A few years ago, a food manufacturing company in Sydney was prepping for ISO 22000 certification. They hired a consultant with a polished profile and solid ISO credentials, but he had zero experience in food safety or manufacturing.
On this page
He delivered templates that referenced software access control, misunderstood their HACCP process, and created documentation that failed the pre-audit review. The actual certification audit turned into a nightmare. Nonconformities piled up, costs doubled, and morale crashed. It took another six months and a second consultant (this time, with food industry expertise) to clean up the mess.
That’s the risk you take when you hire a consultant who knows ISO, but not your industry.
At CertBetter, we hear stories like this every week. Businesses spend good money on consultants who don’t speak their language, don’t understand their processes, and don’t prep them for audit-day reality. The result? Frustrated teams, delayed certification, and sometimes, serious compliance gaps.
So let’s break down why industry expertise is non-negotiable for ISO consultants and how to make sure you’re hiring the right fit.
1. ISO Isn’t One-Size-Fits-All
ISO standards are technically universal. ISO 9001 applies to everything from dental clinics to drone manufacturers. ISO 27001 can cover both hospitals and fintech startups. But here’s the catch: how you implement those standards changes drastically depends on your industry.
For instance, let’s take risk management. Risks might include data breaches, downtime, and vendor failures in an IT firm. But for a chemical manufacturer, risks are more about physical hazards, environmental spills, and regulatory fines.
Now, imagine using the same risk assessment method for both. It doesn’t work. A consultant without industry context might create a plan that sounds great on paper but completely misses the real threats you face.
2. You Can’t Google What a Factory Floor Feels Like
Real-world operations are messy. There are bottlenecks, shortcuts, workarounds, legacy systems, and people doing 10 things at once. A good ISO consultant can walk through your operation and spot instantly what’s working and what’s not. But only if they’ve seen it before.
If your consultant has only worked with call centers, they won’t know how to read a production line schedule. If they’ve never set foot in a warehouse, they might miss serious safety issues during your gap analysis.
ISO success often comes down to the details, like how materials are labeled, how records are logged,and how downtime is tracked. That level of insight doesn’t come from textbooks. It comes from experience.
3. The Audit-Day Reality Check — When Consultants Miss the Mark
Let’s talk about the moment of truth, audit day. You’ve spent months building your management system. Your teams have logged data, cleaned up records, and followed the ISO consultant’s advice to the letter. Now the certification body shows up and they’re asking questions your consultant never prepared you for.
- “How do you monitor external suppliers with high risk profiles?”
- “Where are the calibration records for this testing equipment?”
- “How does this procedure reflect current regulatory updates in your sector?”
If your ISO consultant doesn’t have deep industry knowledge, these questions come as a surprise to them and to you. And that’s a problem.
4. Auditors Expect Sector-Specific Context
Contrary to popular belief, auditors don’t just check if you “follow the ISO standard.” They look for alignment with industry norms, regulatory expectations, and actual business risks.
For example:
- A construction firm will be expected to demonstrate controls around subcontractors, safety briefings, and site inspections.
- A healthcare provider must show evidence of data privacy, patient safety, and infection control procedures.
- A logistics company will be scrutinized for inventory tracking, vehicle maintenance, and delivery traceability.
If your consultant has only worked in retail or admin-heavy services, they may completely miss these sector-specific issues. That leaves you unprepared and exposed.
5. The Cost of Getting It Wrong
Let’s say your audit doesn’t go well. You receive a handful of nonconformities. That means more time, more documents, and follow-up reviews, often costing thousands in added consultant fees and audit expenses.
You may also fail the audit entirely. The certification body recommends a full re-audit, and your project timeline is blown apart. You may also lose contracts or clients who were counting on that ISO certificate.
6. The Efficiency Factor: Why Industry Experts Get You Certified Faster
Here’s a hidden benefit that most businesses don’t realize: consultants with industry expertise get things done faster.
Why? Because they already know:
- What documentation is standard in your sector
- Which compliance risks to flag first
- What audit findings are most common
- How to tailor controls that work without disrupting operations
Let’s say you're in the oil and gas industry. A seasoned ISO 14001 consultant who's worked with drilling operators will know exactly how to build an environmental aspect-impact register for your field activities. No guesswork. No generic templates. That saves time, builds trust with your team, and shortens the path to successful certification.
7. When “Best Practice” Becomes a Liability
Many ISO consultants rely on what's worked for past clients. That’s usually a good thing, until they try to apply a solution from a tech startup to a construction site. Here’s what that can look like:
- Wrong controls: Recommending cloud security controls for a manufacturing plant where most data is paper-based.
- Overcomplication: Introducing unnecessary processes (like advanced digital access logs) that overwhelm your staff and aren’t relevant.
- Missing pieces: Failing to address critical risks like water contamination in beverage processing because they’ve never worked in that space before.
How to Vet an ISO Consultant for Industry Expertise
Here’s the truth: most consultants say they’ve worked “across industries.” But you don’t want broad. You want relevant.
Ask These 5 Questions:
- Can you name 3 clients in my sector you've worked with?
Push for specifics, not vague mentions like “manufacturing.” - What were the biggest risks or challenges in those projects?
Good consultants will recall clear examples. - How did you tailor ISO requirements to fit those operations?
Look for signs of creativity and depth. - What audit findings are common in my industry?
Industry-aware consultants will know patterns and how to avoid them. - Have you worked with certification bodies familiar with my field?
Bonus points if they’ve partnered with CBs that understand your niche.
Conclusion: Choose Industry Expertise or Pay for ISO Mistakes Later
ISO certification can unlock growth, reduce risk, and strengthen operations, but only if your ISO system fits your business. And for that to happen, your consultant needs to do more than understand ISO. They need to understand you.
They should speak your industry’s language. Know its risks. Recognize its compliance challenges. And help you build systems that actually work on the ground.
We built CertBetter to solve these issues. Whether you’re in food safety, construction, logistics, SaaS, or any niche industry, we help you find consultants who get it, not just say they do.
So the next time you're evaluating an ISO expert, don’t just ask “Do you know ISO?”
Ask: “Do you know what ISO means in my world?”
