies and certification bodies, so a match confirms the certificate, the certification body’s accreditation and the accreditation body’s recognition in one place. If a certificate does not show up, ISO’s alternative is to contact the certification body or accreditation body directly, as in the next steps.
Step 3: Check the certification body’s own register
Most certification bodies keep an online certificate register or will confirm a certificate by email. Use contact details from the certification body’s official website, not from the certificate you are checking.
Step 4: Confirm the certification body’s accreditation
On the NABCB website, use Search Accredited Bodies and open the Management Systems list. Confirm that the certification body is accredited for the standard on the certificate and for the relevant industry sector. For a foreign certification body, check the website of the accreditation body named on the certificate.
If a claim of certification looks false, ISO says complaints should go first to the certification body that issued the certificate. False claims of accredited certification can be reported to the Global ACI Secretariat.
ISO vs BIS and the ISI mark
People often confuse ISO with the ISI mark, partly because the abbreviations look alike.
| ISO | BIS / ISI mark | |
|---|---|---|
| What it is | International standards body | India’s national standards body; the ISI mark is its product certification mark |
| Certifies? | No | Yes: BIS grants ISI mark licences for products, and also runs management system certification |
| Covers | Standards for systems, products, methods and more | ISI mark: a specific product made to a specific Indian Standard |
| Compulsory? | Not by ISO | ISI mark compulsory for products notified by the Central Government, mostly through Quality Control Orders |
The two meet in dual-numbered standards. When BIS adopts an ISO standard, it is published as an Indian Standard with a combined number, such as IS/ISO 9001, IS/ISO 14001 or IS/ISO/IEC 27001. For the Indian side of the story, see ISI mark full form and meaning, BIS full form and meaning, what BIS certification is and ISI vs ISO.
An ISO 9001 certificate does not replace a BIS licence. A manufacturer of a product under a Quality Control Order needs the ISI mark or CRS registration regardless of how many ISO certificates it holds, although a working quality management system helps when BIS inspects the factory.
How Aaditech can help
Aaditech is a private compliance consultancy, independent of ISO, BIS, NABCB and every certification body. We do not issue ISO certificates. We help organizations implement ISO 9001, ISO 14001, ISO 45001, ISO 50001 and other management systems: gap analysis, practical documentation, training, internal audits and management review, then help choosing an accredited certification body and support through the stage 1 and stage 2 audits. We also operate our own accredited system as a NABCB-accredited Type A inspection body under ISO/IEC 17020 (see our accreditations), so we know what living with an audited system involves. See our ISO certification support service.