Key takeaways
- Choose a consultant who builds the system around how your business actually works, not a photocopied template that sits in a folder.
- Insist on the accredited route: a certificate only carries weight if the certification body is accredited by a recognised body such as SANAS.
- Consulting and certification must stay independent. One firm cannot both design your system and certify it.
- Pick a partner who stays involved after certification for surveillance audits, internal audits and the year-to-year upkeep.
- Trust honesty about scope, time and cost over the cheapest, fastest promise, and look for genuine cross-industry experience.
Choosing an ISO consultant is one of those decisions that looks simple until you are in the middle of it. Several firms will quote you, the proposals all sound similar, and the differences that actually matter are easy to miss. This guide is a plain buyer's checklist: the questions worth asking, the signals worth trusting, and the few red flags worth walking away from. The goal is not to sell you on any one approach. It is to help you spend your money once and end up with a management system you keep using.
They build the system around how your business actually works
The single biggest difference between a good consultant and a poor one is whether the management system reflects your operation or someone else's template. A photocopied set of procedures will pass an audit on a good day and then sit in a folder, ignored, because nobody recognises their own work in it. A system built around how you genuinely plan, deliver and review work becomes useful straight away. It's just your business, written down clearly.
Ask a prospective consultant how they start. The honest answer involves spending time in your operation first: walking your processes, talking to the people who do the work, and understanding where things already go well and where they break. A good early step is a structured review of where you stand against the standard, so the plan is shaped by your reality rather than a generic checklist.
They use the accredited route so your certificate is recognised
An ISO certificate is only as valuable as the recognition behind it. In South Africa, that recognition flows from accreditation: a certification body accredited by a recognised accreditation body (such as SANAS) is checked against international rules, which is what gives the certificate weight with customers, tender evaluators and regulators. A certificate from an unaccredited mill may look identical on the wall and mean very little when someone actually scrutinises it.
A good consultant works toward the accredited route by default and can explain plainly why it matters for you. If you want the background before you commit, our overview of accredited certification and why it matters covers the distinction in more detail. The short version: ask early whether the certificate you are aiming for will be accredited, and treat a vague answer as a reason to keep asking.
They keep consulting and certification independent
This is the clearest red flag in the whole process, so it is worth being blunt about. The firm that helps you build your system must not be the same body that certifies it. Those two roles are required to stay independent for a simple reason: a certification body cannot objectively audit a system it was paid to design. If a "consultant" offers to both implement your system and issue your certificate, that certificate is compromised before the ink is dry, and an informed customer or auditor will see straight through it.
A reputable consultant will tell you this themselves, unprompted. They help you prepare; an independent, accredited certification body performs the audit and issues the certificate. Keeping those roles separate is not a technicality. It's the thing that makes your certificate mean something.
They stay involved after certification
Certification is not the finish line. Most ISO certificates run on a three-year cycle, with surveillance audits in between to confirm the system is still being used and improved. A consultant who disappears the moment you pass leaves you to face those audits (and the year-to-year upkeep) on your own, which is how hard-won systems quietly decay.
Before you sign, ask what happens after the certificate is issued. Good firms expect to stay in the picture: helping with internal audits, management reviews, corrective actions and surveillance preparation, at a level that suits how much you want to run yourselves. You do not need them to do everything forever, but you do want a partner who is still there when the first surveillance audit comes round.
They are honest about scope, time and cost up front
Implementing a standard properly takes real effort from your team, and a good consultant says so. Be cautious of anyone promising certification in a few weeks with almost no involvement from your people, because a system nobody helped build is a system nobody will run. The realistic answer depends on your size, your starting point and the standard, and an experienced consultant can give you a sensible range after looking at your operation rather than a flattering number designed to win the quote.
Look for clarity on three things: what is in scope (which sites, which activities, which standard), roughly how long it will take, and what it will cost, including who handles the certification body's separate audit fees. A proposal that is honest about the work involved is usually a better sign than the cheapest, fastest one on the table.
They have a real track record across industries
A generic management standard still has to land in a specific industry, and experience across different sectors is what lets a consultant adapt the same structure to very different operations: a manufacturer, a logistics business and a professional services firm each need the standard expressed in their own language. Ask for examples of work in contexts like yours, and ask what they learned, not just who they have worked with.
Be reasonable about references: many clients place limits on how their work can be shared, so a careful consultant may describe the shape of a project without naming the company. That discretion is itself a good sign, and it's how they will treat your information too. What you are listening for is whether they can talk concretely about real problems they have solved, rather than reciting a logo wall.
Putting the checklist to work
Pulled together, the consultant worth choosing builds the system around your business, works the accredited route, keeps consulting and certification independent, stays with you for surveillance audits, is honest about scope and cost, and can show genuine experience. None of these require inside knowledge to check: they're all fair questions to put to any firm you are considering, and the answers tell you a great deal.
If you would like a straight read on where your business stands and what certification would realistically involve, you are welcome to talk it through with us. Whatever you decide, going in with this checklist means you choose with your eyes open. That's the whole point.