ISO

# ISO The International Organization for Standardization (ISO) is the world's largest developer of voluntary international standards. Founded in 1947 and based in Geneva, it brings together the national standards bodies of more than 170 countries to build consensus standards covering quality management, environmental management, information security, food safety and thousands of product-specific test methods and specifications. ## Key facts - ISO was founded in 1947 and its central secretariat is in Geneva, Switzerland. - Membership comprises the national standards bodies of over 170 countries, one member per country. - ISO has published more than 24,000 international standards developed by consensus. - Its best-known standards are management system standards: ISO 9001 for quality, ISO 14001 for environment and ISO 45001 for occupational health and safety. - ISO standards are voluntary unless legislation, regulation or a contract makes them mandatory. - ISO develops standards with the IEC for electrotechnology and the ITU for telecommunications. - ISO/CASCO produces the standards for conformity assessment itself, such as ISO/IEC 17025 for testing laboratories. ## How ISO works ISO is a non-governmental organisation whose members are national standards bodies, not companies or governments directly. Each member, such as BSI in the United Kingdom, DIN in Germany or the national body in each participating country, represents its country's stakeholders and organises national consultation on draft standards. Standards are developed in technical committees where experts from industry, government, academia, consumer organisations and other interested parties negotiate the content. The development process is deliberately consensus-based and transparent: proposals for new work, working drafts, committee drafts, public enquiry drafts and final votes each have defined stages and voting rules. Publication requires approval by a supermajority of participating members. This rigour is why ISO standards carry authority with regulators and buyers worldwide, and why development typically takes three to four years. ISO standards are copyrighted and sold through ISO and its member bodies. The revenue funds the system globally today. Titles and scopes are public, and many standards are also adopted identically as national standards, for example as BS ISO or DIN ISO, and as European standards where CEN adopts them as EN ISO. ## The management system standards ISO's most commercially significant output is the family of management system standards. ISO 9001 sets requirements for a quality management system and is the most widely adopted standard in the world, with over a million certified organisations. Certification to ISO 9001 is frequently a precondition for supplying large customers and public tenders, because it signals that a supplier controls its processes and pursues continual improvement. ISO 14001 provides the framework for an environmental management system, helping organisations manage environmental aspects, meet compliance obligations and improve performance. ISO 45001 does the same for occupational health and safety, replacing the former OHSAS 18001. ISO/IEC 27001 governs information security management and is increasingly demanded in software and outsourcing contracts, while ISO 22000 addresses food safety management across the supply chain. These standards share a common high-level structure, which makes it efficient to implement integrated management systems covering quality, environment, safety and security together. Certification is performed by accredited third-party certification bodies, and accredited certification, where the certification body is itself overseen by a national accreditation body, is what gives the certificate credibility in procurement and regulatory contexts. ## ISO standards in product compliance Beyond management systems, ISO publishes thousands of product and test-method standards that are directly relevant to market access. Examples include ISO 8124 for toy safety, developed in parallel with the EN 71 series, ISO 10993 for biocompatibility of medical devices, and ISO 13485 for medical device quality management systems. Packaging, textiles, plastics, steel, petroleum products and countless other sectors have their own ISO families. For CE marking and other regulatory approvals, ISO standards matter in two ways. First, many harmonised European standards are adoptions of ISO standards, published as EN ISO, and cited in the Official Journal to give presumption of conformity. Second, even where no harmonised standard exists, testing to the relevant ISO standard provides strong technical evidence of conformity that regulators and notified bodies respect. ISO/CASCO, the ISO committee on conformity assessment, writes the rules for the testing and certification world itself. ISO/IEC 17025 sets the competence requirements for testing and calibration laboratories, ISO/IEC 17065 governs product certification bodies, and ISO/IEC 17021 covers management system certification bodies. When a regulation requires testing by an accredited laboratory, it is usually accreditation to ISO/IEC 17025 that is meant. ## ISO and international trade The WTO Agreement on Technical Barriers to Trade encourages members to base their technical regulations on relevant international standards, and ISO standards are the paradigmatic example. When countries regulate using ISO standards as the technical basis, exporters face fewer divergent national requirements, which is one of the central trade-facilitation functions of the ISO system. In practice, multinational companies design products to ISO standards from the outset, then handle the remaining national deviations market by market. A medical device developed to ISO 13485 and ISO 10993, for instance, has a head start in the EU, the US, Canada, Japan and Australia, because each of those regulators recognises those standards within its own framework. ISO also develops standards that respond directly to policy goals, such as ISO 14064 for greenhouse gas accounting, ISO 50001 for energy management and the ISO 14000 family supporting environmental claims. As regulators introduce climate and sustainability disclosure requirements, these standards are becoming part of market access in a broader sense. | Standard | Subject | Why it matters for market access | |---|---|---| | ISO 9001 | Quality management systems | Common supplier qualification requirement worldwide | | ISO 14001 | Environmental management | Expected in tenders and supply chain codes | | ISO/IEC 27001 | Information security management | Required for many software and data contracts | | ISO 13485 | Medical device quality management | Basis of device regulation in the EU, Canada and others | | ISO/IEC 17025 | Laboratory competence | Defines an accredited test laboratory | | ISO 8124 | Toy safety test methods | Parallel to EN 71, used across Asia-Pacific | ## Using ISO standards effectively The first step is identifying which ISO standards apply to a product and its markets, which usually comes from the applicable legislation, customer contracts or industry practice. Standards can then be purchased from the national member body, and many companies maintain a standards library with update alerts, because applying a superseded edition can undermine a compliance claim. For management system certification, the typical path is gap analysis, implementation, internal audit, and then a two-stage audit by an accredited certification body. Choosing an accredited body matters: non-accredited certificates are often rejected in regulated procurement. Certificates are valid for three years with annual surveillance audits. A common mistake is treating ISO certification as a substitute for product compliance. ISO 9001 certifies the management system, not the product; a certified company can still make non-compliant products. Product testing to the relevant product standards remains necessary, and the two systems complement rather than replace each other. Another practical point is version control. ISO standards are revised on regular cycles, and certification bodies audit against the current edition after a defined transition period. Companies should track the revision status of the standards they rely on, plan transitions during the overlap window, and keep superseded editions only for historical reference, since claiming conformity to a withdrawn edition weakens both commercial and regulatory credibility. ## Frequently asked questions Is ISO certification mandatory? No. ISO standards are voluntary. They become effectively required when customers demand certification in contracts, when tenders require it, or when legislation references a standard. What is the difference between ISO 9001 certification and CE marking? ISO 9001 certifies that a company operates a quality management system. CE marking declares that a specific product meets EU legal requirements. A company can hold one without the other, and they serve different purposes. How long does ISO 9001 certification take? For a small to mid-sized company starting from scratch, typically six to twelve months including implementation, internal audit and the two-stage certification audit. Timelines depend on organisational complexity and readiness. Are ISO standards legally binding? Only when referenced by law, regulation or contract. A harmonised EN ISO standard cited in the Official Journal gives presumption of conformity with EU legislation, which is the closest ISO comes to legal force in the product sphere. What does accredited certification mean? It means the certification body has itself been assessed by a national accreditation body against ISO/IEC 17021 or the relevant CASCO standard. Accredited certificates carry the accreditation body's mark and are recognised internationally through mutual recognition arrangements. Can a company outside an ISO member country use ISO standards? Yes. ISO standards are available globally through ISO and its member bodies, and any organisation anywhere can implement them and seek certification from an accredited body operating in its region. ## Sources - BSI, the UK member body of ISO - WTO Agreement on Technical Barriers to Trade - EU harmonised standards overview