DIY ISO Certification: Can You Certify Yourself?

Can you get ISO certified without a consultant? Yes. There’s no rule that says you must hire one, and plenty of organisations build their own systems, increasingly with the help of AI tools. But “DIY” doesn’t mean “on your own entirely.” There’s one part of certification you genuinely can’t do by yourself, and it’s the part that trips most people up. Here’s a realistic look at doing ISO yourself.

Business owner building a management system — Clause 9.2 of every ISO management system standard requires an internal audit that is objective and impartial, so you cannot audit a system you built yourself.

What you can do yourself

Most of the build is genuinely doable in-house if you have the time and a methodical person to own it: defining your scope, writing your policies and procedures, running your risk assessment, implementing the controls, and getting your team using the system. Templates and AI can speed up the documentation. None of this requires a consultant.

Where DIY ISO goes wrong

The common failures aren’t about effort. They’re about experience. DIY systems tend to be over-documented (a thick manual nobody follows), weak on the risk and context work auditors actually probe, and full of generic wording that doesn’t match how the business really operates. If you’ve drafted with AI, the gaps are usually in context, risk and evidence: the things a tool can’t know about your business. We cover this in detail in building your ISO system with AI.

The one thing you can’t DIY: the internal audit

Here’s the catch. Every ISO management system standard requires an internal audit (clause 9.2) before certification, and it has to be objective and impartial. You cannot objectively audit a system you built yourself; auditors know it, and so does the standard. For a small team, there’s usually no one truly independent of the work. This is exactly where an independent internal audit from an outside auditor is required, not as an upsell, but as a genuine requirement of the standard.

The smart middle ground: build it yourself, with backup

You don’t have to choose between full consultant or fully alone. Our ISO mentoring service is built for the DIY route: you do the work and keep ownership, and we guide you, review what you’ve built, and provide the independent clause 9.2 internal audit that gets you certification-ready. You get the cost savings of DIY without the risk of missing the mark at your certification audit.

Frequently asked questions

Do I need a consultant to get ISO certified?

No. You can build and implement the system yourself. The one part that requires independence is the internal audit, which is why mentoring plus an independent internal audit is the most cost-effective DIY path.

Can I audit my own ISO system?

The internal audit must be objective and impartial, so you can’t audit work you did yourself. If no one in your organisation is independent of the system, you need an external independent internal auditor.

Speak with an experienced ISO auditor

Building your own system and want it checked before certification? Email hello@streamline.business or call us:

Brisbane 07 3667 8280
Sydney 02 8315 7780
Melbourne 03 9034 3990

General guidance only. This article is general information, not legal, financial, safety or compliance advice, and it does not take account of your specific circumstances. Streamline ISO Consultants are ISO management-system consultants, not lawyers or licensed advisers. Standards, laws and regulator guidance change, and details were correct only at the time of writing. Always seek professional advice before acting. See our full Disclaimer.