ISO Certifications are issued by companies called Certification Bodies. Legitimate Certification Bodies are authorised by an overarching organisation called an Accreditation Body who is there to make sure they are auditing to the required standard. There are dodgy Certification Bodies in the marketplace who aren't Accredited and still issue certificates. See HERE for more information.