wa-img

Certification Process

At NORMEIRA, certification is approached as a structured and independent process rather than a simple documentation exercise. Each certification route is built around scope review, audit planning, objective assessment, findings evaluation, and controlled certification decision-making. This helps organisations understand what to expect from the first enquiry through certificate issuance and the ongoing certification cycle.

For visitors exploring certification for the first time, the process can appear technical. In practice, the route becomes much clearer when it is understood step by step. The purpose of this page is to explain how certification is generally approached through NORMEIRA, what happens at each stage, and how the process may vary depending on the applicable scheme.

Certification schemes covered by this process

The general process below is most relevant to the management system and related certification schemes presented by NORMEIRA, including:

  • ISO 9001 Certification
  • ISO 14001 Certification
  • ISO 45001 Certification
  • ISO 22000 Certification
  • HACCP Certification
  • GMP ISO 22716 Certification
  • Halal Certification
  • ISO 22301 Certification
  • ISO 27001 Certification

While the overall route remains structured and audit-led, some stages may vary depending on whether the scheme is EIAC accredited, offered as a non-accredited route, provided in collaboration, or presented with accreditation under progress.

Step-by-step certification process

The table below summarises the certification journey in a clear sequence. It is designed to help organisations understand how the process typically moves from initial enquiry to certification and the later maintenance cycle.

Step Stage Description
1 Initial enquiry The organisation shares its interest in certification and provides basic information on its activities, locations, and the scheme it wishes to pursue.
2 Application and scope review NORMEIRA reviews the proposed certification scope, sites, headcount, operational activities, and any other information needed to define the route properly.
3 Proposal and agreement Once the scope is understood, the certification route, audit basis, and commercial terms are confirmed through the proposal and agreement stage.
4 Audit programme planning Audit duration, audit stages, competence needs, and site coverage are planned according to the applicable scheme and the complexity of the organisation.
5 Stage 1 or readiness review For management system certifications, the initial audit stage normally reviews the documented system, scope boundaries, readiness, and key system controls before the full assessment.
6 Stage 2 or main assessment The organisation is assessed in practice through interviews, records review, process sampling, and verification against the applicable standard or certification criteria.
7 Findings and corrective action Where nonconformities or other findings are raised, the organisation addresses them within the agreed timeframe and submits objective evidence for review.
8 Technical review and certification decision The audit file is reviewed through the certification body’s controlled decision process. Certification is granted only where the applicable requirements are satisfied.
9 Certificate issuance Once approved, the certificate is issued with the relevant scope, site details where applicable, and the certification cycle dates.
10 Surveillance and recertification For schemes that require an ongoing cycle, surveillance audits and later recertification are carried out to confirm continued conformity and ongoing system effectiveness.

What happens during the audit stages

For the management system certification schemes most commonly sought through NORMEIRA, the audit process is normally divided into clear stages. Stage 1 is usually focused on readiness. It looks at the organisation’s scope, documented system structure, key policies and procedures, internal audit status, management review status, and overall preparedness for the full assessment. Stage 2 is the main conformity assessment. It examines how the system operates in practice, whether the requirements are effectively implemented, and whether objective evidence supports conformity within the requested scope.

During these stages, auditors may review site activities, roles and responsibilities, process controls, operational records, management-system objectives, compliance-related controls where relevant, corrective action practice, and the organisation’s approach to monitoring and improvement. The exact audit trail will always depend on the standard, the industry, the scope, and the complexity of the organisation.

How findings are handled

If an audit identifies nonconformities or other findings, these are communicated clearly to the organisation. The purpose of this stage is not simply to record issues, but to ensure they are addressed properly. The organisation is normally expected to review the finding, identify the cause where required, take correction or corrective action, and submit objective evidence for review within the agreed timeframe.

Certification is not granted purely because an audit has been completed. It is granted after the required review confirms that applicable findings have been addressed appropriately and that the conditions for certification have been met.

Independent certification decision

A key feature of a professional certification route is that the certification decision is controlled and independent. After the audit activity and closure review are complete, the certification file is subjected to technical review before a certification decision is made. This process helps ensure that certificate issuance is based on objective evidence, applicable requirements, and controlled decision-making rather than on informal or automatic approval.

Surveillance and recertification

For schemes that operate within an ongoing certification cycle, certification does not end at certificate issuance. Surveillance activity is used to confirm that the certified organisation continues to maintain its management system or applicable certification controls over time. At the end of the cycle, recertification is normally required to confirm continued conformity for the next certification period.

This ongoing cycle is important because certification represents continuing confidence rather than a one-time event. It helps maintain the value of the certificate throughout its validity period.

How the process can vary by scheme

Although the overall process remains professional and structured, the certification route may differ slightly depending on the scheme involved.

Scheme grouping How the route is generally positioned
EIAC accredited schemes ISO 9001, ISO 14001, ISO 45001, ISO 22000, and HACCP generally follow the accredited certification route with defined audit and certification controls.
Non-accredited scheme GMP ISO 22716 is presented as a non-accredited certification route, but still follows a structured conformity assessment and controlled issuance process.
Collaboration-based scheme Halal certification is provided in collaboration with Al Waiz Certification & Training Services, and is approached according to the applicable scheme requirements.
Accreditation under progress ISO 22301 and ISO 27001 are presented with accreditation under progress. Where pursued, the route should be communicated responsibly and in line with the applicable certification basis.

What organisations should prepare

A smoother certification process usually begins with clear preparation. Organisations are generally expected to define the requested scope properly, confirm legal name and site details, identify the applicable activities, and ensure that the relevant management system or certification controls are available for audit. It is also important that responsible personnel are available during the audit and that records, evidence, and operational activities can be reviewed properly.

For multi-site organisations, the preparation stage may require additional clarity on site coverage, central functions, and whether all locations are intended to be included within the requested certification scope.

The certification process at NORMEIRA is designed to be clear, professional, and audit-led. From application review to certificate issuance and the continuing certification cycle, each stage is intended to provide structure, transparency, and confidence for organisations seeking certification in the UAE and beyond.

For businesses planning certification, a clear understanding of the process helps set realistic expectations and supports a more organised certification journey from the beginning.