Certifications

Personnel Certification Schemes

QA Assessor operates 40 active personnel certification schemes across 10 ISO management system standards. Each scheme defines eligibility criteria, competency requirements, assessment methods, passing criteria, and recertification rules, aligned with ISO/IEC 17024:2012.

Apply Now

Certification Pathway

Five progressive levels — from awareness to expert practitioner

🌱
Foundation
Awareness

No experience
required

→
🎓
Associate
Practitioner

1 year
experience

→
🔍
Internal Auditor
Specialist

2 years + audit
experience

→
⚙️
Implementer
Expert

3 years +
implementation

→
⭐
Lead Auditor
Master

5 years + 3
full audits led

Each level is independently assessed by QA Assessor in line with ISO/IEC 17024:2012

Eligibility Requirements by Level

Level Education Experience Requirements Typical Training Duration*
Foundation Secondary / High School None required 1 day
Associate Secondary / High School Minimum 1 year in a relevant management system or industry role 1 day
Internal Auditor Diploma or degree (or equivalent) Minimum 2 years’ experience, including participation in at least 1 internal audit in a management system context 2 days
Implementer Degree or equivalent Minimum 3 years’ professional experience, including at least 1 year in management system implementation 3 days
Lead Auditor Degree or equivalent Minimum 5 years’ professional experience, including at least 3 years in auditing and a minimum of 3 full audits led/participated 5 days

*Typical training duration refers to QA Assessor’s recommended preparation courses by level. Training is designed to support exam readiness but is not, by itself, sufficient for certification. Certification decisions are based on eligibility criteria and assessment results, in line with ISO/IEC 17024:2012. Training may be delivered by QA Assessor or other providers. QA Assessor offers preparation courses at all levels. Contact certification@qaassessor.com for course availability.

ISO 9001:2015 — Quality Management System

ISO 9001:2015 specifies requirements for a quality management system using a risk-based, process approach and Plan-Do-Check-Act cycle. QA Assessor certifies individuals across five QMS levels.

Reference: QMS (2015)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
9001:2015 — Quality Management System – Foundation Foundation Understand QMS principles, process approach, risk-based thinking, and PDCA cycle 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
9001:2015 — Quality Management System – Associate Associate Apply QMS awareness to support management system activities and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
9001:2015 — Quality Management System – Internal Auditor Internal Auditor Plan, perform, and report internal quality audits per ISO 19011 guidelines 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
9001:2015 — Quality Management System – Implementer Implementer Design, implement, operate, and improve a QMS to achieve certification readiness 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
9001:2015 — Quality Management System – Lead Auditor Lead Auditor Lead third-party or second-party QMS audit teams, manage audit programmes, and evaluate conformity 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 14001:2015 — Environmental Management System

ISO 14001:2015 specifies requirements for an environmental management system enabling organisations to enhance environmental performance, fulfil compliance obligations, and achieve environmental objectives. QA Assessor certifies individuals across five EMS levels.

Reference: EMS (2015)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
14001:2015 — Environmental Management System – Foundation Foundation Understand EMS principles, life-cycle perspective, environmental aspects/impacts, and compliance obligations 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
14001:2015 — Environmental Management System – Associate Associate Apply EMS awareness to support environmental programmes, monitoring, and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
14001:2015 — Environmental Management System – Internal Auditor Internal Auditor Plan, perform, and report internal environmental audits against ISO 14001 requirements 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
14001:2015 — Environmental Management System – Implementer Implementer Design, implement, and improve an EMS including aspects identification, objectives, and operational controls 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
14001:2015 — Environmental Management System – Lead Auditor Lead Auditor Lead EMS audit teams, evaluate environmental compliance and performance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 45001:2018 — Occupational Health & Safety Management System

ISO 45001:2018 specifies requirements for an OH&S management system to prevent work-related injury and ill health, and to provide safe and healthy workplaces. QA Assessor certifies individuals across five OH&SMS levels.

Reference: OHSMS (2018)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
45001:2018 — Occupational Health & Safety Management System – Foundation Foundation Understand OH&S principles, worker consultation and participation, hazard identification, and risk assessment 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
45001:2018 — Occupational Health & Safety Management System – Associate Associate Apply OH&S awareness to support workplace safety programmes and incident reporting 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
45001:2018 — Occupational Health & Safety Management System – Internal Auditor Internal Auditor Plan, perform, and report internal OH&S audits against ISO 45001 requirements 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
45001:2018 — Occupational Health & Safety Management System – Implementer Implementer Design, implement, and improve an OH&SMS including hierarchy of controls and emergency preparedness 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
45001:2018 — Occupational Health & Safety Management System – Lead Auditor Lead Auditor Lead OH&S audit teams, evaluate OH&S compliance and performance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO/IEC 27001:2022 — Information Security Management System

ISO/IEC 27001:2022 specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system. QA Assessor certifies individuals across five ISMS levels.

