Home / Insights / 9 checks before you appoint an ISO consultant

Quality & IMSChecklist

9 checks before you appoint an ISO consultant

Four checks that separate a complete proposal from a narrow one, and five claims that should end the conversation.

Published 4 August 2026Reviewed 4 August 20265 minute read

ISO consultancy proposals are difficult to compare because they rarely differ on the thing that is easiest to compare. The prices sit within a narrow band; the scope behind them does not.

Scope is the variable, and it is the one buyers read last.
The named lead matters more than the firm, because that is who will be in the room.
Low expected involvement is a cost, not a saving: it decides who owns the system afterwards.
Some claims are disqualifying, not negotiable.

These nine checks are not a generic procurement list. They combine differences ExSolution has observed in consultancy proposals with the established separation between consultancy and independent certification. Each one is phrased as something to ask for, so it can be used during a bid review rather than after it.

This checklist covers the appointment decision only. For how the consultancy, certification and accreditation roles differ, read who decides what in ISO certification. For the overview, start with ISO consultants in the UAE.

Four checks on the proposal

Proposed scope

Which sites, activities and processes the engagement covers, and which it excludes. Scope is not administrative detail: it is the wording that will appear on the certificate, and it determines what a customer can rely on. A scope drawn narrowly produces a cheaper proposal and a certificate that may not cover the thing your client is actually asking about.

Ask forThe scope in the exact words that would appear on the certificate. Proposals that cannot state it are not yet comparable.

The named engagement lead

Whether an individual is named, what their relevant experience is, and whether that person will do the work rather than introduce it. A proposal that names only a firm is a proposal about a firm. The distance between the people in the pitch and the people on site is one of the largest sources of disappointment in this market.

Ask forThe name, the relevant experience, and the proportion of the engagement that person personally delivers.

Implementation involvement

How much time the proposal expects from your own process owners. A management system written entirely by a consultant belongs to the consultant. It survives the certification audit and then stops working, because nobody inside the organisation ever operated it. Low expected involvement is not efficiency; it is a transfer of ownership that reverses the moment the engagement ends.

Ask forExpected hours by role, and which processes your people will own by the end.

Audit readiness

Whether internal audit and management review are established as working processes before the certification audit, or produced as documents shortly beforehand. A certification body examines both directly. Systems that have genuinely run a cycle look different from systems that have been documented, and auditors are practised at telling them apart.

Ask forConfirmation that at least one internal audit and one management review will run before the certification audit.

Five claims that should stop a decision

A guaranteed certificate

No consultant can guarantee an outcome decided by an independent auditor. A guarantee implies one of two things: influence over the certification body, or a certificate that carries no independent assessment. Both are worse than no certificate, because the buyer discovers the difference at the point a customer checks.

DoTreat the guarantee itself as the disqualifying fact, not a negotiating position.

Consultancy and certification sold together

Clause 5.2.5 of ISO/IEC 17021-1 states that a certification body, and entities under its organisational control, "shall not offer or provide management system consultancy".¹ A single package covering both is offering something the accreditation rules do not permit the certification body to provide.

AskWhich accreditation body permits the arrangement, and get the answer in writing.

An implausibly short timeline

Certification audits examine records produced over a period of operation, including at least one internal audit and one management review. A timeline that leaves no room for the system to actually run is not a fast implementation. It is a schedule for producing documents.

AskWhat the system will have done, not what will have been written, by the audit date.

Undisclosed scope

A quotation with no stated scope cannot be compared with any other quotation, and the lowest number in a set of undefined proposals is almost always the narrowest one rather than the best value.

DoDecline to compare prices until every bidder has stated scope in the same terms.

Accreditation implied rather than stated

Accreditation is granted for a defined scope of activities, not universally, and a body accredited for one standard is not thereby accredited for another. Where the accreditation body and scope are not named, neither can be assumed.

DoVerify the accreditation body and the exact scope with that accreditation body before appointment.

Go further

Scope is most often the decision taken too quickly. Drawing it around the activities and sites that matter to whoever is asking for the certificate is more useful than drawing it around the whole organisation by default. UAE federal law regulates conformity assessment for regulated products;² it does not impose management system certification on businesses generally, so the party asking is usually a customer, a tender or a specific regulator.

ExSolution provides management system consultancy and audit readiness support. We do not issue ISO certificates and we do not guarantee the outcome of an independent audit.

Sources and references

All accessed 4 August 2026.

ISO/IEC 17021-1, clause 5.2.5. The standard is copyright protected; clause wording quoted here is as reproduced by European Accreditation.
Ministry of Industry and Advanced Technology, conformity certificates for regulated and unregulated products.

Last reviewed 8 August 2026.