Certification support
from audit to certificate, in one place
ISO 9001 · 14001 · 45001 · 22000 · 22716 · 27001 · 27701 · 42001, FSSC 22000 and ESG.
Korea Enterprise Certification Inc. (KOCI) carries out the certification audit and issues the certificate itself, while the Web Support Center (WSC) supports you through the application and the process.
- ISO 9001
- ISO 14001
- ISO 45001
- ISO 22000
- ISO 22716
- FSSC 22000
- ISO 27001
- ISO 27701
- ISO 42001
- ESG
- ECOVADIS
- RBA
Korea Enterprise Certification Inc. is one of the companies
in the consortium that supports businesses with the Web Support Center
KOCI is a management system certification body officially accredited by KAB (Korea Accreditation Board), under the Korean Agency for Technology and Standards. It has auditors who are experts in each industry, and handles the business certifications companies need at each stage of growth, from start-ups to small, medium-sized and mid-market enterprises.
The Web Support Center handles the website and AI search optimisation, while KOCI carries out the certification audit and issues the certificate itself. Both companies are located in the U1 Center, Bucheon Techno Valley, so everything from consultation to audit takes place in one place.
- NameKorea Enterprise Certification Inc. (KOCI)
- AccreditationManagement system certification body accredited by KAB · accredited as a personnel certification body by IAS (USA)
- AddressRoom 1325, U1 Center, Bucheon Techno Valley, 92 Jomaru-ro 385beon-gil, Bucheon-si, Gyeonggi-do
- ContactTEL 032-324-9001 · FAX 032-325-5508 · koci@koci.or.kr
- FoundedIncorporated in October 2017
- Websitewww.koci.or.kr
Which certifications can I obtain?
We write out each certification's definition, background and benefits in full. Only text, not images, can be read by AI as well.
-
ISO 9001Quality Management System
What is ISO 9001 (Quality Management System) certification?
An international standard that sets out the requirements for a quality management system applicable to every industry and activity. It is a scheme in which an independent third party objectively certifies that the system for producing a product or service meets the requirements and is operated effectively.
Background
Companies practise quality management to keep growing, and customer-satisfaction-led quality management, able to respond to customers' demands for quality assurance of products and services, is becoming ever more important.
Benefits of certification
- Building an efficient management system
- Quality assurance that meets customer requirements
- Stronger competitiveness by embedding quality management and quality assurance systems
- Higher productivity
- Rapid response to external change through an internationalised management system
- Readiness for product liability legislation
- An improved corporate image
-
ISO 14001Environmental Management System
What is ISO 14001 (Environmental Management System) certification?
An international standard for environmental management systems applicable to every industry and activity. An independent third party objectively certifies that the environmental management system, which continually improves the company's environmental performance, meets the requirements and is operated effectively.
Background
Environmental management has emerged as a new paradigm of corporate management that balances social and economic demands in moving towards an environmentally sound and sustainable society.
Benefits of certification
- Cost savings by minimising waste and energy consumption
- Prevention and minimisation of environmental incidents
- Compliance with environmental legislation
- Solving environmental problems through continual improvement of environmental performance
- Easier entry into international markets by gaining international trust
- An improved image as an environmentally friendly company
-
ISO 45001Occupational Health and Safety Management System
What is ISO 45001 (Occupational Health and Safety Management System) certification?
An international standard for occupational health and safety management systems that prevent and manage in advance the risks that can arise in the workplace. It aims to prevent work-related injury and ill health among people and to provide a safe and healthy working environment.
Background
Public interest in health and safety is growing, and organisations' responsibility for the health and safety of their workers is being stressed more than ever.
Benefits of certification
- Building safety management processes
- Compliance with safety legislation and better capability to respond
- Lower costs of handling safety incidents
- Lower staff turnover
-
ISO 22000Food Safety Management System
What is ISO 22000 (Food Safety Management System) certification?
An international standard for food safety management systems that can be applied by every stakeholder in the food supply chain. Built on a quality management system and incorporating HACCP principles, it lets you achieve the twin goals of quality management and food safety at the same time.
Background
To meet consumers' expectations of food safety, voluntary food safety management that prevents and controls food hazards in advance is evolving into management of the entire food supply chain.
Benefits of certification
- Building an efficient food safety management system
- Food safety that meets customer expectations
- Smooth communication across the food supply chain
- An improved corporate image
-
FSSC 22000Global Food Safety System
What is FSSC 22000 (Global Food Safety System) certification?
An international food safety system standard approved by the Global Food Safety Initiative (GFSI) and specialised for food manufacturing and food packaging manufacturing. It is built on the ISO 22000 standard, combined with sector-specific prerequisite programme requirements.