Reference: ISMS (2022)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
27001:2022 — Information Security Management System – Foundation Foundation Understand information security principles, CIA triad, risk assessment, and Annex A controls 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
27001:2022 — Information Security Management System – Associate Associate Apply ISMS awareness to support security controls implementation and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
27001:2022 — Information Security Management System – Internal Auditor Internal Auditor Plan, perform, and report internal information security audits against ISO/IEC 27001 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
27001:2022 — Information Security Management System – Implementer Implementer Design, implement, and improve an ISMS including risk treatment, SoA, and Annex A controls 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
27001:2022 — Information Security Management System – Lead Auditor Lead Auditor Lead ISMS audit teams, evaluate security posture and compliance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 22000:2018 — Food Safety Management System

ISO 22000:2018 specifies requirements for a food safety management system covering all organisations in the food chain. QA Assessor certifies individuals across five FSMS levels.

Reference: FSMS (2018)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
22000:2018 — Food Safety Management System – Foundation Foundation Understand FSMS principles, HACCP, prerequisite programmes, and food safety hazards (biological, chemical, physical) 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22000:2018 — Food Safety Management System – Associate Associate Apply FSMS awareness to support food safety plans, PRPs, and traceability documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22000:2018 — Food Safety Management System – Internal Auditor Internal Auditor Plan, perform, and report internal food safety audits against ISO 22000 requirements 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22000:2018 — Food Safety Management System – Implementer Implementer Design, implement, and improve an FSMS including hazard analysis, CCPs, and validation 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22000:2018 — Food Safety Management System – Lead Auditor Lead Auditor Lead FSMS audit teams, evaluate food safety compliance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 22301:2019 — Business Continuity Management System

ISO 22301:2019 specifies requirements for a business continuity management system to protect against, reduce the likelihood of, and ensure recovery from disruptive incidents. QA Assessor certifies individuals across five BCMS levels.

Reference: BCMS (2019)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
22301:2019 — Business Continuity Management System – Foundation Foundation Understand BCMS principles, business impact analysis, risk assessment, and continuity strategies 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22301:2019 — Business Continuity Management System – Associate Associate Apply BCMS awareness to support continuity plans, exercise programmes, and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22301:2019 — Business Continuity Management System – Internal Auditor Internal Auditor Plan, perform, and report internal business continuity audits against ISO 22301 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22301:2019 — Business Continuity Management System – Implementer Implementer Design, implement, and improve a BCMS including BIA, strategies, plans, and exercises 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
22301:2019 — Business Continuity Management System – Lead Auditor Lead Auditor Lead BCMS audit teams, evaluate continuity readiness, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 13485:2016 — Medical Device Quality Management System

ISO 13485:2016 specifies requirements for a quality management system for organisations involved in the life cycle of medical devices. QA Assessor certifies individuals across five MDQMS levels.

Reference: MDQMS (2016)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
13485:2016 — Medical Device Quality Management System – Foundation Foundation Understand MDQMS principles, regulatory requirements, risk management (ISO 14971), and product realisation 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
13485:2016 — Medical Device Quality Management System – Associate Associate Apply MDQMS awareness to support design controls, production controls, and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
13485:2016 — Medical Device Quality Management System – Internal Auditor Internal Auditor Plan, perform, and report internal medical device QMS audits against ISO 13485 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
13485:2016 — Medical Device Quality Management System – Implementer Implementer Design, implement, and improve an MDQMS including design controls, validation, and regulatory compliance 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
13485:2016 — Medical Device Quality Management System – Lead Auditor Lead Auditor Lead MDQMS audit teams, evaluate regulatory conformity, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 37001:2016 — Anti-Bribery Management System

ISO 37001:2016 specifies requirements for an anti-bribery management system to help organisations prevent, detect, and address bribery. QA Assessor certifies individuals across five ABMS levels.

