Skip to main content
Digital Compliance Bureau
a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in
Category: Audit & Certification

Accredited Certification Body

Also known as: Accredited Certification Organization, Accredited Certification Body (CB)
Simply put

An accredited certification body is an independent, third-party organization that assesses whether a business, product, or system meets the requirements of a particular standard and, if so, issues a certificate. It is called 'accredited' because a separate, independent accreditation body has formally recognized that the certification body is competent to carry out this work. This recognition helps give the certificates it issues credibility and consistency.

Formal definition

An accredited certification body is a certification body—an independent third party that operates a certification process against a defined standard or scheme (for example, a management system, product, or process standard)—that has received formal recognition from an independent accreditation body attesting that it operates in accordance with applicable requirements. Accreditation is distinct from certification: the certification body certifies conformity of an organization or product to a standard, while the accreditation body evaluates and recognizes the competence and impartiality of the certification body itself. This two-tier structure separates the party being assessed, the certifier, and the recognizer. Accreditation bodies are typically national or regional and may participate in multilateral recognition arrangements to support cross-border acceptance of certificates; the specific arrangements, scope, and recognized schemes vary by jurisdiction and by accreditation body. Note that an accredited certification body is a specific type of conformity assessment body, and not all conformity assessment activities (such as testing or inspection) constitute certification. Certification is generally voluntary or contractual unless a particular standard or certification requirement is incorporated by law or agreement, and accreditation status, scopes, and scheme versions change over time. Readers should verify the current accreditation scope and status of any specific body against the relevant accreditation body's official register.

Why it matters

The credibility of a certificate depends heavily on whether the body that issued it was itself competent and impartial. An accredited certification body sits within a deliberate two-tier structure: the certification body assesses an organization or product against a standard, while a separate accreditation body evaluates the certification body's own competence and impartiality. This separation matters because it addresses an obvious risk—that a certifier might issue certificates without the rigor, independence, or technical capability the standard demands. Accreditation is intended to give the resulting certificates consistency and standing, particularly when third parties such as customers, regulators, or supply-chain partners rely on them.

For compliance and procurement decisions, the distinction between an accredited and a non-accredited certificate can be significant. A certificate from an accredited body carries recognition that the certifier operates according to applicable requirements, whereas a certificate from a body without relevant accreditation may not offer the same assurance. Because accreditation bodies are typically national or regional and some participate in multilateral recognition arrangements, accredited certificates may also be more readily accepted across borders—though the specific arrangements, scopes, and recognized schemes vary by jurisdiction and by accreditation body.

It is important to note that certification is generally voluntary or contractual, becoming mandatory only where a standard or certification requirement is incorporated into law or a specific agreement. Accreditation status, certification scopes, and scheme versions all change over time. A body accredited for one scheme is not necessarily accredited for another, and an accreditation can lapse or be suspended. Reliance on a certificate should therefore be paired with verification of the issuing body's current accreditation scope against the relevant accreditation body's official register.

Who it's relevant to

Compliance officers and quality managers
Those responsible for pursuing or maintaining certification to a standard need to select a certification body whose accreditation scope actually covers the relevant scheme. They also need to understand that accreditation attaches to the certifier, not to their own organization, and that maintaining a valid certificate depends on the body remaining accredited for the applicable scope.
Procurement and vendor management teams
When a certificate is used as evidence of a supplier's conformity, these teams should distinguish accredited from non-accredited certificates and verify the issuing body's current status. This is particularly relevant where certificates are relied upon across borders, since acceptance may depend on the accreditation body's participation in multilateral recognition arrangements.
Auditors and assessors
Professionals evaluating an organization's controls or supply chain need to interpret certificates accurately—confirming the scheme, version, and scope covered, and recognizing that accreditation status can be suspended or lapse over time. They should treat a certificate as evidence to be verified against the relevant register rather than as a standalone conclusion.
Legal counsel and contract drafters
Where contracts require a counterparty to hold certification, counsel should consider specifying that certification be issued by a certification body accredited by a recognized accreditation body for the relevant scheme, since certification is generally binding only where incorporated by law or agreement. Precise drafting reduces disputes over whether a non-accredited certificate satisfies the obligation.

Inside Accredited Certification Body

Accreditation
The formal recognition, granted by a national or regional accreditation body, that a certification body is competent to perform certification against specified standards. Accreditation attests to competence and impartiality; it is distinct from the certification the body itself issues to its clients.
Accreditation Body
The organization that grants accreditation, typically operating at national level (for example, national accreditation bodies that are signatories to international mutual recognition arrangements). It oversees and periodically reassesses certification bodies but does not itself certify the certification body's clients.
Certification Body (CB)
The entity that assesses an organization's management system, product, or process against a defined standard and issues a certificate. Being 'accredited' means an independent accreditation body has confirmed the CB's competence to do so for a defined scope.
Scope of Accreditation
The specific standards, sectors, and activities for which a certification body has been accredited. Accreditation is not open-ended; a body accredited to certify against one standard is not thereby competent or authorized across all standards or sectors.
Conformity Assessment Body (CAB)
A broader category encompassing bodies that perform conformity assessment activities such as testing, inspection, and certification. An accredited certification body is one type of CAB; not all CABs are certification bodies, so the terms are related but not interchangeable.
Voluntary and Contractual Basis
Certification against most standards is generally voluntary or driven by contractual and market expectations rather than legal mandate, unless a specific law or contract requires it. Accreditation reinforces the credibility of that certification but does not convert a voluntary standard into binding law.

