Agent Index by Heritage Services
Submit / Claim
AI
Agent Index by Heritage Services
theagentindex.io/guides/iso-27001-certification-bodies/ · Last reviewed 24 Oct 2026

Agent Index by Heritage Services · theagentindex.io/guides/iso-27001-certification-bodies/ · Not legal or audit advice · CC BY 4.0
Home / Guides / ISO 27001 certification bodies

Free guide · ISO 27001 · certification bodies · 24 Oct 2026

ISO 27001 certification bodies by country: how to check accreditation and shortlist one

How to check that an ISO/IEC 27001 certification body is accredited, which national accreditation body to look up, and 185 verified certification bodies across 10 countries in this directory. Not a ranking.

Last reviewed 24 Oct 2026Auditors dataset v0.1.32
General information, not legal advice. Confirm scope with your counsel or auditor. A directory listing is a set of checked facts, not an endorsement. Confirm current accreditation on the named national registry and check the certificate itself before engaging a firm.

Accreditation after IAF

“IAF ceased operations on 01 January 2026. This website is a legacy site maintained for archival/reference purposes only.” [1]

“Global ACI has assumed the former roles of the International Accreditation Forum (IAF) and the International Laboratory Accreditation Cooperation (ILAC).” [2]

Global ACI describes the “Global ACI Multilateral Recognition Arrangement (MRA)”, which “facilitat[es] the international acceptance of accredited conformity assessment results”. [2]

IAF Certification Validation - IAF CertSearch is a place to validate certificates. [3]

Accredited vs not accredited

This directory lists firms found on the named national accreditation registries. Buyers should check the certificate itself on IAF CertSearch. This page makes no legal claim about any certificate, accreditation or engagement.

What this directory lists

Agent Index lists 185 organisations whose frameworks field contains “ISO 27001”. Country sections below are computed at build and shown only where at least three Verified firms have that headquarters country. [4]

Related: auditors directory · PCI DSS QSA companies · HITRUST External Assessors · EU AI Act timeline and ISO/IEC 42001 / EN 18286 · Get matched.

Countries

Headquarters counts below are computed at build from ISO 27001-tagged listings. A country page exists only where at least three Verified firms match both the framework and an office in that country. Not a ranking.

United States — 39 firms (headquarters)

ISO 27001 auditors in the United States. Most firms in this country use ANAB Management Systems CB Directory (ANAB).

Largest published state or city pages: California (6) · Florida (6) · Georgia (5).

Germany — 30 firms (headquarters)

ISO 27001 auditors in Germany. Most firms in this country use DAkkS database of accredited bodies - certification body for management systems (DAkkS).

Largest published state or city pages: North Rhine-Westphalia, Germany (8) · Hesse, Germany (6) · Baden-Württemberg, Germany (3).

Japan — 28 firms (headquarters)

ISO 27001 auditors in Japan. Most firms in this country use ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies (ISMS-AC).

Largest published state or city pages: Tokyo city, Japan (20) · Tokyo prefecture, Japan (20) · Kanagawa, Japan (5).

United Kingdom — 26 firms (headquarters)

ISO 27001 auditors in the United Kingdom. Most firms in this country use UKAS - accredited certification bodies (UKAS).

Largest published state or city pages: England, United Kingdom (29) · London, England (7) · Manchester, England (4).

Netherlands — 17 firms (headquarters)

ISO 27001 auditors in the Netherlands. Most firms in this country use RvA (Dutch Accreditation Council) register - management system certification bodies (RvA).

Largest published state or city pages: South Holland, Netherlands (8) · Gelderland, Netherlands (3) · North Brabant, Netherlands (3).

Australia — 16 firms (headquarters)

ISO 27001 auditors in Australia. Most firms in this country use JAS-ANZ Register - accredited certification bodies (JAS-ANZ).

Largest published state or city pages: Victoria, Australia (10) · New South Wales, Australia (9) · Melbourne, Victoria (7).

India — 10 firms (headquarters)

ISO 27001 auditors in India. Most firms in this country use NABCB accredited management system certification bodies (NABCB).

Largest published state or city pages: Maharashtra, India (7) · Mumbai, Maharashtra (6).

Brazil — 6 firms (headquarters)

ISO 27001 auditors in Brazil. Most firms in this country use Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS) (Inmetro/Cgcre).

Largest published state or city pages: São Paulo state, Brazil (3).

Canada — 4 firms (headquarters)

ISO 27001 auditors in Canada. Most firms in this country use Standards Council of Canada (SCC) directory of accredited organizations (SCC).

Largest published state or city pages: Ontario, Canada (3).

Ireland — 3 firms (headquarters)

ISO 27001 auditors in Ireland. Most firms in this country use INAB (Irish National Accreditation Board) directory - Management Systems Certification (INAB).

Get matched

If you want a shortlist of listed firms for ISO 27001 or another published framework, use Get matched or the form below. We store the request for review; we do not email firms automatically.

Get matched

Get matched with verified auditors

We'll review your request; no automatic emails. Introductions start later. This does not send a message to any firm and does not include prices. Not a ranking.

Framework(s) (select all that apply)

FAQ

How do I check an ISO 27001 certification body is accredited?

Look the legal name up on the national accreditation registry named for that country on this page, then check the certificate itself on IAF CertSearch. A directory listing is a set of checked facts, not an endorsement. IAF CertSearch.

What replaced the IAF?

“IAF ceased operations on 01 January 2026. This website is a legacy site maintained for archival/reference purposes only.” “Global ACI has assumed the former roles of the International Accreditation Forum (IAF) and the International Laboratory Accreditation Cooperation (ILAC).”

Which countries have the most accredited ISO 27001 certification bodies in this directory?

Headquarters counts in this directory (countries with 3 or more verified ISO 27001 firms; not a ranking): United States 39, Germany 30, Japan 28, United Kingdom 26, Netherlands 17, Australia 16, India 10, Brazil 6, Canada 4, Ireland 3.

Which of these also do ISO 42001 or ISO 27701?

30 of the 185 ISO 27001-tagged firms also carry ISO 42001, and 45 also carry ISO 27701, from stored framework tags.

How do I get matched with an ISO 27001 auditor?

Use Get matched or the form on this page. We store the request for review; we do not email firms automatically. Get matched.

Get updates by email

Subscribe to the Brief

Weekly, free, unsubscribe anytime.

We use your email only to send the newsletter. See our privacy policy.

Sources

  1. IAF, About the IAF MLA, checked 24 Oct 2026. https://iaf.nu/en/about-iaf-mla/
  2. Global ACI home, checked 24 Oct 2026. https://global-aci.org/en/home/
  3. IAF Certification Validation - IAF CertSearch, checked 24 Oct 2026. https://www.iafcertsearch.org/
  4. Agent Index auditors dataset v0.1.32, generated 2026-10-27. https://theagentindex.io/auditors.json

Prepared by Agent Index (Heritage Services). Last reviewed 24 Oct 2026. General information, not legal advice. Confirm scope with your counsel or auditor. Licensed CC BY 4.0.