Certifications and Audits: More Than Just a Checkmark on a Checklist
Audits and certifications have played an important role in the business world for decades. ISO 9001 was first published in 1987. Since then, the standards landscape has expanded: organizations are now assessed not only on quality but also on topics such as the environment, working conditions, sustainability, ethics, and corporate social responsibility.
This development offers opportunities, but it also raises questions. Aren’t standards becoming increasingly complex? Are we sometimes losing sight of the original intent? And how can organizations use certifications as a practical tool rather than a mandatory requirement?
From Quality Management to Sustainability and Ethics
ISO 9001 was originally developed to help organizations control their processes and improve the quality of their products and services. The standard has been revised several times. The current, sixth edition, ISO 9001:2026, was published on September 16, 2026.
Since then, numerous other standards have been added. Examples include:
- ISO 14001 for environmental management;
- ISO 45001 for occupational health and safety;
- Various sustainability and ethics standards such as SMETA and EcoVadis.
This expansion requires increasingly specialized knowledge from both internal and external auditors. Whereas auditors used to focus primarily on procedures and quality assurance, they now often need to be knowledgeable about environmental legislation, working conditions, due diligence, human rights, and sustainability issues.
Certification audits assess whether an organization complies with the standard. The audit report may include findings and areas for improvement, but the certificate itself does not include a grade and does not indicate how well an organization exceeds the standard’s requirements.
The need for more insight than just a certificate
As a result, more and more organizations are looking for evaluation methods that provide greater insight into actual performance.
After all, a certificate proves that a management system meets predetermined requirements, but it often says little about how an organization performs compared to similar companies in the same industry.
That is precisely where the need for benchmarking and performance comparisons arises.
EcoVadis: Assessment Instead of Auditing
EcoVadis evaluates sustainability management based on information provided by an organization. The questionnaire and criteria are tailored to factors such as the company’s business activities, size, and location. Expert analysts apply standardized scoring guidelines.
The scorecard shows how sustainability management was assessed and how the organization compares to similar companies in the same industry. EcoVadis scorecards are valid for twelve months. A recent scorecard therefore provides a more up-to-date picture.
SMETA: Focus on Transparency
SMETA audits are conducted on-site. Each audit covers labor standards and health and safety. A four-pillar audit also assesses environmental performance and business ethics. Confidential interviews with employees help provide insight into day-to-day operations.
SMETA is not a certification and does not involve a pass/fail assessment. The report contains findings and a Corrective Action Plan. The organization is responsible for follow-up. Sedex members can share the report with customers and other business partners via the platform.
Opportunities and Risks in the Evolving Audit Landscape
Expanding certifications and audits offers clear benefits:
- greater focus on sustainability and corporate social responsibility;
- better risk management;
- greater transparency in international supply chains;
- more objective comparisons between organizations.
At the same time, there are also some points to consider:
- Standards are becoming increasingly extensive and complex;
- specialized auditors are harder to find;
- certifications can become nothing more than an administrative obligation;
- the original goal of continuous improvement can be overshadowed by a focus on compliance.
A certificate should therefore never be an end in itself. The greatest value is realized when organizations actually use the findings to improve processes, performance, and risk management.
At SCAVES, internal audits and nonconformities, among other things, are managed digitally using LeanForms. This makes it easier for auditors to locate documentation and allows them to focus more on improvements during the audit. Read the case study.
The Future of Certifications
Not all certifications are the same. Some systems focus primarily on demonstrating compliance with a standard, while others provide insight into performance, transparency, or benchmarking.
It is therefore becoming increasingly important for organizations to clearly define their objectives in advance. Is the goal to increase customer trust, manage risks, meet supply chain requirements, compare performance, or identify opportunities for improvement?
Those who answer that question first will not only choose the right certification but will also derive real value from the audit process. Ultimately, it’s not about the certificate on the wall, but about the insights that contribute to a better, more sustainable, and future-proof business.
Want to learn more? Get in touch
at
Ready to take the next step in digital transformation? Contact us, and we’ll be happy to help!
Related items
ISO 9001:2026: Change or Real Improvement?
ISO 9001:2026 will be published on September 16, 2026. What changes are being made, and what do they mean for your quality management system?
NIS2 and Dutch SMEs
Cybersecurity has long since ceased to be a matter solely for the IT department. With the enactment of the Cybersecurity Act, digital resilience has explicitly become the responsibility of board members and executive management.
Applying for ISO certification
With ISO certification, organizations demonstrate that business operations meet set standards. This can be important as part of the marketing and sales process.
ISO 27001: Insights and practical tips
The ISO 27001 is a globally recognized standard in the field of information security. This standard describes how to handle information security in a process-oriented way. The ISO 27001 certificate helps you reduce information security risks and prevent incidents.