Common questions

Answers to the questions practitioners most commonly ask about Accredited Certification Body.

Is an accredited certification body the same as a conformity assessment body?
Not exactly. 'Conformity assessment body' is the broader category; it covers a range of organizations that perform conformity assessment activities, including testing laboratories, inspection bodies, and certification bodies. An accredited certification body is one specific type of conformity assessment body—one that issues certifications and has had its competence formally recognized through accreditation. So while every accredited certification body is a conformity assessment body, not every conformity assessment body is a certification body. The terms should not be used interchangeably where precision matters.
Does accreditation of a certification body mean my organization is automatically compliant with the law?
No. Accreditation concerns the competence of the certification body, not your organization's legal compliance. A certificate from an accredited body generally provides assurance that an independent, competent third party has assessed your conformity against a specified standard—but certification against a voluntary standard is distinct from meeting a statutory obligation. Unless a regulation or contract specifically requires or recognizes a particular certification, holding one does not by itself establish legal compliance. Certification and compliance are separate concepts that should be evaluated independently.
How can I verify that a certification body is genuinely accredited?
Accreditation is typically granted by a national or regional accreditation body, and those accreditation bodies generally maintain public directories of the organizations they accredit, along with the specific scopes of accreditation. To verify, you can consult the relevant accreditation body's register and confirm both that the certification body is listed and that the accreditation scope covers the particular standard and sector relevant to you. Because scopes and accreditation status can change, it is advisable to check the current record rather than rely on a certificate alone.
Does accreditation cover every standard a certification body offers?
Not necessarily. Accreditation is generally granted for a defined scope, meaning a certification body may be accredited to certify against some standards or in some sectors but not others. A body might, for example, be accredited for one management system standard while offering certification against other schemes on a non-accredited basis. When relying on a certificate, it is prudent to confirm that the specific standard and scope you need falls within the body's accredited scope rather than assuming blanket coverage.
What should I consider when selecting an accredited certification body?
Relevant considerations generally include whether the body's accreditation scope matches the standard and sector you require, whether the accreditation is held with a recognized accreditation body, and whether any regulatory or contractual counterparties will accept certificates from that particular body. Practical factors such as the body's experience in your industry, its impartiality arrangements, and the audit or assessment approach it uses may also be relevant. Because acceptance requirements can be fact-specific, verifying stakeholder expectations in advance is often worthwhile. This is informational only and not a substitute for professional judgment applied to your circumstances.
If our certification body loses its accreditation, what happens to certificates already issued?
The consequences can vary and depend on the accreditation scheme, the reason for the change, and any transitional arrangements put in place. In some cases, existing certificates may remain valid for a period or may be transferred to another accredited body, while in others their recognized status may be affected. Because the handling of such situations is governed by the applicable accreditation and certification scheme rules—which change over time—affected organizations should confirm the current position with the accreditation body and seek transfer arrangements where appropriate rather than assume a certificate's status is unchanged.

Common misconceptions

'Accredited certification body' and 'conformity assessment body' mean the same thing and can be used interchangeably.
A conformity assessment body is the broader category, covering activities such as testing, inspection, and certification. Every accredited certification body is a conformity assessment body, but many conformity assessment bodies (for example, testing laboratories or inspection bodies) are not certification bodies. The terms should not be treated as synonyms.
A certificate issued by an accredited certification body proves an organization is fully compliant with the law.
Certification generally attests conformity with a specific voluntary standard for a defined scope, not compliance with statutory obligations. Legal compliance and certification are distinct; a certificate may support a compliance narrative but does not, on its own, establish that legal requirements have been met.
Accreditation covers everything a certification body does and lasts indefinitely once granted.
Accreditation is limited to a defined scope of standards and activities and is subject to periodic reassessment, surveillance, suspension, or withdrawal. Certificates issued outside the accredited scope do not carry the same recognition, and accreditation status can change over time.

Best practices

Confirm the certification body's accreditation status and verify the specific scope of accreditation against the relevant standard, rather than assuming broad or open-ended competence.
Check that the accreditation is granted by a recognized accreditation body, ideally one that is a signatory to the applicable international mutual recognition arrangements, and verify current status directly with that body.
Distinguish clearly between what a certificate demonstrates (conformity with a defined voluntary standard for a stated scope) and separate legal compliance obligations, which certification does not by itself satisfy.
Use precise terminology in documentation and communications, keeping 'certification body' distinct from the broader 'conformity assessment body' category to avoid overstating the scope of a body's authority.
Treat accreditation and certification as time-limited and subject to change; re-verify status, scope, and standard versions against the latest authoritative sources before relying on them.
Where certification bears on regulated obligations, seek professional judgment on how a given certificate maps to the specific legal or contractual requirements in the applicable jurisdiction.
Promotional banner highlighting failures found in PCI audits and how to spot the gaps