Reference: ABMS (2016)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
37001:2016 — Anti-Bribery Management System – Foundation Foundation Understand ABMS principles, bribery risk assessment, due diligence, and anti-bribery controls 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
37001:2016 — Anti-Bribery Management System – Associate Associate Apply ABMS awareness to support anti-bribery programmes, reporting channels, and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
37001:2016 — Anti-Bribery Management System – Internal Auditor Internal Auditor Plan, perform, and report internal anti-bribery audits against ISO 37001 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
37001:2016 — Anti-Bribery Management System – Implementer Implementer Design, implement, and improve an ABMS including risk assessment, due diligence, and controls 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
37001:2016 — Anti-Bribery Management System – Lead Auditor Lead Auditor Lead ABMS audit teams, evaluate anti-bribery compliance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO/IEC 42001:2023 — Artificial Intelligence Management System

ISO/IEC 42001:2023 specifies requirements for establishing, implementing, maintaining, and continually improving an AI management system. QA Assessor certifies individuals across five AIMS levels. ISO/IEC 42001 (AIMS) certifications are valid for 2 years with higher annual CPD requirements, reflecting the evolving nature of AI management systems.

Reference: AIMS (2023)  |  Certificate validity: 2 years  |  CPD requirement: 20 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
42001:2023 — Artificial Intelligence Management System – Foundation Foundation Understand AIMS principles, AI lifecycle, responsible AI, ethical considerations, and risk management 60 MCQ, 90 min 2 years Minimum 20 CPD hours per year (40 hours over 2-year cycle); submit CPD log and any required evidence of relevant AI management practice (e.g. audits or implementation activities), plus recertification fee Apply Now
42001:2023 — Artificial Intelligence Management System – Associate Associate Apply AIMS awareness to support AI governance, data management, and documentation 75 MCQ, 100 min 2 years Minimum 20 CPD hours per year (40 hours over 2-year cycle); submit CPD log and any required evidence of relevant AI management practice (e.g. audits or implementation activities), plus recertification fee Apply Now
42001:2023 — Artificial Intelligence Management System – Internal Auditor Internal Auditor Plan, perform, and report internal AI management system audits against ISO/IEC 42001 80 MCQ + 1 case study, 150 min 2 years Minimum 20 CPD hours per year (40 hours over 2-year cycle); submit CPD log and any required evidence of relevant AI management practice (e.g. audits or implementation activities), plus recertification fee Apply Now
42001:2023 — Artificial Intelligence Management System – Implementer Implementer Design, implement, and improve an AIMS including AI risk treatment, controls, and impact assessment 80 MCQ + 2 case studies, 180 min 2 years Minimum 20 CPD hours per year (40 hours over 2-year cycle); submit CPD log and any required evidence of relevant AI management practice (e.g. audits or implementation activities), plus recertification fee Apply Now
42001:2023 — Artificial Intelligence Management System – Lead Auditor Lead Auditor Lead AIMS audit teams, evaluate AI governance and compliance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 2 years Minimum 20 CPD hours per year (40 hours over 2-year cycle); submit CPD log and any required evidence of relevant AI management practice (e.g. audits or implementation activities), plus recertification fee Apply Now

ISO 50001:2018 — Energy Management System

ISO 50001:2018 specifies requirements for an energy management system enabling organisations to follow a systematic approach to achieving continual improvement of energy performance. QA Assessor certifies individuals across five EnMS levels.

Reference: EnMS (2018)  |  Certificate validity: 3 years  |  CPD requirement: 15 CPD hours per year

Certification Scheme Level Core Competencies Exam Format Validity Recertification / CPD Apply
50001:2018 — Energy Management System – Foundation Foundation Understand EnMS principles, energy performance indicators, baselines, and significant energy uses 60 MCQ, 90 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
50001:2018 — Energy Management System – Associate Associate Apply EnMS awareness to support energy reviews, monitoring, and documentation 75 MCQ, 100 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
50001:2018 — Energy Management System – Internal Auditor Internal Auditor Plan, perform, and report internal energy management audits against ISO 50001 80 MCQ + 1 case study, 150 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
50001:2018 — Energy Management System – Implementer Implementer Design, implement, and improve an EnMS including energy review, objectives, and action plans 80 MCQ + 2 case studies, 180 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now
50001:2018 — Energy Management System – Lead Auditor Lead Auditor Lead EnMS audit teams, evaluate energy performance, and manage audit programmes 100 MCQ + 2 scenarios + oral, 240+30 min 3 years Minimum 15 CPD hours per year (45 hours over 3-year cycle); submit CPD log and any required evidence of relevant practice (e.g. audits or implementation activities), plus recertification fee Apply Now