What is Accreditation?

Definition

Accreditation is the formal assessment of a certification body against international standards. It proves the auditing firm possesses the competence, integrity, and impartiality to issue valid certificates. It is the audit of the auditors.

For early stage tech and AI businesses, understanding this distinction is critical. You do not get accredited. Your auditor gets accredited. If you buy a certificate from an unaccredited body, you have bought a worthless piece of paper that enterprise procurement teams will reject.

Accreditation vs Certification

People use these terms interchangeably. They are wrong. You get certified against a standard like ISO 27001. The company auditing you gets accredited against standards like ISO 17021-1 and ISO 27006. Accreditation is the authoritative, government backed mechanism that ensures your certification body is not just making up the rules.

If your auditor lacks accreditation from a recognised national authority, such as UKAS in the UK or ANAB in the US, your certification holds zero commercial weight.

The Compliance Hierarchy Explained

To understand accreditation, you must understand the hierarchy of who watches the watchers. The system operates on three distinct levels.

  • The Accreditation Body: Governed by ISO 17011. They are the nationally recognised authorities, like UKAS, that audit and approve the certification bodies.
  • The Certification Body: Governed by ISO 17021-1 and ISO 27006. They are the independent commercial firms you pay to audit your business.
  • Your Business: Governed by ISO 27001. You implement the security controls, and the certification body checks your work.

Why Startups Must Verify Accreditation

Teams with fewer than ten people routinely rush the compliance process to win a major deal. They look for the cheapest, fastest auditor available. This leads them straight to unaccredited certificate mills. You must verify the accreditation status of your chosen body before engaging them. If the final certificate does not display a valid national accreditation logo alongside the auditor’s logo, your enterprise client will spot it. The deal will die in procurement.

About the author

Stuart Barker
🎓 MSc Security 🛡️ Lead Auditor 30+ Years Exp 🏢 Ex-GE Leader

Stuart Barker

ISO 27001 Ninja

Stuart Barker is a veteran practitioner with over 30 years of experience in systems security and risk management. Holding an MSc in Software and Systems Security, he combines academic rigor with extensive operational experience, including a decade leading Data Governance for General Electric (GE).

As a qualified ISO 27001 Lead Auditor, Stuart possesses distinct insight into the specific evidence standards required by certification bodies. His toolkits represent an auditor-verified methodology designed to minimise operational friction while guaranteeing compliance.

Shopping Basket
Scroll to Top