General
FAQ
Everything clients ask us before getting started — in one place, no fine print.
Questions we're asked most often
How much does ISO standard implementation cost?
The price varies from organisation to organisation: number of employees, sector, number of locations, process complexity, the existing level of organisation, and the standard being implemented. That's why we provide a quote only after a free introductory consultation — no flat figures that grow later.
What does ISO standard implementation mean?
Adapting the standard's requirements to real operations: establishing procedures, records, responsibilities, objectives, risk management, internal reviews and a management review of the system. We've explained this in detail on the "What Is ISO Standard Implementation?" page.
What is an ISO certificate?
A document by which an independent certification body confirms that an organisation's management system complies with the requirements of a specific standard. Valid for 3 years with annual surveillance audits (for most standards).
What is ISO certification?
The process of independently reviewing a system: a documentation review (Stage 1), an audit of application in practice (Stage 2), issuing the certificate, annual surveillance audits and recertification.
How long does implementation take?
Most often 2 to 6 months, depending on the standard and the organisation: ISO 9001 usually 2–6 months, ISO 27001 4–8, HACCP 1–3 for smaller facilities. For large systems — over 500 employees, multiple locations or an integrated system of several standards — a project realistically runs beyond a year; we handle those clients too. We define the exact timeline after a gap analysis.
Is certification mandatory?
Standards are voluntary (with the exception of legal obligations such as HACCP procedures in food businesses), but certificates are increasingly required by tenders, customers and contracts — so in practice they become a condition of doing business.
Who issues an ISO certificate?
An independent certification body. A consultant must not issue a certificate to an organisation they've prepared — we prepare you and recommend accredited bodies.
Does the certificate need to be accredited?
Yes — only a certificate from a body accredited for the specific standard and sector carries full value and international recognition. Non-accredited certificates are often rejected on serious tenders and by serious customers.
What's the difference between implementation and certification?
Implementation is establishing the system within the organisation (that's what we do with you); certification is an independent review of that system (that's what a certification body does). Two separate roles — deliberately.
Can several standards be implemented together?
Yes — and it's usually more cost-effective. Standards share the same structure (HLS), so documentation, risks, internal audits and reviews are done once for all of them.
What is an integrated management system?
A single system that meets the requirements of several standards at once (e.g. ISO 9001 + 14001 + 45001), with unified documentation and reviews. More detail on the "Integrated Management System" page.
Designations of the same standard by market
The most common question around tenders — why a certificate from another country “doesn’t look the same”:
Most of the confusion is caused by the national prefix in the designation: the same standard carries its own designation in every country, so a bidder from Serbia, Bosnia and Herzegovina or Croatia brings a certificate that “doesn’t look the same” — even though it is the same standard. That is why we recommend that tender documentation always states the international designation — ISO 9001, ISO 14001, ISO/IEC 27001 — because every bidder understands it, wherever they come from, and nobody has to prove that MEST, SRPS or BAS are “the same thing”. Official designations by national institute:
Official designations — by national standardisation institutes
| Market | ISO 9001 | ISO 14001 | ISO 45001 | ISO/IEC 27001 | ISO 22000 | ISO 50001 | ISO 13485 | ISO/IEC 17025 | Standardisation institute | Accreditation body |
|---|---|---|---|---|---|---|---|---|---|---|
| International (ISO) | ISO 9001 | ISO 14001 | ISO 45001 | ISO/IEC 27001 | ISO 22000 | ISO 50001 | ISO 13485 | ISO/IEC 17025 | ISO | — |
| Europe (CEN) | EN ISO 9001 | EN ISO 14001 | EN ISO 45001 | EN ISO/IEC 27001 | EN ISO 22000 | EN ISO 50001 | EN ISO 13485 | EN ISO/IEC 17025 | CEN | — |
| Montenegro | MEST EN ISO 9001 | MEST EN ISO 14001 | MEST EN ISO 45001 | MEST ISO/IEC 27001 | MEST EN ISO 22000 | MEST EN ISO 50001 | MEST EN ISO 13485 | MEST ISO/IEC 17025 | ISME | ATCG |
| Serbia | SRPS ISO 9001 | SRPS ISO 14001 | SRPS ISO 45001 | SRPS ISO/IEC 27001 | SRPS ISO 22000 | SRPS ISO 50001 | SRPS ISO 13485 | SRPS ISO/IEC 17025 | ISS | ATS |
| Bosnia and Herzegovina | BAS EN ISO 9001 | BAS EN ISO 14001 | BAS EN ISO 45001 | BAS EN ISO/IEC 27001 | BAS EN ISO 22000 | BAS EN ISO 50001 | BAS EN ISO 13485 | BAS EN ISO/IEC 17025 | ISBIH | BATA |
| Croatia | HRN EN ISO 9001 | HRN EN ISO 14001 | HRN EN ISO 45001 | HRN EN ISO/IEC 27001 | HRN EN ISO 22000 | HRN EN ISO 50001 | HRN EN ISO 13485 | HRN EN ISO/IEC 17025 | HZN | HAA |
| Albania | SSH EN ISO 9001 | SSH EN ISO 14001 | SSH EN ISO 45001 | SSH EN ISO/IEC 27001 | SSH EN ISO 22000 | SSH EN ISO 50001 | SSH EN ISO 13485 | SSH EN ISO/IEC 17025 | DPS | DPA |
| North Macedonia | MKS EN ISO 9001 | MKS EN ISO 14001 | MKS EN ISO 45001 | MKS EN ISO/IEC 27001 | MKS EN ISO 22000 | MKS EN ISO 50001 | MKS EN ISO 13485 | MKS EN ISO/IEC 17025 | ISRSM | IARNM |
| Kosovo | SK EN ISO 9001 | SK EN ISO 14001 | SK EN ISO 45001 | SK EN ISO/IEC 27001 | SK EN ISO 22000 | SK EN ISO 50001 | SK EN ISO 13485 | SK EN ISO/IEC 17025 | AKS | DAK |
The designations are deliberately shown without the year of issue: the year in a national designation is the year of national adoption, not the year of the ISO edition, so it differs from country to country. MEST EN ISO 9001:2016, SRPS ISO 9001:2015 and BAS EN ISO 9001:2015 are one and the same standard — ISO 9001:2015. The same applies to ISO/IEC 27001:2022, which Montenegro adopted as MEST ISO/IEC 27001:2023. You can always check the exact designation and year of adoption in the national institute’s catalogue.
Related standards
Useful pages alongside these questions:
Have a question that's not listed?
Send it — we reply within 24 hours, no obligation. Call us or send an inquiry — we reply within 24 hours.