ISO certification in Abu Dhabi: consultancy, readiness and who decides

What an ISO consultant does for Abu Dhabi operations

The work is the same discipline anywhere, applied to your operations. It starts with scope: which Abu Dhabi sites, activities and contracts the management system will cover, and which sit outside it.

From there it covers system design against the standard, documented information describing how the organisation actually works, implementation alongside your own process owners, and the evidence the system generates in use. Internal audit and management review are established as functioning processes rather than documents produced shortly before the audit, because the certification body will examine both directly.

Readiness is the last phase: confirming the system has operated long enough to have produced records, and preparing the people who will be interviewed.

What the certification body decides

The International Organization for Standardization (ISO) writes the standards but certifies nobody. In its own words, ISO "does not perform certification or issue certificates".¹ Certification is carried out by external certification bodies, and the decision to issue, maintain, suspend or withdraw a certificate is theirs alone.

That decision must be reached independently of the consultancy work. Clause 5.2.5 of ISO/IEC 17021-1 states that a certification body, and entities under its organisational control, "shall not offer or provide management system consultancy".² A provider offering both is offering something the accreditation rules do not permit.

What changes when operations are in Abu Dhabi

Not the standard, and not the validity of the certificate. What changes is what the certificate needs to cover, and who is asking.

• Sites and activities. Where work is physically performed determines which locations the scope statement names, and which the auditor will visit.
• Workforce and shifts. Competence records, training and shift patterns at Abu Dhabi sites form part of the evidence the system produces.
• Tender and customer requirements. Abu Dhabi entities and their supply chains frequently specify a standard, and sometimes specify that the certificate be accredited. That requirement comes from the buyer or the contract, not from the emirate.
• Delivery arrangements. Where your team, your consultant and your auditor need to be, and when, is a practical scheduling matter that affects cost and timeline more than it affects the system.
• Sector regulators. Where a specific regulator with a mandate over your activity requires a management system, that obligation comes from the regulator and should be read from its own published requirements.

UAE federal law regulates conformity assessment for regulated products.⁴ It does not impose management system certification on businesses generally, in Abu Dhabi or anywhere else in the country. Where certification is required of you, the requirement will be traceable to a named regulator, a customer or a tender document.

Where to go next

If you are working out which standard applies and who is asking for it, start with the overview. If you are already comparing bids, go straight to the checklist.

• ISO consultants in the UAE: what they do and how to choose one: the overview, and how the roles fit together.
• 9 checks before you appoint an ISO consultant: what to ask for during a bid review.
• Consultancy, certification and accreditation: who decides what: the separation rule and what accreditation covers.
• Review ISO 9001 consultancy and certification readiness, the standard most frequently specified in UAE tenders, or see all ISO standards ExSolution supports.