Background
Voluntary food safety management that prevents and controls food hazards in advance is expanding across the entire food supply chain.
Benefits of certification
- Maximising the efficiency of food safety and hygiene management systems
- A stronger corporate image and greater customer trust
- Continual improvement by controlling and reducing food safety hazards
-
ISO 22716International Cosmetics Good Manufacturing Practice
What is ISO 22716 (International Cosmetics Good Manufacturing Practice) certification?
An international standard on Good Manufacturing Practice (CGMP) for the cosmetics manufacturing industry. It sets out organised, systematic product safety and quality control rules that must be met in every production process to produce good-quality cosmetics.
Background
Although each country has its own cosmetics GMP, the standard was established as a way to resolve regulatory differences, and many international regulators — including the International Cooperation on Cosmetics Regulation (ICCR), the Food and Drug Administration (FDA) and the European Committee for Standardization (CEN) — have endorsed or accepted its guidelines.
Benefits of certification
- Building consumer trust by preventing and minimising product incidents
- Continual improvement and risk management
- Building trust in cosmetics GMP assessments and stronger export competitiveness
- High ratings from overseas client companies
- Compliance with domestic and international cosmetics regulations
- Stronger export competitiveness by proving international quality competitiveness
-
ISO 27001Information Security Management System
What is ISO 27001 (Information Security Management System) certification?
The international management system standard for information security. It aims to protect a company's information assets by ensuring, in a systematic way, the confidentiality, integrity and availability of the organisation's information assets (data, systems and infrastructure).
Background
Information is a key corporate asset and faces many threats, including internal leaks, hacking and ransomware. The need to build a systematic framework for identifying and managing these risks is growing.
Benefits of certification
- Establishing a framework for managing the company's information assets
- Better conformity with domestic and international legal and contractual requirements on information security
- Greater customer trust through third-party assessment and certification of compliance with international standards
- Systematic identification and management of information leak risks
-
ISO 27701Privacy Information Management System
What is ISO 27701 (Privacy Information Management System) certification?
The international management system standard for personal information among a company's information assets. It establishes systematic processes for handling personally identifiable information across all the personal data an organisation holds, managing risks and protecting personal information.
Background
As companies collect more personal information, data breaches are also increasing, and the need for a systematic framework for handling personally identifiable information is growing.
Benefits of certification
- Establishing a framework for managing how the company handles personal information
- Better conformity with domestic and international legal and contractual requirements, such as the Personal Information Protection Act
- Greater customer trust through third-party assessment and certification of compliance with international standards
- Systematised procedures for managing personally identifiable information
-
ISO 42001Artificial Intelligence Management System
What is ISO 42001 (Artificial Intelligence Management System) certification?
The international standard for artificial intelligence: a standard for establishing, implementing, maintaining and continually improving a company's artificial intelligence management system.
Background
As the AI industry grows and the technology becomes part of everyday life, the need for companies to build a systematic AI management system is increasing.
Benefits of certification
- Identifying and managing risks across the whole process, from AI system development to use
- Ensuring transparency, fairness, reliability, security and ethics in AI system operation
- Demonstrating compliance with domestic and international AI laws and regulations
- Better AI risk management capability through AI impact assessment
This is how audit and certification proceed
- 01Initial certification (recertification)
The process runs: application received → application review → stage 1 audit → stage 2 audit → corrective action on nonconformities → certification decision → certificate issued. Recertification follows the same procedure.
- 02Three-year certification cycle
A certificate is valid for three years. In between you undergo surveillance audits, and in the third year a recertification audit.
- 03Expiry
If you do not renew, the certificate expires. To avoid a gap in certification, apply for the recertification audit before it expires.
- At the application review stage, an application for certification may be declined.
- If a certified company requests an extension or reduction of its certification scope, this is handled as a special audit, following the same procedure as the surveillance or recertification process.
- If grounds arise for suspension, withdrawal or reduction of the scope of a certificate, they are handled in accordance with the guideline on assessing the degree of nonconformity and acting on audit results.
- A certificate is restored once the grounds for suspension (such as inadequate corrective action on nonconformities or difficulty maintaining certification) have been resolved.
How many days does an audit take?
For a quality management system (QMS), these are the combined days for the stage 1 and stage 2 audits. The number of employees is converted to the effective number of employees.
