Examples are Swedac in Sweden, UKAS in the United Kingdom, DAkkS in Germany and ANAB in the United States. Each assesses certification bodies against ISO/IEC 17021-1 and the ISO 27001-specific requirements in ISO/IEC 27006-1, and keeps reviewing them afterwards.
Accreditation bodies that are members of the IAF recognise each other's work, so an accredited certificate issued in one country is accepted in the others. An ISO 27001 certificate from an unaccredited body carries far less weight in a security review. See certification body.
Read more
Related terms
- Certification body
- A certification body is the independent organization that audits a management system against an ISO standard and issues the certificate when it conforms.
- International Accreditation Forum
- The International Accreditation Forum is the association of accreditation bodies whose mutual recognition makes accredited ISO certificates valid worldwide.
- ISO 27001
- ISO/IEC 27001 is the international standard for an information security management system, certified by an accredited body on a three-year cycle.