AustraliaServices Registrations & licencesISO certification coordination

Registrations & licences

ISO certification coordination for Australian businesses

ISO 9001 and friends via accredited bodies (ANAB / JAS-ANZ) — the gap work organised, the audit coordinated, no certificate-mill shortcuts.

Why founders pick CapEasy

5.0★ across 335+ Google reviews

2,700+ businesses served across the group

What is iso certification coordination?

ISO 9001 and friends via accredited bodies (ANAB / JAS-ANZ) — the gap work organised, the audit coordinated, no certificate-mill shortcuts.

An Australian business usually starts chasing ISO 9001 (or 27001, 14001, 45001) for one of two reasons: a tender or a large customer's procurement panel now lists it as a condition of doing business, or the business has outgrown running quality, information security or WHS on one person's memory and wants a documented system that survives someone leaving. Either way, the certificate that ends up on the wall is issued by a Certification Body — SAI Global, Intertek, BSI, SGS, TÜV SÜD, DNV, Lloyd's Register and others all compete for the work — and that CB is only worth what its accreditation says it's worth. In Australia, the accrediting body is JAS-ANZ, the Joint Accreditation System of Australia and New Zealand, structurally the same role India's NABCB plays: JAS-ANZ doesn't certify businesses itself, it accredits the CBs who do, and it maintains a public register at register.jasanz.org/accredited-bodies where anyone — including a procurement panel checking a tender submission — can verify a CB actually holds current JAS-ANZ accreditation for the standard being claimed.

Between deciding to pursue certification and a CB auditor showing up, there's real work: reading the target standard's clauses against what the business actually does, drafting the quality manual and procedures that don't exist yet, running an internal audit against the new system, holding the management review the standard requires, and closing out whatever the internal audit found before the CB's Stage 1 documentation review starts. That gap-analysis-and-build phase is unregulated in Australia — any competent consultant can do it — and it's also the phase most businesses under-budget for, because a management system that only exists on paper collapses the moment a Stage 2 auditor asks an employee to walk through the actual process.

Who does what

Your CapEasy teamISO certification coordination, the reconciliations and reporting behind it, and the questions list that keeps it honest.
Your registered BAS or tax agentEverything that carries a licence in Australia — rendered exactly as written: work out what goes on your bas, or advise you on it — under tasa 2009 that requires registration we do not hold.
YouOne conversation with one named person, and the decisions that are genuinely yours.

ISO certification coordination in Australia

JAS-ANZ accredits the Certification Body, not your business — check the CB, not the certificate on the wall

JAS-ANZ doesn't audit individual businesses and issues nothing to them directly; it accredits the Certification Bodies that do, and that accreditation is checked against JAS-ANZ's own public register at register.jasanz.org/accredited-bodies. A CB can hold JAS-ANZ accreditation for ISO 9001 and not for ISO 27001 — scope is specific to the standard, so the accreditation check needs to name the exact standard being pursued, not just the CB.

The conflict-of-interest rule: the firm that builds your management system cannot also certify it

JAS-ANZ's accreditation rules bar a single entity from both consulting on a management system's design and performing the certification audit of that same system for the same client. That's a structural rule, not a preference — it's what keeps the audit independent of the work being audited. We do the gap analysis, documentation and internal-audit preparation; the Stage 1 and Stage 2 audits are run by a separate JAS-ANZ-accredited CB with no role in building what it's auditing.

A "certificate" from an unaccredited certifier won't survive a tender panel or a customer audit

Outfits offering ISO certification with no real Stage 1/Stage 2 audit are not issuing a JAS-ANZ-accredited certificate — a genuine audit takes real weeks, and a certificate that skipped it won't appear against register.jasanz.org's accredited-bodies list. A procurement panel or a customer's supplier-quality team checking a tender submission against that register will find nothing, which reads worse on a bid than never having claimed certification.

Certification is a three-year cycle — surveillance audits check the system is still in use, not just that it once existed

A JAS-ANZ-accredited ISO certificate is typically valid three years, and it is not self-renewing: a surveillance audit in year one and again in year two checks the management system is still being followed day to day, and a full recertification audit runs in year three before the next cycle starts. A system built only to survive the initial audit and then left alone is the most common way certification lapses or fails surveillance.

What your registered BAS or tax agent receives from us

  • A clause-by-clause gap analysis mapping the target standard (ISO 9001, 27001, 14001, 45001, etc.) against the business's actual current processes, with every gap identified before drafting starts.
  • A drafted quality manual and the full set of procedures, work instructions and records the standard requires, built from how the business actually operates rather than a generic template.
  • A completed internal audit against the new management system, run before the CB's Stage 1 review, with findings logged and corrective actions tracked to closure.
  • Documented management review minutes covering the inputs the standard requires — audit results, corrective actions, process performance — dated ahead of the Stage 1 audit.
  • A shortlist of JAS-ANZ-accredited Certification Bodies for the specific standard and scope in question, with each CB's accreditation confirmed against register.jasanz.org before the client selects one.
  • A Stage 1 readiness package handed to the chosen CB — the full documentation set, evidence of the internal audit and management review, and a scope statement matching what will actually be audited.

Questions worth asking before you start

Who actually does the work — a person or an AI tool?

