UK Certification Body — ISO/IEC 17021-1 · 17065 · 17020 · 17024
Trusted Certification
Across the Globe
RBA Registrars delivers internationally recognised management system certification, product certification, verification, inspection and professional auditor training — serving clients across the UK, EU, Asia, USA and Australia.
Welcome to RBA Registrars
Khairul Bashar — Director, Responsible Business Assessment Limited
Responsible Business Assessment Limited, trading as RBA Registrars, is a private limited company specialising in certification, verification, inspection and training, delivered with genuine technical depth. We work with companies, international groups and institutions of every size — from local operators to multinational businesses — building services around what each client actually needs rather than a one-size-fits-all programme.
Being self-financing, we depend on our clients — and we never forget it.
We offer a value-added service on every engagement, large or small.
Services kept independent, to protect every decision we make.
Our Core Services
From initial gap analysis through to full certification and ongoing surveillance — we support organisations at every stage of their conformity journey.
Third-party ISO management system certification, product conformity assessment, label certification and CE/UKCA marking support.
Independent GHG inventory verification and emissions report validation under ISO 14064-1/2, ISO 14065 and related frameworks.
Recognised Lead Auditor, Auditor and Awareness qualifications across ISO 9001, 14001, 45001, 27001 and other management system standards.
Tailored training, transition courses, internal auditor development and bespoke workshops to build lasting in-house competence.
Independent third-party inspection services under ISO/IEC 17020 — objective assessment of products, installations and processes. Accreditation in progress.
Standards We Certify Against
Our scope spans management systems, products, verification and personal certification — organised by service area below.
Internationally recognised QMS standard for consistent product and service quality across all sectors.
Full Guide →
Framework for managing environmental responsibilities, reducing ecological impact and demonstrating compliance.
Full Guide →
Occupational health and safety management to eliminate and reduce workplace risks and prevent injury.
Full Guide →
Systematic approach to managing sensitive company and customer information assets securely.
Full Guide →
Globally recognised FSMS standard applicable to all organisations in the food chain.
Full Guide →
Systematic approach to continual improvement of energy performance, efficiency and consumption.
Full Guide →
Quality management systems for the design, manufacture and supply of medical devices.
Full Guide →
Security management system requirements for organisations involved in the supply chain.
Full Guide →
Internationally recognised guidance on social responsibility — governance, human rights, labour, environment and community.
Full Guide →
Code of practice for information security controls applicable to cloud computing services and environments.
Full Guide →
Third-party environmental labelling programmes — principles, practices and certification procedures for eco-label schemes.
Full Guide →
Certification of social responsibility management systems — governance, human rights, labour practices and community engagement.
Independent certification of product claims, labelling and marketing assertions for consumer and B2B markets.
Systematic preventive approach to food safety — identifying, evaluating and controlling biological, chemical and physical hazards.
Full Guide →
GMP certification for food, pharmaceutical, cosmetics and related sectors — ensuring consistent product quality and regulatory compliance.
Full Guide →
Specification and guidance for quantification and reporting of GHG emissions and removals at organisation level.
Full Guide →
Specification for quantification, monitoring and reporting of GHG emission reductions or removal enhancements from projects.
Full Guide →
Specification and guidance for the verification and validation of GHG statements and assertions.
Full Guide →
Requirements and guidance for self-declared environmental claims — Type II labelling, recycled content, recyclability and carbon neutrality assertions.
Full Guide →
Personal certification as a Lead Auditor for Quality Management Systems. Covers planning, conducting and reporting full third-party audits.
About ISO 9001 →
Personal certification as a Lead Auditor for Environmental Management Systems — including legal compliance, aspects, impacts and operational controls.
Personal certification as a Lead Auditor for Occupational Health & Safety Management Systems — hazard identification, risk assessment and legal compliance.
Personal certification as a Lead Auditor for Information Security Management Systems — controls, risk treatment and Annex A assessment.
Personal certification as a Lead Auditor for Food Safety Management Systems including HACCP principles and prerequisite programmes.
Personal certification as a Lead Auditor for Energy Management Systems — energy performance indicators, baseline and planning for continual improvement.
