Personnel Certification – Professional Competence, Independently Assessed

What is personnel certification?

In personnel certification, an independent body assesses whether an individual meets the competence requirements of a defined certification scheme and confirms this with a personal certificate. The scheme sets out the knowledge, skills and professional experience required, how candidates are assessed, how long the certificate remains valid and how it is renewed.

Unlike management system certification, the focus is not an organisation but a person. The certificate is issued in the individual's name and stays with them when they change employer. It shows customers, employers and clients that competence has not merely been claimed but checked by a third party.

The word “certificate” is not protected, though. A personal certificate carries weight because of what stands behind it: a body that assesses independently of any training, a scheme with transparent requirements, a fair examination, and a limited validity that has to be renewed regularly.

Personal certificate, training certificate, certificate of attendance

Three very different documents are all commonly called a “certificate”. Anyone who wants to prove – or check – a qualification should tell them apart:

• Certificate of attendance: confirms that someone attended a course, and says nothing about what they learned.
• Training certificate with final exam: confirms that someone passed a course examination, usually set and marked by the training provider itself.
• Personal certificate: confirms after an independent assessment that someone meets the requirements of a defined scheme. It is time-limited and is only renewed if competence continues to be demonstrated.

Who it is for: auditors, health and safety professionals, data protection officers

Management system auditors – for quality under ISO 9001 or environmental management under ISO 14001, for example – need more than subject knowledge: they must plan audits, evaluate evidence and report findings objectively. ISO 19011, republished in 2026, gives guidance on audit principles and on evaluating the competence of auditors. A personal certificate makes that competence verifiable for internal and external auditors alike.

For occupational health and safety professionals, national law often defines the qualification needed to be appointed to the role. A personal certificate does not replace such a statutory qualification. It can, however, show that someone meets further defined requirements – in occupational health and safety management under ISO 45001, for instance – and make that competence visible to employers and clients.

Under Article 37(5) GDPR, data protection officers are designated on the basis of their professional qualities and, in particular, their expert knowledge of data protection law and practice. The GDPR does not require certification. A personal certificate is therefore not mandatory, but it is clear, traceable evidence of that expertise – for internal and external data protection officers alike.

ISO/IEC 17024: the international framework for certifying persons

ISO/IEC 17024 sets out general requirements for bodies operating certification of persons. Its third edition was published in March 2026 and replaced the 2012 version. New elements include requirements for the use of artificial intelligence in certification processes – with human oversight and validated outputs – a structure aligned with other conformity assessment standards, and an annex explaining how schemes, applications, examinations and certification fit together.

The standard is addressed to the certifying body, not to the certified person. Its core principles still make a good yardstick for any personal certificate: impartiality, meaning that conflicts of interest are identified and managed – for example if training and examination came from the same source; schemes with defined competence requirements; valid and fair assessment methods; confidentiality; and a limited validity with a defined recertification process.

If a tender, an employer or a regulation asks for a particular kind of certificate, make sure you know the exact requirement in advance. During our analysis we discuss with you which scheme suits your purpose and what it requires.

Requirements and assessment

The prerequisites are set by each certification scheme. Typical examples are a relevant vocational or academic qualification, a period of relevant work experience and specialist training; for auditors, practical audit experience is often added. Eligibility is checked against documentary evidence before the assessment.

The assessment itself evaluates whether the candidate meets the requirements in practice. Depending on the scheme and field, it may involve written exams, case studies, practical tasks or a professional interview, often in combination. What matters is that the assessment matches the competence profile: someone who is to lead audits must show they can actually do so – factual knowledge alone is not enough.

Validity, maintenance and recertification

Personal certificates are not valid indefinitely; certificates are typically valid for three years. To keep its value, the holder must show during that period that they remain active in the field and keep their knowledge up to date – for example through evidence of professional practice and continuing professional development. The exact requirements are set by the scheme.

At the end of the validity period comes recertification: competence is evaluated again, depending on the scheme through a new assessment or on the basis of the evidence collected. Where standards or legislation in the field change – as in 2026 with new editions of ISO 9001, ISO 14001 and ISO 19011 – the new knowledge is part of it.

Benefits for professionals and organisations

For professionals, a personal certificate is portable proof of competence: it belongs to the individual, is independent of the employer and adds credibility to applications, bids and client conversations. For self-employed auditors, consultants and external data protection officers, independently assessed evidence is often an advantage in a competitive market.

For organisations, certifying their staff shows that key tasks are in competent hands. It also helps within their own management system: ISO management system standards require, in clause 7, that the competence of people whose work affects performance is ensured and that documented evidence of it is retained. A personal certificate is clear, third-party evidence for exactly that. Costs depend on the scheme, the assessment format and the number of people; personnel certification is not part of the annual packages for management systems, and you receive an individual quote after we have analysed your requirements.

The Certification Process

1. 01

   Enquiry

   Tell us, without obligation, who is to be certified, in which field, and what the certificate is needed for.

2. 02

   Analysis and quote

   We clarify the appropriate scheme, eligibility requirements and assessment format and prepare an individual quote.

3. 03

   Preparation (optional)

   If you wish, an initial review shows whether evidence and experience are sufficient and where gaps remain before the assessment.

4. 04

   Assessment

   Competence is assessed according to the defined scheme – depending on the scheme in writing, through practical tasks or an interview, on site or remotely.

5. 05

   Certificate

   Once the assessment has been passed, we issue the personal certificate – in the individual's name, time-limited, typically for three years.

6. 06

   Maintenance

   During the validity period you provide evidence of ongoing practice and professional development as the scheme requires, followed by recertification.

Frequently asked questions