Short answer: An impartial certification body bases decisions on objective evidence, free from commercial, financial or personal pressure. It identifies threats to impartiality, controls them, separates audit from technical review and certification decision, and lets independent people challenge how it manages conflicts.
The usual threats
| Threat | Example | Typical control |
|---|---|---|
| Self-interest | Fees that depend on passing | Fees never linked to outcome |
| Self-review | Auditor with prior involvement in the client's system | Exclusion from the client's file |
| Familiarity | Same lead auditor for many years | Auditor rotation |
| Intimidation | Client threatens to leave if findings are raised | Independent decision maker; complaint routes |
Why three different people
The auditor gathers evidence and recommends. A technical reviewer, who was not on the audit, checks that the file is complete and consistent. A certification decision maker, independent of both, decides. Each step can send the file back. This firewall stops a single person's judgement or relationship with the client from deciding the outcome.
Oversight
Certification bodies operating to ISO/IEC 17021-1 must analyse and document risks to impartiality and consult appropriate interested parties. BVS uses an Impartiality Committee with members from different interests to review its threat register and advise management.
Questions to ask a certifier
- Who takes the certification decision, and were they on the audit?
- How do you manage conflicts of interest with your clients?
- How are audit days calculated, and can they be reduced on request?
- Which accreditations do you hold, and for which scopes?
Next step
Impartiality explained: the threats a certification body must manage, why audit, technical review and decision are separated, and what to ask before you choose a certifier.
Visit the BVS Trust Center