Systems Certification
ISO 9001 · ISO 14001 · ISO 45001 · ISO 27001 · ISO 22000 · ISO 50001 · ISO 13485
- Initial Enquiry & Scoping — Contact RBA Registrars to discuss the standard, scope and number of sites. We confirm sector competence and issue a tailored quotation.
- Application & Certification Agreement — Complete the application form and sign the agreement setting out the audit programme, fees and both parties' obligations.
- Stage 1 Audit — Documentation Review — Auditor reviews the management system documentation and confirms readiness for Stage 2. A Stage 1 report is issued.
- Stage 2 Audit — Implementation — On-site or remote audit assessing implementation and effectiveness. Nonconformities are raised, agreed and must be closed before certification.
- Certification Decision — An independent technical reviewer, not involved in the audit, makes the certification decision. Certificate issued, valid for 3 years.
- Surveillance Audits (Annual) — At least one surveillance audit per calendar year to confirm continued conformity.
- Recertification (3-Year Cycle) — Full recertification audit before the end of the 3-year cycle to renew the certificate.
Product Certification
CE Marking · UKCA · ISO/IEC 17065 · ISO 14024 · Label Certification
- Enquiry & Scope Identification — Identify applicable directives, regulations and standards for the product(s). RBA Registrars confirms competence and issues a quotation.
- Application & Agreement — Complete application and sign the product certification agreement covering scope, fees and surveillance obligations.
- Technical File & Testing Review — RBA Registrars reviews the technical documentation and test reports. Additional testing may be required through approved laboratories.
- Factory / Process Audit (where applicable) — An audit of the manufacturing facility or production process is conducted to verify consistent conformity.
- Certification Decision & Mark Authorisation — Independent review and certification decision. Authorisation to use the CE/UKCA/RBA Registrars mark is issued in writing.
- Ongoing Surveillance — Periodic surveillance audits and product sampling to confirm continued conformity throughout the certificate period.
Verification & Validation
ISO 14064-1/2/3 · ISO 14065 · ISO 14021 · GHG Inventories · Sustainability Claims
- Enquiry & Assertion Definition — Define the GHG assertion, verification boundary and reporting period. RBA Registrars confirms competence and issues a scope-specific quotation.
- Verification Agreement — Sign the verification engagement agreement setting out the objectives, scope, criteria and materiality threshold.
- Strategic Analysis — Review of the organisation's activities, significant emission sources, data systems and internal controls.
- Document Review & Data Verification — Detailed assessment of GHG inventory data, supporting evidence and calculation methodologies against the applicable standard.
- Site Verification (where applicable) — On-site or remote verification of emission sources, meters and monitoring equipment.
- Independent Technical Review — A second competent reviewer independently evaluates the verification findings and conclusions.
- Verification Statement Issued — A signed verification statement is issued at the agreed level of assurance (reasonable or limited) referencing the applicable standard.
Personal Certification
Lead Auditor · Auditor · ISO 9001 · ISO 14001 · ISO 45001 · ISO 27001 · ISO 22000 · ISO 50001
- Enquiry & Eligibility Check — Select the standard and qualification level. RBA Registrars confirms eligibility criteria including minimum education, work experience and auditing experience.
- Application & Enrolment — Complete the personal certification application and enrol on the relevant RBA Registrars training course.
- Training Course — Attend the accredited Lead Auditor or Auditor training programme (typically 2–5 days) covering standard requirements, audit techniques and practical exercises.
- Experience Evidence Submission — Submit documented evidence of completed audits and relevant work experience for independent assessment against the competence criteria.
- Written Examination — Sit and pass the written examination. A minimum pass mark is required to progress to the next stage.
- Certification Decision — An independent reviewer assesses the full application. On approval, a personal certificate of competence is issued, valid for 3 years.
- Maintenance & Renewal — Annual CPD declaration and 3-yearly recertification to maintain the personal qualification.
Independent inspection of products, raw materials and goods against defined specifications, purchase order requirements or applicable standards.
Objective assessment of manufacturing processes, production lines and operational activities against defined requirements.
Independent inspection of plant, equipment and installation works against engineering drawings, specifications and applicable standards.
Structured technical assessment of assets, facilities and processes in support of commercial, regulatory or investment decisions.
Third-party inspection supporting regulatory compliance — pre-export inspection, CE/UKCA marking verification and sector-specific statutory inspection requirements.
