Skip to content

What Is ISO? ISO Certificates and the Certification Process

ISO is an independent organisation that publishes international standards for products, services and management systems. What people call an “ISO certificate” is confirmation, by an accredited certification body after an audit, that an organisation works in line with one of these standards.

Updated: · By the 2save Enerji engineering team

ISO in brief

ISO (International Organization for Standardization) is an independent organisation founded in 1947, headquartered in Geneva and made up of the national standards bodies of more than 170 countries. Türkiye is represented at ISO by the Turkish Standards Institution (TSE). The short name, chosen so that it would not differ between languages, comes from the Greek word isos, meaning “equal”.

ISO only writes standards; it does not issue certificates or carry out audits. Certificates are issued by independent certification bodies that audit conformity with the standard. The competence of these bodies is in turn confirmed by national accreditation bodies; in Türkiye this is TÜRKAK.

Standard, certificate, accreditation: who does what?

RoleOrganisationWhat it does
Standard writerISO / TSEDefines the requirements (e.g. ISO 50001:2018)
ConsultantFirms such as 2save EnerjiSets up the system in your organisation, trains staff, prepares you for the audit
Certification bodyAccredited private bodiesAudits and issues the certificate
Accreditation bodyTÜRKAK (IAF member)Confirms the competence of the certification body

A certificate from a non-accredited body does not satisfy legal obligations and may be rejected in tenders or customer audits. You can check a certificate's validity on the certification body's website or in the international IAF CertSearch database.

The most widely used ISO management system standards

StandardSubjectWho it matters most to
ISO 9001Quality management systemAlmost every sector; customer satisfaction and process management
ISO 14001Environmental management systemFacilities with waste, emissions and environmental permits
ISO 45001Occupational health and safety management systemManufacturing, construction, logistics
ISO 50001Energy management systemEnergy-intensive industry, large commercial and public buildings (a legal requirement above the thresholds)
ISO/IEC 27001Information security management systemSoftware, finance, organisations processing data
ISO 14064-1Greenhouse gas inventoryCompanies reporting a carbon footprint, exporters

Because most of these standards share the same harmonized structure (clauses 4–10), they can be run together under a single integrated management system with shared documentation, internal audits and management review.

The energy-specific ISO 50000 family

  • ISO 50001 – Energy management systems: requirements (the certifiable standard). Details
  • ISO 50002 – Energy audits: how an audit is planned and reported. Energy audit
  • ISO 50003 – Requirements for certification bodies and audit durations
  • ISO 50004 – Guidance for implementing, maintaining and improving ISO 50001
  • ISO 50006 – Energy performance indicators (EnPIs) and energy baselines
  • ISO 50015 – Measurement and verification of energy performance

How to get ISO certified: 6 steps

  1. Choice of standard and scope: Which standard, which sites and activities?
  2. Current-state (gap) analysis: Identifying gaps against the requirements of the standard.
  3. Setting up the system: Policy, objectives, procedures, records and training.
  4. Implementation and record-keeping period: The system must actually run; auditors want to see evidence.
  5. Internal audit and management review.
  6. Stage 1 and Stage 2 audits by an accredited body, then the certificate; annual surveillance for 3 years.

Frequently asked questions

Who issues ISO certificates?

ISO does not issue certificates. Independent certification bodies accredited for the relevant standard issue them after an audit. In Türkiye accreditation is granted by TÜRKAK.

How long is an ISO certificate valid?

Management system certificates are generally valid for 3 years, with a surveillance audit every year.

How can you spot a fake ISO certificate?

Check on TÜRKAK or IAF CertSearch whether the issuing body is accredited for that scope, and verify the certificate number on the certification body's lookup page. Offers that promise a “certificate” within days without an audit are not reliable.

Can a consulting firm issue an ISO certificate?

No. The consultant sets up the system and prepares you for the audit; under impartiality rules certification is done by a separate, accredited body.