At Normec, we are seeing certification play an increasingly important role in tenders. Clients may, for example, require an ISO 9001 certificate, a specific level on the Safety Culture Ladder, or another industry- or management-system certificate. For organizations submitting bids, such a requirement can be decisive: without the right certificate, the right scope, or the right expiration date, a bid that is strong in substance may still be rejected.
Our advice, therefore, is not to wait until a tender is published to consider certification. Those who know in advance what requirements are standard in their own market and what certification entails in practice can plan more effectively and avoid stress when a promising tender comes along.
By requiring certification, a client aims to gain greater confidence in advance regarding how an organization operates. A certificate demonstrates that an independent certification body, such as Normec, has assessed whether the organization meets the requirements of a standard or scheme.
This does not mean that a certificate eliminates every risk or that all certified organizations operate in the same way. It does, however, provide an objective and recognizable framework. Depending on the certificate, this may pertain to, for example, quality management, safety, environmental management, professional competence, or the control of specific processes.
We believe that certification should offer more than just access to a tender. When used effectively, it helps an organization clarify agreements, manage risks more consciously, demonstrate improvements, and build trust with customers, employees, and other stakeholders. A certificate thus demonstrates that an organization is systematically working toward improvement.
In our discussions with organizations, we’ve noticed that the precise wording in tender documents is sometimes underestimated. Simply recognizing the name of a standard isn’t enough. Be sure to check the following points:
The required certificate: Which standard, regulation, or certification scheme is specified? Is a specific version, variant, or level required?
The scope: Do the activities, locations, and organizational units covered by the contract actuallyfall within the scope of the certificate?
The timing of the certificate Must the certificate already be valid at the time of bid submission, only upon award, or at the start of the contract?
Validity Will the certificateremain valid throughout the relevant period, and are any recertification or follow-up audits scheduled in a timely manner?
Additional conditions: Is certification under accreditation required, are equivalent forms of evidence permitted, or are there requirements for a branch, consortium, or subcontractor?
A common misconception we still encounter is that certification consists primarily of drafting a manual and a set of procedures. Documents may be necessary, but during our audits we focus explicitly on actual practices. An organization must be able to demonstrate that policies have been implemented, that employees know what is expected of them, and that processes are followed, evaluated, and improved where necessary.
ISO 9001 centers on a functioning quality management system. The Safety Culture Ladder emphasizes safety awareness, attitude, and behavior. Other certification schemes have their own specific requirements. In all cases, our auditors assess an existing and demonstrable way of working. The certificate is therefore the result of preparation and implementation, not the starting point for them. Also keep in mind that some schemes have an implementation period. For example, for VCA, it must be demonstrated that the system has been in use for at least three months.
Don’t just look at tenders that are currently open, but also at anticipated contracts, framework agreements, and requirements commonly set in your industry. Make certification part of your commercial planning.
Not every certification provides the same value for every organization. Consider the target market, the type of contract, your own activities, and the requirements that clients actually set. This way, you can prevent certification from becoming an end in itself.
Conduct a gap analysis in a timely manner. What is already well organized, what is happening in practice but is not yet sufficiently demonstrable, and which areas still need to be established or improved?
Ensure that processes aren’t just on paper. Clarify responsibilities, involve employees, and gather sufficient evidence that the procedure works in practice. If you need support with this, you can engage a specialized consulting firm.
Plan the internal controls associated with the relevant procedure. For management system certification, these may include, for example, internal audits and a management review. Demonstrably address any findings before the certification audit takes place.
To carefully evaluate an application, we need information in advance about, among other things, the organization, its activities, locations, and desired scope. Based on this information, we determine the audit duration and schedule auditors with the appropriate expertise. Also, allow time for reporting, resolving any nonconformities, and the independent certification decision.
Certification may sometimes be possible on short notice, but only if the organization is, in fact, already ready for certification. The required procedures must be established and implemented, the necessary evidence must be available, and the right people must be present during the audit. We must also have sufficient capacity, and there must be time to carefully address any nonconformities. We work with you to determine what is realistically achievable within these conditions.
Anyone who begins setting up the organization just a few weeks before the bidding deadline therefore runs a serious risk. An expedited application does not alter the substance or independence of the certification process. Therefore, we can never guarantee in advance that a certificate will be obtained or that this will be achieved by a specific deadline.
As a certification body, we must and want to remain independent. That is why we do not design the management system or the required procedures for the organization. What we do, however, is clearly explain how our certification process works, what information we need for the application, what steps are involved, and what timeline is realistic. Our auditors translate the standard into understandable questions and assess actual practices expertly and carefully, without taking over the organization’s responsibility. In this way, we independently highlight what is demonstrably in order and where the organization needs to remain vigilant.
That is precisely why it pays to contact Normec early on. Not to reserve a certificate in advance—because that’s not possible—but to know where you stand in a timely manner. We are happy to make the process as transparent and practical as possible, so that scope, scheduling, and capacity don’t become issues only at the very end.
Don’t treat certification as a rushed job or a mandatory formality at the end of a tender. Identify relevant tender requirements in a timely manner, keep the scope and validity of existing certificates up to date, and set aside sufficient time for preparation and assessment. Then certification will not only support your bid but also the development of your organization.
If so, contact Normec as early as possible. We’d be happy to explain our certification process, what information is required, and whether your desired timeline is realistic.
Certification, for some a compulsory number, for others a strategic choice. But what exactly is certification? Why does it exist, what forms are there and what concrete benefits does it give your organization?
The changes in ViA 2026 have a direct impact on contractors, suppliers, consultancies and clients within the construction sector. In this article you will read what the most important changes are and what they mean for your organization.
Starting July 1, 2026, an important change will take effect for many small and medium-sized enterprises (SMEs) operating in the construction, infrastructure, engineering, and industrial sectors. Starting then, VCA-MAX will be recognized as supplementary evidence of safety culture within the updated Safety in Procurement Guidelines (ViA). For organizations with up to 250 employees, this offers new opportunities to meet the requirements related to safety culture. But what exactly is changing? For which organizations is this relevant? And when does SCL certification remain the right choice?
On September 18, 2025, the Stichting Samenwerken Voor Veiligheid (SSVV) officially launched SCC-MAX: a renewed step in safe and aware working. This new scheme combines the familiar VCA certificate with the VCA Module Behavior (VCA-MG), so that the focus is no longer only on rules and systems, but also on attitude, awareness and behavior.
Moniek Steegers has been working at Normec Certification Institute (NCI) for over two years as an ISO auditor for ISO 27001 and ISO 9001. Prior to that, she worked at KPMG and PricewaterhouseCoopers as an IT auditor and consultant, as well as a compliance and information risk officer at NXP and Canon. Given her background, she understands well why ISO 27001 certification is an appropriate way for organizations to have their information security management systems independently assessed. However, it is not necessarily sufficient to also comply with the European NIS 2 Directive, for which Dutch legislation will soon apply as well, as she explains in this interview.
Stay up to date on the latest news, exclusive updates, and valuable insights.