Accreditation Status: RBA Registrars is actively working towards formal accreditation under ISO/IEC 17020. Our inspection processes, documented information and personnel competence framework are being developed in full alignment with this standard in preparation for accreditation assessment. We welcome enquiries from organisations seeking independent inspection services.
Professional Development & Training
RBA Registrars delivers recognised auditor training programmes as an Exemplar Global Approved Training Organisation — from Lead Auditor qualifications and internal auditor courses through to standard transition programmes and specialist technical training for donor-funded capacity building projects.
Lead Auditor Course
Intensive five-day programmes preparing candidates to plan, lead and report third-party management system audits in accordance with ISO 19011 and the applicable ISO/IEC 17000 series. Includes theory, practical exercises and written examination. Exemplar Global registered qualification.
Internal Auditor Course
Two-day practical programme for individuals conducting internal management system audits. Covers audit planning, evidence collection, nonconformity writing and reporting — applicable to all ISO management system standards.
Transition Courses
Targeted transition programmes for organisations and auditors managing standard revisions — including ISO 9001 and ISO 14001. Covers clause-by-clause comparison, gap analysis methodology, updated requirements and written knowledge assessment.
Awareness & Foundation
Introductory programmes for management teams, system owners and staff. Builds understanding of standard requirements, clause-by-clause interpretation and implementation fundamentals — no prior knowledge required.
Technical Training for Donor Organisations
RBA Registrars delivers technical training and capacity building programmes for international development projects funded by donor organisations such as GIZ, DFID/FCDO, World Bank and similar agencies. These programmes focus on standards awareness, conformity assessment knowledge, inspector and verifier training, and regulatory capacity — and are entirely separate from RBA Registrars's own certification services. RBA Registrars does not provide consultancy or training in areas where it also provides certification.
A Truly Global Reach
Headquartered in the United Kingdom, RBA Registrars operates through a network of qualified auditors across the UK, EU, Asia, USA and Australia — delivering consistent, credible certification wherever your operations are based.
Reasons to choose RBA Registrars
RBA Registrars provides a value-added service across your supply chain — certification, verification, inspection and training — delivered in accordance with ISO/IEC 17021-1, ISO/IEC 17065, ISO/IEC 17020 and ISO/IEC 17024.
Professional Auditors
Our audit teams carry genuine industry experience in your sector, across multiple geographies — not just a generic checklist. Auditor competence is managed and reviewed in line with ISO/IEC 17021-1 and Global-ACI (formerly IAF) Mandatory Documents.
Client Satisfaction
Any complaint is reviewed by our independent Impartiality Committee, made up of industry experts outside the audit team. Complaints and appeals receive written acknowledgement within five working days.
Understanding & Responsive
Client feedback is built into how we plan and run our service, because our business depends on getting it right for you. Dedicated client managers keep every certification journey moving.
Fair Results
We hold a closing meeting to walk through findings together, with every opportunity to clarify before anything is finalised. Certification decisions are made independently of the audit team.
Public Information
As a certification body, RBA Registrars is committed to full transparency. The following documents and resources are publicly available to clients, applicants, auditors and any interested party, in accordance with ISO/IEC 17021-1 and ISO/IEC 17065 requirements.
Formal process for receiving, evaluating and deciding on complaints and appeals from clients, applicants and any interested party. Aligned with ISO/IEC 17021-1 Clauses 9.7 and 9.8.
How RBA Registrars identifies and manages all risks to impartiality across its certification, inspection and verification activities. Aligned with ISO/IEC 17021-1 Clause 4.
How RBA Registrars safeguards confidential information obtained during certification activities, including obligations on staff, auditors, subcontractors and committee members.
Contractual terms and certification rules governing certification, surveillance, recertification and authorised use of the RBA Registrars certification mark.
Permitted and prohibited uses of the RBA Registrars certification mark, including mandatory accompanying text and minimum size requirements for certified organisations.
Policy and procedure for suspending, withdrawing or reducing the scope of certification, per ISO/IEC 17021-1, ISO/IEC 17065 and Global-ACI Mandatory Documents.
End-to-end certification process — from initial enquiry, Stage 1 and Stage 2 audit, through certification decision, certificate issue, surveillance and recertification.
