The Short Answer Most People Have Never Heard
When businesses come to me asking about ISO certification, one of the most common questions I get is something along the lines of: “Who actually decides what goes into these standards?” It is a fair question. You are being asked to build an entire management system around a document, and yet most businesses have no idea where that document came from or who wrote it.
On this page
The answer is not a single person, a government department, or a corporate committee behind closed doors. ISO standards are written by thousands of technical experts from around the world, working through a structured consensus process that can take years to complete. Understanding how this works matters, because it explains why ISO standards carry so much weight globally and why an ISO standard is not just a piece of paper but a document that reflects genuine industry expertise.
What Is ISO and Who Runs It?
ISO stands for the International Organisation for Standardisation. It is an independent, non-governmental international organisation headquartered in Geneva, Switzerland. ISO itself does not write standards. That is worth repeating. ISO does not write the standards. It provides the framework, the rules, and the infrastructure through which standards are developed. The actual content comes from member bodies and technical experts.
ISO has 169 member bodies as of 2026. Each member body is the national standards organisation that represents its country. In Australia, that body is Standards Australia. In the United Kingdom, it is the British Standards Institution. In the United States, it is the American National Standards Institute. These member bodies participate in the technical work that produces the standards you use in certification.
It is also worth clarifying what ISO is not. ISO is not a regulator. It cannot force any business or government to adopt its standards. Standards become mandatory only when a government or industry body references them in legislation or procurement requirements. Outside of that, adoption is voluntary, though market pressure often makes certification feel anything but optional.
The People Who Actually Write the Standards
Technical Committees
The real work happens inside what ISO calls Technical Committees, commonly abbreviated as TCs. Each Technical Committee is responsible for a specific subject area. For example, ISO Technical Committee 176 is responsible for quality management and quality assurance, which means it oversees standards like ISO 9001. ISO Technical Committee 207 covers environmental management, which includes ISO 14001. ISO Technical Committee 283 covers occupational health and safety management, which produced ISO 45001.
As of 2026, ISO has over 800 Technical Committees and Subcommittees active at any given time. Each one is made up of national delegations, meaning the member bodies from different countries send their own experts to participate. The committee chair is typically a volunteer from one of the participating nations, and the work is coordinated through ISO's Central Secretariat in Geneva.
Subcommittees and Working Groups
Most Technical Committees are further divided into Subcommittees, which handle specific areas within the broader subject. Subcommittees then form Working Groups, which are where the actual drafting happens. A Working Group might have anywhere from a dozen to over a hundred experts sitting around the table, sometimes literally and sometimes virtually.
The experts in these Working Groups are not ISO employees. They are engineers, scientists, quality professionals, academics, government representatives, consumer advocates, and industry specialists who are nominated by their national member body to participate. In many cases, their employer or professional association covers the cost of their participation. These are people who live and breathe the subject matter, which is why the resulting standards tend to reflect real-world practice rather than theoretical ideals.
Who Gets a Seat at the Table?
This is where it gets interesting. Participation in Technical Committees is open to any national member body. Member bodies can participate as either a P-member (participating member, who votes and actively contributes) or an O-member (observer, who follows the work but does not vote). Countries with strong industrial or commercial interests in a given subject area tend to participate actively, while smaller economies often observe.
Within each national delegation, the member body decides who it nominates as its technical experts. In Australia, Standards Australia manages this process and draws on industry, government, academia, and consumer groups. This means that Australian businesses and professionals do have a voice in shaping the standards they are later asked to comply with, though many businesses are unaware of this opportunity.
How a Standard Actually Gets Written
The development process for an ISO standard follows a defined sequence of stages. Understanding these stages helps explain why it takes so long to produce a new standard or revise an existing one, and why the end result tends to be robust and widely accepted.
Stage 1: Proposal
The process begins with a proposal for a new standard or a revision of an existing one. This proposal can come from a national member body, a Technical Committee, or an external organisation with liaison status. The proposal is put to a vote among the P-members of the relevant Technical Committee. If a majority supports it and at least five countries commit to active participation, the work begins.
Stage 2: Preparatory Stage
A Working Group is formed and begins drafting the standard. This is where the technical content is developed. Experts debate requirements, definitions, and scope. They draw on existing national standards, research, industry data, and practical experience. This stage can take anywhere from one to several years depending on the complexity of the subject.
Stage 3: Committee Draft
Once the Working Group has a draft, it is circulated to the full Technical Committee as a Committee Draft. Members review it, submit comments, and the Working Group revises accordingly. There may be multiple rounds of Committee Draft before the text is considered stable enough to move forward.
Stage 4: Draft International Standard
The refined text is then published as a Draft International Standard and opened for a broader public comment period. National member bodies consult with their domestic stakeholders, including businesses, government agencies, and industry groups, and submit consolidated comments back to the Technical Committee. This is the stage where the standard gets its widest scrutiny before publication.
