International Organization for Standardization (ISO) is the developer and publisher of ISO 9001, but does not itself carry out auditing and certification.

These services are performed independently of ISO by certification bodies. ISO does not control such bodies, but does develop voluntary International Standards to encourage good practice in their activities on a worldwide basis.

For example, ISO/IEC 17021:2006 specifies the requirements for bodies providing auditing and certification of management systems.

Certification bodies that wish to provide further confidence in their services may apply to be "accredited" as competent by IAF (International Accreditation Forum, INC) recognized national accreditation body.