RBA Registrars's commitment to high-quality certification services, client focus, impartiality, regulatory compliance and continuous improvement.
News & Blog
Standard revisions, transition guidance and industry developments — explained by our technical team. Tap any card for the full details.
ISO 19011:2026 has been updated
The fourth edition of the audit guideline now covers remote and hybrid audits, information security and supply chain oversight.
ISO 19011 provides the guidance our auditors follow when planning and conducting audits of management systems. The 2026 edition formally recognises remote and hybrid audit techniques, introduces guidance on auditing information security and privacy controls within any management system, and strengthens expectations around supply chain and outsourced-process oversight.
What it means for you: audit programmes — both internal audits and those we deliver — should be reviewed against the new guidance. RBA Registrars has updated its audit methodology accordingly, and our Lead Auditor training courses now reflect the fourth edition.
FDIS – ISO 9001:2026 issued for ballot
The Final Draft International Standard stage has been reached, with full publication expected later in 2026.
The FDIS is the last development stage before publication: national standards bodies vote on the final text and only editorial changes are permitted afterwards. The revision aligns ISO 9001 with the latest Harmonised Structure, strengthens requirements around organisational context, risk-based thinking and change management, and clarifies expectations for externally provided processes.
What it means for you: no immediate action is required — certificates to ISO 9001:2015 remain valid. Once the 2026 edition is published, a transition period (expected to be three years, set through Global-ACI/IAF resolutions) will apply. We recommend obtaining the FDIS, running an early gap analysis, and speaking to us about combining your transition with a scheduled surveillance visit.
ISO 14001:2026 has been published
The revised environmental management standard opens a 36-month transition window for certified organisations.
Key changes include: alignment with the latest Harmonised Structure, explicit consideration of climate change, biodiversity and ecosystem health (Clauses 4.1 & 4.2), a new Clause 6.3 for structured change management, expanded top-management accountability, a reinforced lifecycle perspective, and defined objectives for every internal audit.
If you are already certified to ISO 14001:
- Obtain the 2026 edition and review all changes against your current EMS.
- Conduct a gap analysis and close identified gaps — documentation, change management, climate and lifecycle considerations.
- Train relevant personnel, especially top management on their expanded accountability.
- Complete a full internal audit and management review against the 2026 requirements.
- Contact RBA Registrars to schedule your transition audit — it can be combined with a surveillance or recertification visit to minimise disruption and cost. All transitions must be completed within the 36-month window.
If you are seeking certification for the first time:
- Implement your EMS directly against the 2026 edition — all new certificates are issued to the current standard.
- Address the new requirements from the outset, then complete your internal audit and management review before applying.
Questions we hear most
For a well-prepared organisation, the journey from application to certification decision typically takes six to twelve weeks. It comprises a Stage 1 audit (readiness review of your documented system) and a Stage 2 audit (full assessment of implementation), followed by an independent certification decision. Audit duration is calculated in accordance with Global-ACI MD 5 (formerly IAF MD 5), based on your headcount, complexity and number of sites. Certificates are valid for three years, maintained through annual surveillance audits and a recertification audit in year three.
Not at all — non-conformities are a normal part of the audit process and most audits identify at least one. A minor non-conformity (an isolated lapse that does not undermine the system) requires a corrective action plan, which we review and accept without delaying certification. A major non-conformity (an absent or systemically failed requirement) must be corrected and verified — usually through submitted evidence or a short follow-up visit — before a certificate can be issued or maintained. Our auditors explain every finding at the closing meeting so there are no surprises.
Each audit day begins with an opening meeting confirming scope, plan and logistics. The day then follows the agreed audit plan: interviews with process owners, site tours, observation of activities and sampling of records and evidence. We hold a short daily debrief so emerging findings are never a surprise, and finish with a formal closing meeting presenting all findings and conclusions. The number of audit days is determined under Global-ACI MD 5, with multi-site sampling applied under Global-ACI MD 1 (formerly IAF MD 1) where applicable.
Our Impartiality Committee is an independent oversight body required by ISO/IEC 17021-1. Its members are industry experts drawn from outside the audit and certification teams. The Committee reviews threats to impartiality (financial, commercial or relationship-based), oversees how complaints and appeals are handled, and monitors that certification decisions are made free from commercial pressure. It has the authority to escalate concerns directly to top management — and its existence is one of the strongest safeguards behind every certificate we issue.
