Three Different Jobs. People Keep Buying the Wrong One.
When a customer requirement forces ISO 9001 onto your agenda, the first search usually returns a mix of companies that all appear to offer the same thing. They do not. There are three distinct roles in this process, they are performed by different organizations, and the separation is not a market preference. It is written into the rules that govern accredited certification.
Understanding that separation before you start saves money and avoids a genuinely bad outcome: paying someone to build your system who is not permitted to certify it, then discovering the certification body you wanted cannot touch you for two years.
The Three Roles, Clearly Separated
- Preparation support. Gap analysis against the standard, mapping and documenting how work actually happens, building the quality management system, training your people, and running internal audits and management review. This is where the real effort sits, and it is what most organizations mean when they say they need help.
- The certification body. An independent, accredited organization that performs the Stage 1 documentation review and the Stage 2 implementation audit, decides on certification, issues the certificate, and returns for surveillance audits. You select and contract them directly.
- The accreditation body. The organization that assesses and accredits certification bodies against ISO/IEC 17021-1. You never hire one, but their accreditation is what makes a certificate credible to your customers.
Why the Separation Is Enforced
This is the part worth understanding properly, because it explains the entire market structure.
ISO/IEC 17021-1 sets requirements for bodies providing audit and certification of management systems, and it includes explicit impartiality provisions. A certification body, and entities under its control, are not to offer or provide management system consultancy. Where a client has received such consultancy from a body related to a certification body, a recognized mitigation is that the certification body does not certify that management system for a minimum of two years afterward. Verified 22 July 2026.
The logic is simple. Auditing a system you designed yourself is marking your own homework, and a certificate produced that way is worth nothing to the customer who demanded it. The rule protects the value of the certificate you are buying.
What Kind of Help Do You Actually Need?
Preparation support is not one thing, and matching it to your situation matters more than the provider's brochure.
Four different situations, four different needs
You have orderly processes but nothing documented. You need documentation help and someone who knows what the standard actually requires. This is the lightest version, and it is mostly translation work.
Your processes are genuinely disorganized. Documenting chaos produces a documented mess that will fail Stage 2 or pass and then decay. You need process improvement first, then documentation. Doing them in the wrong order is the most expensive mistake in this space.
You have a system that failed an audit. You need someone who can read the nonconformities and tell you whether the problem is documentation, implementation, or leadership. These are different failures with different fixes.
You need to build internal capability. If you want your own people running internal audits and maintaining the system long term, that is a training objective. Buying a finished system from outside leaves you dependent on whoever built it.
What Should You Ask Before Hiring Anyone?
- Are you connected to any certification body? If yes, ask directly how that affects which bodies can certify you afterward. A straight answer here is a good sign.
- Will you write our system, or build it with our people? A system written entirely by an outsider is a system your team will not follow when the auditor asks them about it.
- What happens after certification? Surveillance audits continue on a cycle. Ask who maintains the system and whether your people will be capable of it.
- Have you worked in our kind of operation? Sector experience matters most in regulated environments, where some steps that look like waste are legal requirements.
- What would make you tell us not to proceed? Certification is not right for every organization at every moment. Someone with judgment has a list.
- Can you show us what the internal audit process will look like? The standard requires internal audits and management review. If a provider is vague about these, they are vague about the parts that fail organizations at Stage 2.
Where Gurley Leadership Solutions Sits
To be explicit about the boundary: Gurley Leadership Solutions is not a certification body and cannot issue ISO certificates. That work must be done by an independent accredited certification body, which you contract separately.
What this business does is preparation support: gap analysis, process documentation, quality management system development, and employee training, combined with Lean Six Sigma implementation so the documentation work improves your operation rather than only satisfying an auditor. That combination matters most in the second situation described above, where processes need improving before they are worth documenting.
Gurley Leadership Solutions is based in Ajax and works with organizations across Whitby, Oshawa, Clarington, Pickering, Barrie, Mississauga, and the wider Durham Region and Greater Toronto Area, in sectors including manufacturing, healthcare, not-for-profit, engineering, and operations. For what certification itself involves, including the audit stages and the 2026 revision timing, see the guide to Lean Six Sigma implementation, or read more about Malcolm Gurley.
Not Sure Which Kind of Help You Need?
Book a free 15 minute phone call with Malcolm Gurley. Describe where your processes stand and what your customer is asking for, and we will work out which of the four situations you are in before anyone quotes you anything.
Prefer the phone? Call 416.669.7644, Monday to Friday, 8:00 AM to 6:00 PM.
Book Your Free 15 Minute CallFrequently Asked Questions
What expert can help with ISO 9001:2015 certification support?
Preparation support covers gap analysis, process documentation, quality management system development, training, and internal audits. That is a different role from the certification body, which performs the audit and issues the certificate. Gurley Leadership Solutions provides preparation support in Durham Region and the GTA, combined with Lean Six Sigma implementation, and is not a certification body.
Can one company prepare us and also certify us?
No. ISO/IEC 17021-1 provides that a certification body and entities under its control are not to offer or provide management system consultancy, and where such consultancy has come from a related body, a recognized mitigation is that certification does not proceed for a minimum of two years. Auditing a system you designed yourself would undermine the certificate's value.
What is an accreditation body?
An accreditation body assesses and accredits certification bodies against ISO/IEC 17021-1. You never hire one directly, but their accreditation is what makes a certificate credible to customers, which is why accredited certification is usually specified in supplier requirements and tenders.
Should we improve our processes before documenting them?
If your processes are genuinely disorganized, yes. Documenting a disorganized process produces a documented mess that either fails the Stage 2 audit or passes and then decays, because nobody follows it. Improving first and documenting second costs less overall and produces a system your people will actually use.
How do we get started?
Book a free 15 minute phone call with Malcolm Gurley through the button above, or call 416.669.7644, Monday to Friday, 8:00 AM to 6:00 PM. There is no cost and no obligation for the initial conversation.
About Malcolm Gurley
Malcolm Gurley is the President of Gurley Leadership Solutions Inc. in Ajax, Ontario. He brings 35+ years of senior executive experience with Honeywell, Johnson Controls, and Armstrong Fluid Technology to every engagement. He is licensed through LMI Canada and holds a Lean Six Sigma Black Belt, and has personally led improvement programs at Honeywell where productivity improved by about one fifth in year one and throughput grew by roughly two thirds over four years. Clients typically report returns of 10:1 or better on their program investment, though every engagement is customized and outcomes vary by organization. Learn more about Malcolm Gurley or see why choose Gurley Leadership.
Gurley Leadership Solutions Inc. delivers leadership development and organizational improvement programs licensed through Leadership Management International; every engagement is customized and outcomes vary by organization. Gurley Leadership Solutions Inc. is not a certification body and does not issue ISO certificates; certification audits are performed by independent accredited certification bodies. Statements about ISO standards, impartiality requirements and certification practice reflect published information as of the verification date and are subject to change; confirm current requirements with the relevant standards body, your accreditation body, and your chosen certification body. Results described from prior engagements, including the Honeywell figures, describe those engagements and are not a guarantee of future results. Return-on-investment figures, including any 10:1 reference, describe typical results from prior engagements and are not a guarantee of future results. This article is general information, not a proposal and not an offer.
