An ISO standard number alone does not tell a buyer what your certificate covers. Review the named organization, the activities described and the sites included in the certification documents. Before agreeing a quotation, confirm the proposed coverage with the certification body and compare it with the requirement you need to meet.
The ISO/IAF Auditing Practices Group’s guidance distinguishes the scope of a quality management system, the certification scope and the scope of an individual audit. These can differ. It also explains that certification may cover only part of an organization. This is educational auditing guidance, not a substitute for the standard or your buyer’s conditions. ISO/IAF guidance on scope and applicability
Read the scope as a buyer would
Use this table to frame questions about the proposed certificate. Compare the answers with the actual work your company intends to supply.
| Check | What it tells you | Buyer question |
|---|---|---|
| Named organization | Which organization the document identifies. | Is this the company I am contracting with? |
| Activities | The operations described as certified. | Does the wording address the work being offered? |
| Sites | The locations and any site-specific coverage. | Is the relevant operating location included? |
| Standard | The management-system requirements assessed. | Is this the standard named in my requirement? |
Two hypothetical scope mismatches
An equipment trader wants to supply items purchased from manufacturers. Calling its own activity manufacturing would give the buyer a different picture of the business. Explain who performs each activity and what your company controls; ask the certification body to assess suitable scope wording rather than copying another supplier’s certificate.
A service company has an administrative office and a separate maintenance workshop. Its customer needs assurance relevant to maintenance work. Do not assume that a document describing office activities answers that request. Put the workshop and its role into the discussion before the audit arrangements and quotation are agreed.
Can one certificate cover several sites?
Multi-site certification is possible under applicable arrangements, but it is not automatic. IAF MD 1:2023 sets conditions for multi-site management-system certification and requires certification documents to identify the covered sites and activities. The certification body determines the applicable approach; not every organization qualifies for sampling. IAF MD 1 on multi-site certification
For your enquiry, describe what happens at each location and how the operations are managed together. If a certificate refers to a site list or annex, review that document too. A shared brand name, common owner or head-office address is not enough information to confirm coverage.
Keep the scope aligned with changes
Tell the certification body when you plan a new activity, workshop or branch and ask what review is needed. Do not present the existing certificate as covering the addition before its status is confirmed. Keep the buyer’s request, proposed wording and the body’s response together so different teams do not rely on different assumptions. Compare quotations using the same proposed scope
If your buyer asks for a quality management system, read about ISO 9001 preparation support. Share your activities, operating locations and buyer wording with IraqCert to discuss the support needed. IraqCert helps with preparation and coordination; the independent certification body assesses the scope and decides whether to grant certification. ISO 9001 certification support