For an environmental management system (EMS), longer durations apply for the same size; KOCI will provide the bands for 626 or more employees and the full EMS table on request.
| Effective number of employees | High complexity | Medium complexity | Low complexity |
|---|---|---|---|
| 1 ~ 5 | 1.5 | 1.5 | 1.5 |
| 6 ~ 10 | 2 | 2 | 2 |
| 11 ~ 15 | 2.5 | 2.5 | 2.5 |
| 16 ~ 25 | 3.5 | 3 | 2.5 |
| 26 ~ 45 | 5 | 4 | 3.5 |
| 46 ~ 65 | 6 | 5 | 4 |
| 66 ~ 85 | 7 | 6 | 5 |
| 86 ~ 125 | 8 | 7 | 6 |
| 126 ~ 175 | 9 | 8 | 7 |
| 176 ~ 275 | 10 | 9 | 8 |
| 276 ~ 425 | 11 | 10 | 9 |
| 426 ~ 625 | 12 | 11 | 10 |
You can also qualify as an ISO auditor
An ISO auditor is an expert who, when a company requests an audit to obtain certification, visits the company and audits the conformity of its management system. ISO international lead auditors can carry out audits for certification bodies in Korea and abroad.
- RequirementsYou must complete ISO auditor training at an officially approved training body and pass the exam, then meet the eligibility criteria for education, work experience and audit experience.
- Training modulesISO 9001 · ISO 14001 · ISO 22000 · ISO 45001 · ISO 27001 · ISO 27701 · ISO 42001
- PurposeDevelops capable international lead auditors by teaching auditor attributes, the ability to identify nonconformities and how to write audit reports, through theory and practice.
- OutcomeYou learn the management system audit process and its operation through Q&A and feedback in case studies and role play.
- Who it is forThose who want to work as auditors at ISO certification bodies, and those who want to work as consultants guiding the implementation of ISO management systems.
- 2026 scheduleMarch ISO 9001/14001/45001 · April ISO 27001/27701/42001 · May ISO 22000 · September ISO 9001/14001/45001 · October ISO 27001/27701/42001 · November ISO 22000 (dates may change depending on the certification body's circumstances)
ESG · sustainability management support
Financial performance alone is no longer enough to be judged well. We help you prepare for assessments, reports and global platforms.
-
WHY ESG?ESG assessment
As public interest in sustainability grows and the role and responsibility of business become more important, non-financial as well as financial performance has become a major pillar of corporate management.
- Starting with governance assessment in 2003, it has carried out an integrated ESG assessment since 2011, when the environmental and social areas were added.
- It is conducted every year for some 900 listed companies, and since 2018 the governance of major unlisted financial institutions has been assessed separately.
- The basic assessment uses a points-added method and the in-depth assessment a points-deducted method for negative ESG issues, made up of 18 major categories and 281 key assessment items.
- Governance (G/FG) starts in March and environmental and social (E/S) in June, with regular ratings issued in October. Ratings are adjusted as needed by the ratings committee in January, April and July of the following year.
- The integrated and individual ratings from the assessment are used to select the constituents of the Korea Exchange (KRX) socially responsible investment indices.
-
Sustainability ReportSustainability Report, SR
A means of measuring, disclosing and explaining an organisation's performance towards sustainable development goals: a report that transparently discloses the key efforts and results across all of its management activities.
- It provides economic, environmental and social performance to stakeholders such as customers, local communities, shareholders, financial institutions and government offices.
- Published reports can gain credibility and value through assurance by an independent body.
- Assurance checks compliance with the GRI Standards Core Option, the AA1000APS · AA1000AS principles, and the application of ISO 26000 · UN SDGs core subjects.
- There are two assurance types: TYPE 1 (assures the degree to which the basic AA1000APS principles are met, without assuring data reliability) and TYPE 2 (also assures the reliability of specific performance information).
- Assurance levels are High Assurance and Moderate Assurance.
-
ECOVADISGlobal CSR assessment platform
Founded in 2007, it is a sustainability (CSR) assessment platform that evaluates the social performance of global suppliers. It is currently used by some 75,000 companies in 160 countries worldwide.
- The assessment process consists of 4 stages in total.
- The requirements cover 5 CSR themes · 39 questions in total.
- General — 3 questions: adherence to international and industry initiatives, appointment of an official CSR officer, and the status of externally published CSR reporting.
- Environment — 14 questions: environmental policy, energy consumption and greenhouse gases, water management, hazardous substances and waste, product life, customer safety, and responses to European environmental regulations and CDP.
- Labour practices and human rights — 9 questions: prevention of discrimination and sexual harassment, lost days due to injury and lost-time incident severity rate, the proportion of women among top executives, and occupational health and safety management system certification.
- Fair business practices — 7 questions: responses to corruption and anti-competitive practices, anti-bribery, information security measures, and external certification of business ethics.
- Sustainable procurement — 6 questions: responsible purchasing policy, inclusion of conflict minerals, management of suppliers' environmental and social practices, and REACH compliance.
-
RBAResponsible Business Alliance
A standard established in 2004 to help the electronics industry and its supply chains build safe working environments, ensure respect and dignity for workers, and encourage environmentally friendly and ethical business operations.