A named person on our team owns your file and reviews everything that leaves it. Software does a real share of the grinding underneath it — coding, matching, flagging the obvious gaps — but nothing regulated happens without a person’s judgement, and nothing here is signed or filed by an algorithm.

Is there a filing or lodging step here?

No — iso certification coordination is operational work inside your books, not something submitted to ATO. Where a filing does sit downstream of it, inside registrations & licences more broadly, that stays with your registered BAS or tax agent, never with us.

Which software do you work in?

Whatever you already run. Most commonly QuickBooks, Xero, NetSuite, Sage, Zoho Books and a handful of others — we work inside your system rather than moving you onto one of our own.

How does this actually start?

A short, free read-only look at what you already have, and a written note on what we found. A scoping call decides the size of the engagement — nothing here commits you to anything.

What does it cost?

There is no published price for iso certification coordination — it depends on volume, how many entities are involved, and how far behind the books are. We quote after the read-only review, which is free.

How does this fit with the rest of registrations & licences?

ISO certification coordination sits inside registrations & licences, alongside ABN, TFN, GST & PAYG-W stack, Business name registration, Food business licensing. Most clients end up buying the category as a whole rather than one leaf at a time, but starting narrow is fine.

Does CapEasy issue the ISO certificate?

No. The certificate is issued by a JAS-ANZ-accredited Certification Body after it runs the Stage 1 and Stage 2 audits. We do the gap analysis, build the management-system documentation, and prepare the business for those audits.

Why can't the same firm build our management system and certify it?

JAS-ANZ's accreditation rules bar it as a structural conflict of interest — a firm auditing its own work isn't an independent audit. That's why we hand every client to a separate JAS-ANZ-accredited CB for the actual audit.

How do we check a Certification Body is genuinely JAS-ANZ-accredited?

We check the CB's accreditation directly against register.jasanz.org/accredited-bodies for the specific standard and scope you're pursuing before recommending it. A CB accredited for ISO 9001 isn't automatically accredited for ISO 27001 — scope matters, not just the CB's name.

What's wrong with a certifier offering ISO certification in a few days with no on-site audit?

A real JAS-ANZ-accredited certification needs an actual Stage 1 documentation review and Stage 2 on-site audit, which takes real weeks, not days. A certificate issued without that audit won't appear on register.jasanz.org, so a tender panel or customer checking it during due diligence finds nothing — which reads worse than never having pursued certification at all.

How long does the whole process take?

It depends on how much of a documented management system already exists versus how much has to be built from scratch, and on the chosen CB's own audit scheduling. We don't quote a fixed timeline up front — the gap analysis is what tells us how much work the business is actually starting from.

Once we're certified, is that it?

No. ISO certificates typically run a three-year cycle: the system goes through a surveillance audit in year one and again in year two, then a full recertification audit in year three. We build that calendar into the file once the initial certificate is issued.

Can you get us certified against ISO 9001 and ISO 27001 at the same time?

Each standard gets its own gap analysis, its own documentation, and its own audit scope with the CB — they can run on overlapping timelines if the business wants, but we don't treat one standard's file as a shortcut for another's.

What actually happens at Stage 1 versus Stage 2?

Stage 1 is the CB's documentation review — checking the manual, procedures and records exist and cover what the standard requires — usually run once the internal audit is complete. Stage 2 is the on-site audit, where the CB checks the business is actually doing what the documentation says. Corrective actions from Stage 1 findings need to close before Stage 2.

Do we need to run our own internal audit before the CB shows up?

Yes — the standard requires an internal audit and a management review before certification, and the CB looks for evidence of both at Stage 1. We build and run that internal audit as part of the preparation work, not as an afterthought.

What happens if the CB's auditor raises a nonconformity?

Nonconformities get logged with a corrective action and a deadline to close them, and depending on severity the CB may require closure before it issues the certificate. We track corrective actions from either audit stage through to closure so they don't sit open past the CB's window.

Which Certification Body should we use, and does JAS-ANZ set the price?

That's the client's choice — SAI Global, Intertek, BSI, SGS, TÜV SÜD, DNV, Lloyd's Register and others compete in this market and quote independently per engagement; JAS-ANZ accredits CBs, it doesn't set or publish a price list. We shortlist JAS-ANZ-accredited CBs with accreditation confirmed for the specific standard and scope you need, and the business picks who audits it.

Your CapEasy experts

Connect with us

Talk to the people who handle this work every day — no call centre, no hand-offs.

Ayush Joshi

Ayush Joshi

Co-Founder

Ex-OYO and Tenaciousfly. 7+ years in business development, strategic acquisitions, financing and debt syndication.

Aditya Jain

Aditya Jain

Co-Founder

Ex-Bank of America. 4+ years in investment banking, EU & Indian compliances, ESG compliances, and project management.

Manav Raval

Virtual CFO & Tax Specialist

Section 80-IAC, tax planning and startup compliance. Previously at Toyota Motor Corporation and Jaguar Land Rover.

Ayush Faldu

Virtual CFO & Tax Specialist

Financial strategy, budgeting and cash flow — a CFO’s judgement, monthly.

Start with a look at the actual file.

Read-only access and a written note on what we found. Free, and the fastest way to know whether we are useful to you.

Book a 20-minute fit callAll of registrations & licences