Construction and engineering · ISO and GRC consulting
ISO certification for construction and engineering that wins the tender and holds up on site.
Main contractors, specialist subcontractors and engineering consultancies are asked for quality, environmental and safety certificates before they can bid, then audited on live projects. Sterling's expert and experienced consultants build one system with your office and site teams that works on every project, not only at head office. We ensure successful certification for our clients.
- Consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, under one all-inclusive proposal for an agreed scope
- A team of expert and experienced consultants, advising on management systems across sectors and countries since 2003, from site-based contractors to design and engineering offices
- The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides
- Pre-qualification answeredCertificates and the evidence behind them ready for the next questionnaire, vendor registration or framework bid.
- One QHSE systemQuality, environment and safety run on one set of procedures, one internal audit and one management review.
- Sites that match the manualInspection records, permits and waste records kept on site as the work is done, not rebuilt before the audit.
- Subcontractors under controlTrades approved, inducted and monitored against the same requirements your clients hold you to.
What construction and engineering is asked for
The certificates clients, main contractors and public owners ask for.
Most firms start with ISO 9001, then add ISO 14001 and ISO 45001 as clients score environmental and safety management alongside quality. Design and BIM teams are asked about ISO 19650; firms bidding for public works look at ISO 37001; contractors with large fleets or long-term maintenance contracts look at ISO 39001 and ISO 55001, and site laboratories testing concrete, soil and aggregates at ISO/IEC 17025 accreditation.
Why now
Why contractors and engineering firms are certifying now.
The request rarely comes from one direction. These are the pressures that most often put certification on a construction board's agenda.
- Clients and main contractorsPre-qualification, vendor registration and subcontractor approval ask for certificates, and increasingly for the records behind them: inspection results, incident figures and waste data.
- Public tenders and BIMUK central government bodies are expected to follow the Construction Playbook on a comply-or-explain basis, and it tells contracting authorities and suppliers to apply the UK BIM Framework built on ISO 19650.
- Revised editionsISO 14001:2026 was published on 15 April 2026 and ISO 9001:2026 on 16 September 2026. Certificates to the 2015 editions move across on the timetable your certification body confirms.
- Site audits and incidentsCertification bodies treat construction as high occupational health and safety risk when planning ISO 45001 audits, and evaluate the system during operational activities, so a serious incident is felt in the next audit as well as on site.
- Anti-bribery expectationsFirms that tender for public works, use agents or deal with public officials are the ones ISO 37001 is written for. Certificates to the 2016 edition are not valid after 28 February 2027.
- Joint ventures and parent groupsJoint-venture partners and group companies expect every entity to run the same controls, so a certificate held by one business becomes the benchmark for the others.
Scope and evidence
What auditors look for on a project, and where they find it.
An auditor on a construction audit spends time at the managing office and on at least one live site. These are the areas where site practice and the written system most often part company.
| Requirement area | What it looks like in construction and engineering | Evidence auditors ask for |
|---|---|---|
| Project quality control | Inspection and test plans with hold and witness points, method statements, design reviews, controlled RFIs and a clear way of recording and correcting defective work | Signed inspection records, survey and test equipment calibration, a nonconformance log with closure, design review minutes |
| Subcontractors and suppliers | Trades and suppliers approved before they mobilise, material submittals checked against the specification, and your client's requirements passed down the chain | An approved list with evaluations, submittal approvals, subcontract terms, performance reviews at the end of each package |
| Hazards and site safety | Risk assessment for routine and non-routine work, permits for high-risk tasks, the hierarchy of controls applied, and workers consulted rather than only instructed | Risk assessments and method statements, permits, induction and toolbox talk records, incident investigations with actions |
| Environmental controls | Dust, noise, runoff, waste and spills assessed for each project and controlled at the gate, the stockpile and the washout area | A scored aspects register, site inspection checklists, waste transfer records, spill drills with lessons applied |
| Legal and contract obligations | Permit conditions, licences and client specifications identified for each jurisdiction and project, and compliance checked rather than assumed | A legal register, a compliance evaluation record, licence and permit copies with expiry dates tracked |
| Information and handover | Drawings and documents issued at the right revision, a common data environment where BIM is used, and as-built information handed over complete | A document register with revisions, transmittals, information states in the CDE, handover and O&M records |
The examples show typical site practice. The standards do not prescribe these documents; the auditor samples what your own system says you do, on the projects active at the time.
