Industries
ISO certification by industry: the standards 16 sectors are asked for
ISO certification by industry starts from who is asking: customers, regulators and tenders in each sector expect different standards. Choose your sector to see the standards it usually needs, the drivers behind them and how Sterling builds the system with your team.
How to use the industry pages
How do the industry pages help you choose the right standards?
Each of the 16 industry pages is written for buyers in that sector. It names the standards that customers, regulators and tenders in the sector ask for, explains what drives each requirement, describes how scope is set for the sector's sites and processes, and shows how an engagement runs from gap analysis to the certification audit. Manufacturing and automotive suppliers usually meet quality and customer-specific requirements first. Technology, SaaS and BPO firms meet information security and privacy questions from their clients. Food and beverage businesses meet the food safety schemes their retail and brand customers require. Laboratories and inspection bodies seek accreditation rather than certification, and healthcare, pharmaceutical and medical device organisations work within regulatory requirements as well as standards.
Many organisations sit in more than one sector, and many sectors share standards. ISO 9001, ISO/IEC 27001, ISO 14001 and ISO 45001 appear on most of the pages because they share a common structure and can run as one integrated management system, so each additional standard adds less work than the first. Where a sector adds its own scheme, such as IATF 16949, AS9100, FSSC 22000 or ISO 13485, the industry page explains how it relates to the ISO base and what the sector's auditors look for.
If your sector is not listed, or you are not sure which standards apply, Select the Standard™ suggests the standards your sector expects, each labelled as certification, accreditation, attestation or compliance, and the standards and frameworks pages group every standard into 19 families. Sterling does not certify. The certificate comes from an accredited certification body, the attestation report from an independent auditor and accreditation from an accreditation body; each industry page says which applies to each route, and how Sterling prepares you for it.
The industries
ISO certification for 16 industries
Open your sector to see its standards, drivers, scope and engagement.
- ISO certification for manufacturing: standards, scope and supportISO certification for manufacturing: ISO 9001, ISO 14001, ISO 45001 and IATF 16949 built with your plant team by expert and experienced consultants.
- ISO Certification for Automotive and Mobility: IATF 16949 and TISAXISO certification for automotive and mobility suppliers: IATF 16949, TISAX, ISO/SAE 21434 and ISO 26262 built with your teams, under one all-inclusive proposal.
- ISO certification for aerospace and defence: AS9100, CMMC and moreISO certification for aerospace and defence suppliers: AS9100, ISO 9001, CMMC, ISO/IEC 27001, ISO 14001 and ISO 45001, built with your team in 60+ countries.
- ISO certification for oil, gas and energy: API Spec Q1 and QHSEISO certification for oil, gas and energy suppliers and operators: API Spec Q1, ISO 29001, QHSE, energy and asset systems built with your team in 60+ countries.
- ISO certification for construction and engineering firmsISO certification for construction and engineering firms: ISO 9001, 14001 and 45001 as one QHSE system, plus ISO 19650 and ISO 37001, built for live sites.
- ISO Certification for Logistics and Supply Chain: Which StandardsISO certification for logistics and supply chain: ISO 9001, 14001, 45001, 28000 and 39001, plus GDP and BRCGS, planned by expert consultants since 2003.
- ISO certification for technology, SaaS and BPO: 27001, SOC 2, PCI DSSISO certification for technology, SaaS and BPO: ISO/IEC 27001, SOC 2, ISO/IEC 27701 and PCI DSS built with your teams by expert, experienced consultants.
- ISO Certification for Financial Services and Fintech: 27001 to DORAISO certification for financial services and fintech: ISO/IEC 27001, PCI DSS, SOC 2, DORA and ISO 22301, built with your team by experienced consultants.
- ISO Certification for Telecommunications: Standards and ConsultingISO certification for telecommunications: ISO/IEC 27001, TL 9000, ISO 22301 and NIS2 readiness for operators and suppliers, built with your teams since 2003.
- ISO Certification for Healthcare Providers: Hospitals and ClinicsISO certification for healthcare providers: ISO 9001, ISO 7101, ISO/IEC 27001, ISO 15189, HIPAA and ADHICS for hospitals, clinics and telehealth services.
- ISO Certification for Pharmaceuticals and Medical DevicesISO certification for pharmaceuticals and medical devices: ISO 13485, ISO 14971, GMP, GDP, FDA QMSR and EU IVDR systems built with your QA and engineering team.
- ISO certification for education: schools, universities and trainingISO certification for education: ISO 21001, ISO/IEC 27001, ISO 45001 and GDPR for schools, universities and training providers, planned around term dates.
- ISO certification for government and public sector bodiesISO certification for government and public sector agencies and suppliers: ISO 9001, ISO/IEC 27001, ISO 37001 and ISO 22301 built with your people.
- ISO Certification for Food and Beverage: FSSC 22000, BRCGS, HACCPISO certification for food and beverage: ISO 22000, FSSC 22000, HACCP, BRCGS, IFS Food and SQF systems your customers accept, built by expert consultants.
- ISO Certification for Hospitality and Facilities ManagementISO certification for hospitality and facilities: ISO 9001, ISO 41001, HACCP, ISO 45001 and ISO 14001 for hotels, venues and FM providers, in one system.
- ISO Certification for Laboratories and Testing: Accreditation GuideISO certification for laboratories and testing: ISO/IEC 17025, ISO 15189 and ISO/IEC 17020 accreditation with expert consultants, Effivity and an all-inclusive proposal.
Not listed? Select the Standard™ suggests the standards for your sector, and Standards and frameworks lists every family.
- 60+countries where Sterling has delivered certification
- 21countries with a Sterling office, eight regions, one coordinated team
- 2003the year the group began implementing ISO management systems; the same method, refined, since
- 8,100+client engagements across the group, from single-site SMEs to multinationals
FAQs
Standards by industry
Three questions buyers ask when their sector sets the requirement.
Which ISO standards are requested most across industries?
ISO 9001 is the most widely requested, because customers and tenders in almost every sector use it as the baseline for quality. ISO/IEC 27001 follows wherever an organisation handles client data or runs services for other businesses, and ISO 14001 and ISO 45001 are common in supply chains, construction and public tenders. Sector schemes then add to that base where customers require them.
Do sector standards replace ISO 9001?
Not usually. IATF 16949 supplements ISO 9001 and is used together with it, and AS9100 contains the ISO 9001 requirements with aerospace, space and defence additions, so certification to either covers the ISO 9001 base. ISO 13485 is a standalone standard for medical device quality management, and organisations that need both it and ISO 9001 often run them as one system.
Can one engagement cover sites in different sectors or countries?
Yes. One programme can cover several sites, sectors and countries under one engagement team and one Effivity workspace, with shared policies, risk assessment and internal audit wherever the standards allow. The certification body plans its audits across the sites under its own rules, and Sterling prepares each site for the visits it will receive.
Talk to a consultant
Not sure where to start? Talk it through with a Sterling consultant
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice