How to choose a certification body in Australia (JAS-ANZ, cost and red flags)

Choose a certification body that is JAS-ANZ accredited for your standard and your industry sector, that quotes audit days consistent with the size and risk of your business, and that behaves like an independent auditor rather than a certificate vendor. Price matters less than the weight the certificate carries with your clients, and a certificate issued without genuine auditing is worth less than no certificate at all. Here is how to make the choice properly.

What does a certification body actually do?

A certification body (also called a conformity assessment body or CAB) independently audits your management system against the requirements of a standard such as ISO 9001, ISO 45001 or ISO 14001, and issues a certificate if you conform. The standard certification cycle runs three years: a two-stage initial audit, annual surveillance audits, then recertification.

The word doing the work in that paragraph is independently. The entire value of certification, the reason clients and tender evaluators accept it as evidence, rests on the certifier having no stake in the outcome beyond auditing honestly. Every red flag later in this article is some version of that independence breaking down.

It is also worth being clear about what a certification body is not. It is not your consultant, it cannot design or fix your system, and its audit is not the same thing as assurance that your business is under control. Certification samples conformity a few days a year. Confidence that your system actually works day to day comes from your own governance and assurance arrangements, not from the certificate.

What is JAS-ANZ accreditation and why does it matter?

JAS-ANZ (the Joint Accreditation System of Australia and New Zealand) is the government-appointed accreditation body for Australia and New Zealand. It does not certify businesses; it accredits the certification bodies themselves, auditing the auditors against international requirements for competence, impartiality and process.

Why it matters when you are choosing:

• Anyone can print a certificate. There is no law preventing an unaccredited company from issuing something that looks like an ISO certificate. Accreditation is the mechanism that separates certificates backed by oversight from decorative PDFs.
• Procurement teams check. Government and tier-one contractors commonly require certification from a JAS-ANZ accredited body or an equivalent member of the international (IAF) arrangement. An unaccredited certificate can fail you at tender compliance review, which is usually where businesses discover the difference, at the worst possible moment.
• Scope matters, not just the logo. A body can be accredited for one standard but not another, or for some industry sectors but not yours. Check the JAS-ANZ register for the body, the standard and the technical scope covering your work.
• You get an escalation path. Accredited bodies answer to JAS-ANZ. If a certifier behaves badly, there is somewhere to take it. With an unaccredited issuer, there is no oversight at all.

Verifying takes five minutes on the JAS-ANZ public register. Do it before you shortlist, and be sceptical of any body that is vague about its accreditation status or scope.

How much does ISO certification cost in Australia?

There is no single price, because legitimate certification is priced from audit time, and audit time is calculated from your organisation: employee numbers, number of sites, the standards in scope, and the risk and complexity of what you do. A fifteen-person civil contractor on one depot and a hundred-person contractor across four sites are different audits, and their quotes should reflect that.

What you are actually paying for across a three-year cycle:

Practical points on cost:

• Integrated systems reduce total audit days. One combined audit covering ISO 9001, 45001 and 14001 shares the common elements, so it costs less than three separate certification exercises.
• Compare quotes on audit days, not just dollars. Audit day calculations follow international rules based on your headcount and scope. If one quote shows dramatically fewer days than the others for the same business, ask why. Fewer days is only a bargain if the audit is still real.
• The certificate is the small cost. Building and running a system that genuinely works costs more than certifying it, and that is the spend that returns value. A business that inverts this, minimising the system and shopping for the cheapest certificate, ends up owning a piece of paper.

What are the red flags when choosing a certification body?

The certification market includes operators whose real product is the certificate, not the audit. The pattern is well established: certification offered in days, little or no genuine audit activity, and often a consultancy arrangement sitting behind it where the same parties build the system and guarantee the certificate. Businesses usually discover the problem later, when a client audits past the certificate, a tender reviewer queries the certifier, or the whole arrangement collapses and leaves them uncertified mid-contract.

Watch for:

• Guaranteed certification. A legitimate auditor cannot guarantee an outcome before auditing. Any "100% pass" promise tells you the audit is not real.
• Certification in days, not weeks. If the offer skips stage 1, compresses stage 2 to a formality or issues the certificate almost immediately, no genuine audit occurred.
• No accreditation, or evasiveness about it. If the body is not on the JAS-ANZ register (or an equivalent IAF-member register) for your standard and sector, the certificate will not survive scrutiny.
• Consultant and certifier are the same party. Building the system and certifying it must be independent. Bundled build-and-certify offers are a structural conflict of interest, whatever the paperwork says.
• No site visit and no interviews. Auditors need to see work and talk to people. Remote techniques have a legitimate place, but a certification that never examines your actual operations is theatre.
• Zero findings, every time. Real audits of real businesses find things. A certifier that never raises a finding is not looking.
• Implausibly low audit days. Days priced well below what your size and scope justify means corners are coming off the audit, not the margin.
• Pressure tactics. Discounts that expire today and urgency around signing are sales behaviour, not assurance behaviour.

One test cuts through most of it: would you be comfortable showing your biggest client exactly how you got this certificate? If the honest answer is no, the certificate is a liability with a logo on it.

What questions should you ask a certification body before signing?

Take a shortlist of two or three accredited bodies and ask each:

1. Is your accreditation scope current for these standards and our industry sector, and where can we verify it?
2. How many audit days are you quoting, and how was that calculated from our headcount, sites and scope?
3. Who would our auditor be, and what is their experience in our industry? An auditor who understands civil, mining or utilities work asks better questions and wastes less of your team's time.
4. What does the three-year cycle cost in total, including surveillance, recertification, travel and certificate fees, so quotes compare like for like?
5. How do you handle findings and close-out, and what are your timeframes from stage 2 to decision?
6. Can we do combined audits across our standards as an integrated system?
7. What is your process if we want to transfer to you from another accredited body, or away from you later?

A good certification body answers all of this directly. Hesitation on accreditation scope, audit day calculations or auditor competence tells you what you need to know.

Choosing the certifier is the last step; walking into the audit with a system that genuinely works is the part that decides how it goes. If you want practical, field-tested material on getting there, our free toolkits cover audit readiness and governance foundations, and the newsletter delivers this kind of plain-language guidance for contractors regularly. Both are free, and both will make you a harder business to audit badly.