Which statement is true regarding certification bodies?

Certification bodies play a critical role in the process of certifying organizations against various standards, including ISO/IEC 27001. The true statement regarding certification bodies is that they are accredited by accreditation bodies. This means that an accreditation body evaluates and recognizes the competence and capability of a certification body to carry out certification processes in adherence to specific standards.

Accreditation involves a thorough assessment of the certification body’s procedures, staff qualifications, and compliance with international standards. This ensures that the certification process is reliable and that certified organizations can trust that their certification is legitimate and recognized globally.

In contrast, certification bodies do not create their own standards; they operate based on existing international standards set forth by organizations like ISO. They also do not manage compliance tasks; instead, they assess organizations' compliance with specified standards through audits. This distinction emphasizes the importance of accreditation in establishing the credibility of certification bodies within the framework of quality assurance and conformity assessment.