A standard describes requirements, guidance or agreed practice. Implementation is the organisation's work to build and operate a system. Certification is an independent conformity-assessment process carried out by an appropriate certification body. ISO itself does not certify organisations.
Why the distinction matters
A supplier can use quality-management principles without being certified. A buyer may require certification where it is proportionate and permitted, or may accept equivalent evidence depending on the procurement and risk. A consultancy that helped implement a system should not present that work as independent certification.
What the clinic can do
- map processes and interested parties;
- assign ownership;
- define risks, controls and measures;
- create operating records;
- run internal checks and corrective action;
- prepare for an independent certification route where chosen.
What it will not do
- copy or distribute protected standards;
- use the ISO logo;
- issue ISO certificates;
- guarantee certification;
- describe an uncertified project as ISO approved.
The strongest market signal is not the presence of a logo alone. It is the combination of proportionate requirements, an operating system, relevant evidence and independent assurance where the risk justifies it.