ISO consultants in the UAE: what they do and how to choose one

A consultant prepares your management system; an accredited certification body decides whether to certify it. This overview explains the split, and links to the detail behind each decision.

Published 4 August 2026Reviewed 4 August 20263 minute read

In brief

An ISO consultant helps you build and prepare a management system. An accredited certification body audits that system and decides whether to issue a certificate. They are two separate appointments, and one supplier may not do both.

Certification is not generally mandatory in the UAE. Most organisations pursue it because a regulator, a customer or a tender asks for it.

What an ISO consultant does

The International Organization for Standardization (ISO) writes the standards. It does not certify anyone against them: ISO "does not perform certification or issue certificates".¹ A consultant sits on the preparation side of that line.

A complete engagement covers gap assessment, system design, documented information, implementation support with your process owners, internal audit and management review, and audit readiness. What a consultant cannot provide is the certificate, or any assurance about the result.

ExSolution provides management system consultancy and audit readiness support. We do not issue ISO certificates and we do not guarantee the outcome of an independent audit.

What this means for your organisation

If a single provider offers both the consultancy and the certificate, that is the point to stop. ISO/IEC 17021-1 prohibits it: a certification body may not provide management system consultancy to the organisations it certifies.² Read who decides what, and why the separation exists.

Who decides what

Consultancy: Support to build and prepare the system. Not an accredited activity.
Certification: A certification body attests that the system conforms to a standard such as ISO 9001.
Accreditation: An accreditation body attests that the certification body is competent, for a defined scope. In the UAE this includes the Emirates International Accreditation Centre and the Emirates National Accreditation System.³

Choosing a consultant

Proposals rarely differ on price alone. They differ on scope, on who actually leads the work, on how much time your process owners are expected to give, and on whether internal audit and management review are running before the certification audit.

Compare consultancy proposals point by point, including the claims that should stop a decision.

Which standard applies

UAE federal law regulates conformity assessment for regulated products.⁴ It does not impose management system certification on businesses generally. Identifying who is asking, and why, determines the standard, the scope and the urgency.

Review ISO 9001 consultancy and certification readiness for quality management, the standard most frequently specified in UAE tenders.
Explore information security and ISO 27001 where the requirement concerns information risk.
Compare ISO 22301 and NCEMA 7000 for business continuity, which are aligned but not interchangeable.
See all ISO standards ExSolution supports, including environmental, occupational health and safety, energy, accreditation and integrated systems.

Sources and references

All accessed 4 August 2026.

International Organization for Standardization, Certification. Source for ISO not performing certification, and for accreditation not being compulsory.
ISO/IEC 17021-1, clauses 5.2.5 and 5.2.7. The standard is copyright protected; clause wording quoted here is as reproduced by European Accreditation.
Emirates International Accreditation Centre, Certification Bodies, and the Emirates National Accreditation System, Ministry of Industry and Advanced Technology.
Ministry of Industry and Advanced Technology, conformity certificates for regulated and unregulated products.