Approval & Recognition
RBA Registrars is committed to operating at the highest level of international credibility. We hold formal approvals, are actively pursuing accreditation under internationally recognised frameworks, and are recognised by leading professional bodies in the certification and conformity assessment sector.
Exemplar Global Approved Training Organisation
RBA Registrars is an Exemplar Global (formerly RABQSA) Approved Training Organisation (ATO). This approval confirms that our Lead Auditor and Auditor training programmes meet the competence and quality requirements established by the world's leading certification body personnel registration scheme.
Learn about Exemplar Global →Global-ACI & IAF Mandatory Documents
Our certification, inspection and personal-certification activities are operated in accordance with the Mandatory Documents of Global-ACI (formerly the International Accreditation Forum, IAF) — including MD 1 (multi-site sampling), MD 5 (audit duration) and related mandatory requirements — alongside UK legal requirements including UK GDPR, the Data Protection Act 2018, the Equality Act 2010 and the Modern Slavery Act 2015.
ISO/IEC 17065 — Aligned Certification Body
RBA Registrars operates its product certification activities in full alignment with ISO/IEC 17065 — the international standard for bodies certifying products, processes and services. Our processes, impartiality arrangements, personnel competence and certification decision framework are developed to meet the requirements of this standard.
RBA Registrars is currently working towards formal accreditation under ISO/IEC 17065. Our product certification framework has been established in preparation for formal accreditation assessment by a national accreditation body.
Product Certification Services →ISO/IEC 17020 — Aligned Inspection Body
RBA Registrars operates its inspection activities in full alignment with ISO/IEC 17020 — the international standard for inspection bodies. We operate as a Type A (independent) inspection body with all inspection personnel, procedures and quality management arrangements developed to meet the requirements of this standard.
RBA Registrars is currently working towards formal accreditation under ISO/IEC 17020. Our inspection body framework has been established in preparation for formal accreditation assessment by a national accreditation body.
Inspection Services →ISO/IEC 17021-1 Aligned Certification Body
RBA Registrars's management system certification operations are structured and managed in full alignment with ISO/IEC 17021-1 — the international requirements for bodies providing audit and certification of management systems. This alignment underpins the integrity, impartiality and consistency of every certificate we issue.
View our Impartiality Policy →ISO/IEC 17024 Aligned Personal Certification
RBA Registrars's personal certification programmes for individual auditors are developed and operated in alignment with ISO/IEC 17024 — the international standard for bodies certifying persons. This ensures that all qualifications issued carry internationally recognised credibility.
View Personal Certification →Global-ACI & EA Framework Alignment
RBA Registrars operates with full awareness of and alignment to Global-ACI (Global Accreditation Cooperation Incorporated, formerly IAF) Mandatory Documents and EA (European co-operation for Accreditation) guidelines — ensuring our certification practices are consistent with global best practice for conformity assessment bodies.
View our public documents →Ready to Achieve Certification?
Contact our team for a no-obligation scoping call and tailored quotation.
Contact RBA Registrars
For certification enquiries, complaints, appeals, or confidential whistleblowing disclosures — our team is ready to help.
3 Seville Court, Seville Road
Portishead, Bristol BS20 7BD
United Kingdom
Raise a formal complaint or appeal in writing, referencing your certificate number. Written acknowledgement within 5 working days.
Confidential disclosures protected under the Public Interest Disclosure Act 1998. Select "Whistleblowing Disclosure" in the form, or contact us directly.
Send an Enquiry
* Required fields. | Complaints and appeals will receive written acknowledgement within 5 working days — see our Complaints & Appeals Policy. | Whistleblowing disclosures are treated with strict confidentiality under the Whistleblowing Policy and PIDA 1998. | Your data is handled under UK GDPR — see our Privacy Policy.
Verify an RBA Registrars Certificate
Enter a certificate number to verify the authenticity and current validity of an RBA Registrars-issued certificate. This service is available to clients, auditors, purchasers and any interested party.
Certificate numbers are printed on all RBA Registrars certificates and scope documents. Unable to verify? Contact enquiries@rbaregistrars.com or visit www.rbaregistrars.com.