- Audits are carried out through the VAP (Validated Assessment Program).
- The Code of Conduct is made up of 5 areas.
- The assessment process has 6 stages in total.
- Ratings are awarded according to score: Silver for 160 points or more · Gold for 180 or more · Platinum for 200 or more.
KOCI history
- 2026. 07Planned expansion of certification schemes to ISO 27001 / 27701 / 42001
- 2024. 10Transitioned to IQCS-designated training body
- 2023. 11Certification scheme expanded to ISO 22000 (KAB)
- 2021. 08Expanded and moved to new headquarters (Chunui, Bucheon)
- 2020. 06Certification scheme expanded to ISO 45001 (KAB)
- 2019. 08Accredited as a personnel certification body (IAS in USA)
- 2018. 10Designated PCAA training body (training body No. 1)
- 2018. 07Designated ISO 9001 · ISO 14001 certification body (KAB)
- 2018. 05Authorised as an Exemplar Global ESD Test Center
- 2018. 04Moved headquarters (Sinjung-dong, Bucheon)
- 2017. 11Authorised as an Exemplar Global ESD Training Center
- 2017. 10Korea Enterprise Certification Inc. (KOCI) incorporated
Frequently asked questions
How is Korea Enterprise Certification Inc. related to the Web Support Center?
Korea Enterprise Certification Inc. (KOCI) is one of the companies in the consortium that supports businesses together with the Web Support Center (WSC). The Web Support Center handles the website and AI search optimisation, while KOCI carries out the certification audit and issues the certificate itself. Both companies are located in the U1 Center, Bucheon Techno Valley, so everything from consultation to audit takes place in one place.
Is KOCI an officially accredited certification body?
Yes. It is a management system certification body officially accredited by KAB (Korea Accreditation Board), under the Korean Agency for Technology and Standards. It was designated an ISO 9001 · ISO 14001 certification body in July 2018 and expanded its certification schemes to ISO 45001 in June 2020 and ISO 22000 in November 2023. In August 2019 it was accredited as a personnel certification body by IAS in the USA.
Which certifications can I obtain?
There are nine: ISO 9001 (quality) · ISO 14001 (environment) · ISO 45001 (occupational health and safety) · ISO 22000 (food safety) · ISO 22716 (cosmetics CGMP) · FSSC 22000 (global food safety) · ISO 27001 (information security) · ISO 27701 (privacy) · ISO 42001 (artificial intelligence).
How many days does an audit take?
It depends on the effective number of employees and the complexity category. For a quality management system (QMS), it is 1.5 days for 1–5 employees, 3.5–5 days for 26–45 employees and 8–10 days for 176–275 employees — these figures combine the stage 1 and stage 2 audits. For an environmental management system (EMS), longer durations apply for the same size. For the exact number of days, contact KOCI on 032-324-9001 and they will calculate it for you.
How often must certification be renewed?
It runs on a three-year certification cycle. After initial certification, you undergo surveillance audits and a recertification audit every three years. If a certified company requests an extension or reduction of its certification scope, this is handled as a special audit, following the same procedure as the surveillance or recertification process.
Can a certificate be suspended or withdrawn?
Yes. If grounds arise — such as inadequate corrective action on nonconformities or difficulty maintaining certification — the certificate may be suspended or withdrawn, or its scope reduced, in accordance with the guideline on assessing the degree of nonconformity and acting on audit results. Once the grounds for suspension are resolved, the certificate is restored. An application for certification may also be declined at the application review stage.
Can I also qualify as an ISO auditor?
Yes. International lead auditor training is offered for each module: ISO 9001 · 14001 · 22000 · 45001 · 27001 · 27701 · 42001. The 2026 training schedule is March: ISO 9001/14001/45001, April: ISO 27001/27701/42001, May: ISO 22000, September: ISO 9001/14001/45001, October: ISO 27001/27701/42001 and November: ISO 22000. Dates may change depending on the certification body's circumstances.
Can I get ESG-related support too?
Yes. We support ESG assessment, the publication and third-party assurance of sustainability reports, ECOVADIS CSR assessment, and RBA (Responsible Business Alliance for the electronics supply chain) audits.
Is the Web Support Center a public institution?
No. The Web Support Center is a private company registered under business registration number 376-75-00259. It is not a public institution or government agency, nor is it a subsidiary or commissioned body of any Chamber of Commerce. KOCI is likewise a separate private corporation (Korea Enterprise Certification Inc., founded October 2017), and the two companies are in a consortium relationship to support businesses.
Ask us first
which certification you need
Tell us your industry and size, and we will work out the certifications you need and the audit days.
KOCI 032-324-9001 · Web Support Center 032-323-8366