Certifications & Standards
Understand certifications and standards with confidence
Certificates, vendor status and standards are different forms of evidence. What matters is the issuing body, audited scope, validity and relevance to the specific service being requested.
What a credential actually demonstrates
Certification
Independent certification relates to a defined scope and audit date. Certificate number, issuer, standard version, sites, exclusions and validity must be read together.
Vendor competence
Partner levels and personal vendor certificates may demonstrate product knowledge, but are not general proof of quality or security. A project requires available people with current relevant expertise.
Standards and practices
Alignment with ISO, BSI, ITIL, Scrum or other frameworks differs from formal certification. We distinguish clearly between a certificate, a working method and a reference.
Project-specific review
Customer requirements may exceed available evidence. Privacy, classified information, sector rules, place of delivery, subcontractors and personal credentials are assessed for each engagement.
Decision criteria at a glance
| Criterion | Assessment question | Evidence |
|---|---|---|
| Authenticity | Who assessed which subject under which procedure? | Issuer, number, scope, version and basis of assessment. |
| Currency | Is the credential valid and relevant at the time of delivery? | Expiry, surveillance status and covered legal entity. |
| Fit | Does the scope cover the offered service and delivery location? | Comparison with contract, project team and supply chain. |
From assessment to reliable operations
Capture requirements
Contractual, regulatory and technical evidence obligations are recorded separately.
Verify evidence
Source, validity, scope, entity and limitations are checked.
Assess gaps
Missing coverage becomes a documented risk, compensating control or condition.
Maintain currency
Owners, review dates and replacement of expired documents enter routine governance.
Concrete outcomes
- Evidence matrix for each customer requirement
- Verified documents with scope and validity
- Clear distinction between certificate, partnership and self-declaration
- Assessment of remaining gaps and controls
- Owners for maintenance and controlled disclosure
Important limitation
This page only presents credentials as current when issuer, scope and validity can be substantiated. Certification does not replace project-specific assessment and must not be generalised beyond its documented scope.
Clarify an evidence requirement
Tell us the standard, required scope, service and contractual context. We will identify the current credential or additional control that is appropriate.