Buyer’s guide · Pakistan
How to choose an ISO certification body in Pakistan
Who accredits the body matters more than who sells the certificate. Here is what the different kinds of accreditation mean, how to check one, and which your buyer is likely to need.
Updated 26 October 2026
The short answer
In Pakistan, ISO 9001 and other management-system certificates are issued by certification bodies accredited under ISO/IEC 17021-1. They fall into three groups: bodies accredited by PNAC, Pakistan’s national accreditation body; bodies accredited by a foreign accreditation body that, like PNAC, signs the Global ACI MRA (formerly the IAF MLA); and bodies accredited outside that arrangement. Choose the group your buyer, tender or regulator asks for, then check the body’s accreditation, scope and public certificate register before you sign.
The three kinds of accreditation you will meet
Accredited by PNAC
Pakistan National Accreditation Council — Pakistan’s national accreditation body.
PNAC is a signatory to the Global ACI MRA (formerly the IAF MLA) for management-system scopes including ISO 9001 and ISO 14001. Its directory of accredited certification bodies is published on pnac.gov.pk.
Suits: Buyers, tenders or regulators that ask for PNAC accreditation by name, or for MRA-recognized certification.
Accredited by a foreign MRA signatory
International certification bodies accredited by, for example, UKAS (UK) or ANAB (USA), operating in Pakistan directly or through local offices.
Their accreditation bodies are also Global ACI MRA signatories, so the certificates carry the same cross-border recognition. Many can be checked on IAF CertSearch.
Suits: Export buyers and multinational supply chains that ask for “IAF-accredited” or MRA-recognized certification.
Accredited outside the MRA
Certification bodies whose accreditation body is not a Global ACI MRA signatory — CCI is one: accredited by International Accreditation Registrar (IAR), USA, No. IAR-112.
The body is still independently assessed against ISO/IEC 17021-1, but the certificate does not carry MRA recognition.
Suits: Organizations whose buyers, tenders or regulators do not require MRA-recognized certification.
A fourth group is best avoided: “certificates” issued with no accreditation at all, often promised in days without an audit. They cannot be verified with any accreditation body and rarely survive a buyer’s check.
Six checks before you choose
- 1
Who accredits the certification body?
Ask for the accreditation body’s name and the accreditation number, then look them up on the accreditation body’s own website — not just on the certification body’s.
- 2
Does the accreditation cover your standard and sector?
Accreditation is granted for specific standards and technical sectors. Ask for the scope of accreditation and check that ISO 9001 (or 14001, 45001, 27001) and your industry are on it.
- 3
Which legal entity issues the certificate?
The name on the certificate should be the accredited entity. If a local office or agent sells the service, ask who actually holds the accreditation and signs the certification agreement.
- 4
Can a buyer verify the certificate online?
A real certification body keeps a public register where anyone can check a certificate’s number, scope and current status. If there is nothing to check, the certificate is hard to defend.
- 5
Is certification kept separate from consultancy?
ISO/IEC 17021-1 prohibits a certification body from consulting on the management system it certifies. A body that offers to write your documents and then certify them is a warning sign.
- 6
Is the timeline realistic?
Certification involves a Stage 1 and a Stage 2 audit and an independent certification decision, with audit time set under IAF MD 5. A certificate promised in a few days, with no audit, is not accredited certification.
Which one do you need?
| If the requirement says… | Choose a certification body… |
|---|---|
| “PNAC-accredited” | on PNAC’s directory of accredited certification bodies |
| “IAF-accredited”, “IAF MLA” or “MRA-recognized” | accredited by any Global ACI MRA signatory — PNAC, UKAS, ANAB and others |
| “accredited ISO 9001 certificate”, with no accreditation body named | properly accredited under ISO/IEC 17021-1 — ask the buyer if they have a preference before you sign |
| nothing about accreditation | any accredited certification body with a verifiable certificate register |
Where CCI fits
Company Certification International (CCI) is accredited by International Accreditation Registrar (IAR), USA — accreditation No. IAR-112 — to ISO/IEC 17021-1 for management-system certification (ISO 9001, 14001, 45001, 27001 and others). IAR is an independent accreditation body and is not a signatory to the Global ACI MRA (formerly the IAF MLA), and CCI is not on PNAC’s directory.
CCI certification (Option B) suits organizations whose buyers do not require MRA-recognized certification. Where they do, CCI offers Option A: certification through an accredited partner certification body whose accreditation body is a Global ACI MRA signatory. CCI quotes and coordinates; the partner body makes the certification decision and issues the certificate in its own name.
CCI does not provide consultancy, documentation drafting or implementation support, and every certificate it issues is listed on a public register.
Frequently asked questions
Which accreditation does my ISO certificate need in Pakistan?
The one your buyer, tender or regulator asks for. If a requirement names PNAC, choose a PNAC-accredited certification body. If it asks for “IAF-accredited” or MRA-recognized certification, choose a body accredited by any Global ACI MRA signatory (PNAC, UKAS, ANAB and others). If there is no stated requirement, any certification body properly accredited under ISO/IEC 17021-1 can be used. When in doubt, read the exact wording of the requirement before choosing.
What does “IAF-accredited” mean now?
It means certification by a body whose accreditation body is a signatory to the IAF Multilateral Recognition Arrangement. In January 2026 IAF merged with ILAC into Global Accreditation Cooperation (Global ACI), and the IAF MLA now operates as the Global ACI MRA. IAF never certified companies itself: it recognized accreditation bodies, which accredit certification bodies, which certify organizations.
How can I verify an ISO certificate issued in Pakistan?
Check it on the issuing certification body’s public register, confirm that body’s accreditation on the accreditation body’s website, and for MRA-recognized certificates search IAF CertSearch. CCI certificates can be checked on companycertification.com/verify by certificate number or company name.
Is Company Certification International (CCI) on the PNAC directory?
No. CCI is accredited by International Accreditation Registrar (IAR), USA — accreditation No. IAR-112 — which is an independent accreditation body and is not a signatory to the Global ACI MRA (formerly the IAF MLA). Where a buyer or tender requires MRA-recognized certification, CCI offers Option A, delivered through an accredited partner certification body whose accreditation body is an MRA signatory and which issues the certificate in its own name.
How long does ISO 9001 certification take in Pakistan?
Typically 6–8 weeks from application to certification decision for a single standard, subject to the organization’s readiness — the management system needs to be in place and operating before the Stage 2 audit.
Can the certification body also help us prepare?
Not under accredited certification rules: a certification body must not provide consultancy on the management system it certifies. Preparation is the organization’s own work, done in-house or with any consultant it chooses, and that choice must have no bearing on the certification decision.
Not sure what your buyer requires?
Send us the wording from the purchase order, tender or questionnaire. We will tell you which accreditation it calls for — even if the answer is a certification body other than us.