The engagement
What happens between the first call and the certificate.
Shown for an integrated ISO 9001, ISO 14001 and ISO 45001 system, the most common starting point for contractors. ISO 19650-2 follows the same preparation, with the certification body's assessment run under its own process certification scheme.
- 01Define what the certificate needs to cover.Confirm activities, sites, headcount, customer expectations and the intended certification scope.
- 02Gap analysis: review the current system against the requirements.The gap analysis identifies what is missing, preserves effective practice and agrees actions, owners, dates and resources.
- 03Implement and collect meaningful evidence.Put controls into use, train the relevant people and keep the records that show how the system operates.
- 04Audit, review and address the findings.Internal audit and management review evaluate implementation; findings are raised by us first and closed with evidence.
- 05Complete the independent assessment.The certification body's Stage 1 readiness review, then the Stage 2 audit; respond to any findings and await its decision.
- 06Maintain the system after certification.Monitoring, internal audits, reviews and improvement continue, alongside the body's surveillance audits and three-yearly recertification.
What you receive
Everything a working, certifiable system needs. Nothing to purchase separately.
- Scope and gap analysis reportThe scope of the certificate and every shortfall against the standard, with an owner and a date.
- Implementation planMilestones, responsibilities, the weekly session calendar and the target audit window.
- The documented management systemPolicies, processes, procedures, forms and records on Sterling's template sets, tailored to your operation.
- Effivity workspace, configuredDocuments, registers, audits, actions, training records and management review in one place, included at no additional cost.
- Trained peopleAwareness e-learning for everyone, practitioner courses for the people who run the system, internal auditor training for your audit team, as applicable to your standard, with Certificates of Completion.
- Internal audit and management reviewProgramme, checklists, report, corrective actions closed with evidence, and a management review record with decisions.
- Certification readinessCertification bodies compared and their accreditation checked, Stage 1 and Stage 2 preparation, and support until the certificate is issued.
- The Sustain™ calendarThe year after certification planned: surveillance dates, internal audits, refreshers, new-hire training and any transition to a revised edition.
Effivity · included with the engagement
Your system runs in software from the first workshop.
Effivity is the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant configures it within the agreed scope, so evidence accumulates as people do their work and the certification auditor reviews a live system rather than a binder. Sterling consulting clients get their subscription included with the engagement, at no additional cost.
ISO & GRC softwareSterling Academy · included with the engagement
Your people learn the standard, not just the forms.
E-learning with practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online, with progress by department for the certification audit. Sterling consulting clients get preferential course access and special pricing, including complimentary awareness training for their people as part of the engagement.
Contact us about Academy accessStandards
Standards for Construction and engineering
- ISO 9001ISO 9001 certification consulting: a quality management system built with your people, evidence prepared and support until an accredited body certifies you.
- ISO 14001ISO 14001 certification consulting: aspects, impacts and compliance obligations controlled, with support until an accredited body certifies you.
- ISO 45001ISO 45001 certification consulting to prevent work-related injury and ill health, with an OH&S system built with your people and audit-ready, in 60+ countries.
- ISO 37001ISO 37001 certification consulting: proportionate anti-bribery controls to prevent, detect and respond, built with your teams and ready for an accredited audit.
- ISO 39001ISO 39001 certification consulting to reduce death and serious injury from road traffic crashes you can influence, ready for an accredited certification audit.
- ISO 55001ISO 55001 certification consulting for asset management: cost, risk and performance weighed across the asset life cycle, ready for an accredited audit.
- ISO 19650ISO 19650 certification consulting for information management on buildings and civil works: who needs what, when, and how it is checked, shared and kept.
