Section 2
ISO qualifications: every standard, every level
Choose a standard (rows) and a level (columns). Each marked cell has its own page explaining the qualification, how it is assessed, how to prepare and which UK providers run it.
| Standard | Foundation | Internal auditor | Lead auditor | Implementer | Conversion | Transition |
|---|---|---|---|---|---|---|
| ISO 9001Quality management | 10 | 10 | 9 | 5 | 1 | 5 |
| ISO 14001Environmental management | 6 | 8 | 6 | 4 | 4 | 4 |
| ISO 45001Occupational health and safety | 4 | 5 | 6 | 4 | 4 | – |
| ISO/IEC 27001Information security | 6 | 7 | 8 | 7 | 4 | 2 |
| ISO 22301Business continuity | 6 | 3 | 3 | 5 | 2 | – |
| ISO 50001Energy management | 3 | 3 | 2 | 1 | 1 | – |
| ISO 22000Food safety | 1 | 4 | 2 | – | – | – |
| ISO 13485Medical devices quality | 5 | 5 | 3 | 3 | – | – |
| ISO/IEC 20000-1IT service management | – | – | – | – | 1 | – |
| ISO/IEC 27701Privacy information management | 2 | – | 1 | 2 | – | 1 |
| ISO/IEC 42001Artificial intelligence management | 6 | 3 | 4 | 4 | 1 | – |
| ISO 37001Anti-bribery management | 3 | – | – | – | – | – |
| ISO 19011Auditing management systems (guidance) | – | – | – | – | – | – |
| ISO 31000Risk management (guidance) | 2 | – | – | 2 | – | – |
Qualification page — number = UK courses we list (· = none listed yet). – = no qualification of this type that we list.
2.1 The qualification types at a glance
| Type | What it is for |
|---|---|
| Foundation / requirements | An introduction to a standard: what it requires, the vocabulary and how the clauses fit together. Usually one or two days, with a short test or none. The usual first step, and often a recommended prerequisite for auditor courses. |
| Internal auditor | Teaches you to plan, carry out, report and follow up internal (first-party) audits of your own organisation’s management system. Usually two days, assessed by continuous assessment and a short test. |
| Lead auditor | The full auditor course: how to plan, lead and report first-, second- and third-party audits of a complete management system. Usually 4–5 days (about 40 hours) with continuous assessment and an exam. The qualification most auditor job adverts ask for. |
| Implementer / lead implementer | How to design, build and run a management system that meets a standard — from gap analysis and scoping to documentation, risk assessment, internal audit and certification readiness. Shorter “implementation” courses take 1–2 days; lead implementer courses 3–5… |
| Auditor conversion | For people who already hold a lead auditor certificate in one standard and want to audit another — for example a quality lead auditor moving into ISO 14001 or ISO 27001. About three days, with an exam. |
| Transition (new edition) | Short courses explaining what changed when a standard is revised — such as ISO 9001:2026 and ISO 14001:2026 — and how to audit or implement the new requirements. From a few hours to two days. |
2.2 Which one do I need?
- You need to understand a standard (new role, project team, manager): start with a foundation or requirements course.
- You will audit your own organisation: an internal auditor course is usually enough.
- You will audit suppliers, lead audit teams or want to work for a certification body: a lead auditor course — the one most often asked for in job adverts for auditors.
- You will build or run the management system: an implementation or lead implementer course.
- You already hold a lead auditor certificate in another standard: look at a conversion course; if your standard has a new edition, a transition course.