Skip to content

Glossary · Foundations

Certification Body

An independent organisation, accredited for the purpose, that audits a management system and issues a certificate when it conforms to a standard.

Put the term into practice: Risk management software

A certification body, sometimes called a registrar, performs the external audit that leads to certification against standards such as ISO/IEC 27001 or ISO 22301. To issue a recognised certificate it must itself be accredited by a national accreditation body.

The certification body is independent of the organisation it audits and of any consultancy that helped build the system, which is what gives the certificate its credibility.

In KaitoSec everyone works with the same terms.

Security, IT and leadership share terms, data and evidence in one system. We show you in thirty minutes.