It is for certification bodies, not for the organisations they certify. A certification body is accredited against it before its certificates carry accreditation.

• A gap assessment compares current practice with the requirements.
• Audit processes, auditor competence and certification decisions are defined and documented.
• Impartiality risks are identified and managed.
• An internal audit and a management review are completed.
• An accreditation body assesses the applicant and grants a defined scope of accreditation.

The number of schemes, methods or sites in scope drives most of the cost. Assessor days are charged by the accreditation body.

Time depends on the scope and on how much of the system already exists. Surveillance assessments follow once accreditation is granted.

ISO/IEC 17021-1 is used for accreditation, not certification. Accreditation is granted by an accreditation body that works to ISO/IEC 17011.