- ISO/IEC 17025ISO/IEC 17025 accreditation consulting for testing and calibration laboratories: competence, impartiality and evidence ready for accreditation assessment.
Construction and engineering client experience
On the record: what construction and engineering clients say about working with Sterling.
The ISO manager reports that the company was very pleased with the implementation approach, and that the consultants guided it to a close integration of its existing systems with the additional requirements of ISO 9001, ISO 14001 and ISO 45001.
The president writes that the team's expertise, professionalism and dedication were central to achieving the company's certification goal, and that from the initial gap analysis to final audit preparation the systematic approach and practical insights made the process clear, manageable and effective.
The director writes that, for a growing firm, putting in place the systems and processes needed for certification was an important milestone: work began in late June, certification followed in mid-September, and Sterling's practical guidance helped the firm move through the process in a short timeframe while establishing management systems that fit its business and operations.
Each account is drawn from a signed letter or e-mail on file and reported in our words, with the signatory's role and organisation attached; the original letters are available on request. Ask for references in your sector before you decide.
- 60+countries where Sterling has delivered certification
- 21countries with a Sterling office, eight regions, one coordinated team
- 2003the year the group began implementing ISO management systems; the same method, refined, since
- 8,100+client engagements across the group, from single-site SMEs to multinationals
FAQs
Questions contractors and engineering firms ask before they engage us.
The specific answers for your organisation come from the discovery call. These are the general ones.
Which ISO certification does a construction company need first?
For most contractors it is ISO 9001, because it is the certificate pre-qualification asks for most often. Many firms implement ISO 9001, ISO 14001 and ISO 45001 together, since the same people, projects and records serve all three, and one integrated system means one set of procedures and a combined audit. Engineering and design consultancies often add ISO 19650-2 once clients start specifying BIM information requirements.
Can we be certified if we have no project running?
Plan for a live project. Certification bodies evaluate an ISO 45001 system during operational activities, including work sites, and the Stage 2 auditor will want to see your controls in use on a project, not only described in the manual. If work is between contracts, agree the audit window with the certification body around the next mobilisation, and keep records from the last project to show the system has operated.
Does every temporary site have to appear on our certificate?
No. The certificate normally describes your activities and the office that manages them, and temporary sites covered by the system are identified as temporary. The certification body samples active sites at each audit on an evaluation of risk, so a new project comes under the system as soon as it starts. The exact certificate wording is the certification body's decision.
Are our subcontractors covered by our ISO 45001 system?
Yes, where they work under your control. ISO 45001 counts them as workers, and certification bodies include contractor and subcontractor personnel under your control or influence when they size the audit. In practice that means approving trades before they mobilise, inducting their people, including them in permits and toolbox talks, and investigating their incidents as your own.
Is ISO 19650 certification the same as ISO 9001 certification?
No. ISO 19650 is a process standard, and certification tests the information management process of ISO 19650-2 under a certification body's scheme. In the United Kingdom, UKAS accredits ISO 19650-2 certification by bodies including BSI, BRE and LRQA as process certification under ISO/IEC 17065, not as management-system certification. Elsewhere, ask whether the scheme you are offered is accredited.
We hold ISO 9001:2015 and ISO 14001:2015. What do the new editions mean for us?
You keep your certificates while you transition. ISO 14001:2026 was published in April 2026 with a transition ending on 30 April 2029, and ISO 9001:2026 in September 2026 with transition requirements running to 30 September 2029. Contractors holding both usually plan a single transition, updating the integrated system once and taking it to a surveillance or recertification audit on the timetable their certification body confirms.
Does Sterling issue the certificate?
No. Sterling does not certify. An independent, accredited certification body audits your system and decides. We help you compare bodies and check their accreditation; since 1 January 2026 accreditation bodies' international recognition runs through Global ACI, which replaced the IAF MLA and ILAC MRA. Our part is to build the system with you, prepare your office and site teams, and stay with you until the certificate is issued.
Talk to a consultant
Plan certification for your construction or engineering business with confidence.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice