Kaizen Consulting0800 KAIZENBook a consultationBook a call
Home/Resources/ISO certification in New Zealand: how it works, step by step
ISO CERTIFICATION7 min read · updated November 2026

ISO certification in New Zealand: how it works, step by step

ISO certification in New Zealand means an independent, accredited certification body audits your management system against an ISO standard and, if it conforms, issues a certificate — usually valid for three years, with surveillance audits in between. Here is how each step works, and what you do yourself versus what a consultant or the certifier does.

Who actually certifies you?

A certification body — never ISO itself, and never a consultant. ISO writes the standards; it does not audit or certify anyone. In New Zealand and Australia, certification bodies are accredited by JAS-ANZ, the Joint Accreditation System of Australia and New Zealand, which checks that they audit competently and impartially. A certificate from an accredited body is the one tender panels, principals and councils recognise, and you can verify it on the JAS-ANZ register.

A consultant’s job is different: to help you build a management system that will pass, and to prepare your people for the audits. Kaizen is a consultancy, not a certification body — we prepare you; an independent certifier audits you.

The steps, in order

STEPWHAT HAPPENSWHO DOES IT
1. Choose the standard and scopeDecide which standard (ISO 9001, 14001, 45001, 27001…) and which sites, activities and services the certificate will coverYou — a consultant can advise
2. Gap analysisCompare what you already do against each clause of the standard and list what is missingYou, or a consultant
3. Build and implement the systemWrite the policies, procedures and registers the standard needs, then run them for long enough to produce recordsYou, or a consultant with your team
4. Internal audit and management reviewCheck the system yourself before the certifier does, and have management review its performanceYou, or a consultant
5. Stage 1 auditThe certification body reviews your documentation and readiness, and confirms the scopeCertification body
6. Stage 2 auditThe certification body checks the system is implemented and working in practice — records, interviews, site walk-throughsCertification body
7. Certificate, then surveillanceIf there are no unresolved major nonconformities, the certificate is issued; surveillance audits follow, usually once a year, and a recertification audit before the certificate expiresCertification body

What Stage 1 and Stage 2 actually check

Stage 1 is a readiness check. The auditor reads your documented system, confirms the scope, and looks for anything that would stop Stage 2 going ahead — a missing internal audit, no management review, a gap in a required procedure. Anything raised at Stage 1 is fixed before Stage 2.

Stage 2 is the real test. The auditor samples records, interviews people at different levels, and walks the operation to see the system working the way it is written. Findings are graded: a minor nonconformity needs a corrective action; a major one has to be closed before the certificate can be issued.

After the certificate: surveillance and recertification

A certificate is usually valid for three years. In between, the certification body returns for surveillance audits — usually once a year — to confirm the system is still working. Before the three years are up, a recertification audit renews it. Kaizen’s own certificates follow exactly this cycle: issued by Telarc in 2025 and valid to 2028, with annual surveillance.

How long does it take, and what does it cost?

It depends on the standard, the number of sites and how much you already have in place. For a single-site business starting ISO 9001, twelve to sixteen weeks from brief to certificate is typical in our engagements, and the certifier’s audit dates often set the pace. Costs fall into three buckets — consulting, the certification body’s fees, and your own people’s time. Kaizen quotes the consulting part as a fixed price after a scoping call; our article on what ISO 9001 certification costs in New Zealand breaks down all three.

Do you need a consultant at all?

No — some organisations build their own system and go straight to a certification body. A consultant earns their fee when time matters, when nobody in-house has done it before, or when you want several standards run as one integrated system. What a consultant can never do is certify you, and anyone who guarantees a certificate is promising something only the certification body can decide.

THE BOTTOM LINE

ISO certification in New Zealand is a seven-step process that ends with an independent, JAS-ANZ accredited certification body auditing you at Stage 1 and Stage 2, then returning every year. The work before those audits — scope, gap analysis, system build, internal audit — is where most of the time goes, and it is the part you can plan.