Stage 5: Final Draft and Publication
Comments from the Draft International Standard phase are resolved and the text is finalised. A vote is held among P-members. If the required majority approves it, the document is published as an International Standard. The entire process from initial proposal to publication typically takes three to five years, though some complex standards take longer. ISO standards are reviewed every five years to determine whether they need updating, withdrawal, or continuation.
The Role of National Bodies Like Standards Australia
Standards Australia plays a dual role. It represents Australia's interests within ISO Technical Committees, and it also adapts and publishes standards for the Australian market. When you see a standard prefixed with AS/NZS, it means the standard has been adopted jointly by Australia and New Zealand, sometimes with modifications to reflect local regulatory requirements.
Standards Australia also manages the nomination of Australian technical experts who participate in ISO Working Groups. If you have deep expertise in a particular field and want to contribute to the development of international standards, engaging with Standards Australia is the starting point. Many businesses are surprised to learn this pathway exists.
Understanding the role of bodies like JAS-ANZ in the Australian certification landscape sits alongside this. While Standards Australia is involved in writing and publishing standards, JAS-ANZ is responsible for accrediting the certification bodies that audit businesses against those standards. These are entirely separate functions, and confusing them is one of the most common misunderstandings businesses have when starting their certification journey.
Why This Process Matters for Your Certification
It Explains Why Standards Have Teeth
Because ISO standards are developed through a global consensus process involving hundreds of technical experts across dozens of countries, they carry a level of credibility that no single organisation could produce on its own. When a standard like ISO 9001 requires you to demonstrate top management commitment or conduct internal audits, those requirements exist because practitioners and experts from around the world agreed they were necessary for an effective quality management system. They are not arbitrary rules invented by a committee in Geneva.
It Explains Why Standards Take Time to Update
Businesses sometimes ask why ISO 9001 is not updated more frequently. The answer is that the consensus process is deliberately slow. Speed would compromise the integrity of the process. Every change must be debated, drafted, reviewed, commented on, and voted on by representatives from 169 member bodies. This is why the ISO 9001:2026 revision has been years in the making, with businesses and consultants tracking its progress carefully.
It Explains Why Standards Are Genuinely Applicable Across Industries
The involvement of experts from manufacturing, services, government, healthcare, technology, and other sectors means that standards like ISO 9001 are written to be genuinely applicable across different industries. The high-level structure used across management system standards, known as Annex SL or more recently the Harmonised Structure, was itself developed through this same process to make it easier for organisations to integrate multiple standards. Integrated management systems are now a practical reality for many businesses because of this deliberate design choice made by ISO Technical Committees.
Common Misconceptions Worth Clearing Up
ISO Does Not Certify Businesses
This is probably the most widespread misunderstanding in the market. ISO writes and publishes standards. It does not certify businesses against those standards. Certification is carried out by independent certification bodies, which must themselves be accredited by a recognised accreditation body. In Australia, that accreditation body is JAS-ANZ. The chain of trust runs from ISO through to the accreditation body, then to the certification body, and finally to your business. Each link in that chain has a specific and separate role.
Standards Are Not Free
ISO standards are copyrighted documents. Purchasing a copy of the standard you intend to be certified against is a necessary cost of doing business. ISO sells standards through its website, and Standards Australia sells them locally. The price varies depending on the standard, but most management system standards cost between $200 and $500 Australian dollars for a single-user licence. Some businesses are caught off guard by this cost, but it is a legitimate and unavoidable part of the process.
Industry Bodies Can Contribute Too
ISO grants liaison status to external organisations, including industry associations, United Nations agencies, and other international bodies. This allows them to participate in Technical Committee work without being a national member body. For example, the International Labour Organisation has liaison status on committees related to occupational health and safety. This means the standards that affect your business have often been shaped by the very industry bodies that represent your sector.
What This Means When You Are Choosing a Consultant or Certification Body
Understanding who writes ISO standards gives you a useful filter when evaluating the people who claim expertise in them. A good ISO consultant should be able to explain not just what a clause requires, but why it was written that way and how it connects to real-world business practice. If a consultant cannot explain the intent behind a requirement, they are unlikely to help you build a system that genuinely works rather than one that just passes an audit.
Similarly, when you are selecting a certification body, you want auditors who understand the technical background of the standard they are auditing against. An auditor who treats ISO 9001 as a checklist exercise has missed the point of the entire development process. The standard was written by practitioners, for practitioners, and it should be applied with that spirit in mind.
If you are at the stage of finding qualified consultants or comparing certification bodies, CertBetter makes that process straightforward. You submit one form and receive up to three competing quotes from vetted providers, all at no cost to your business. The platform was built by someone with 14 years of compliance experience, including 7 years of ISO auditing and consulting in Australia, so the vetting process reflects what actually matters in practice.
