Company policies: what Sterling commits to, in writing.

Sterling International Consulting FZE publishes nine policy statements for the global firm. They describe how Sterling works in practice across consulting, training and certification support, and each is backed by a fuller controlled version that clients can ask to see during supplier due diligence.

• Quality policyHow every engagement is scoped, delivered, closed and improved, and what we owe clients and our people.
• Health, safety and environment policyZero harm as the aim, in our offices, on client sites and when our consultants travel.
• Information security policyHow client engagement information is received, used, protected and returned or deleted.
• Data privacy policyThe principles, rights, security and transfer rules for personal data across the whole firm.
• Business ethics policyZero tolerance for bribery, corruption and fraud; gifts, conflicts and what we expect of suppliers.
• Sustainability policyGovernance, people and the environment weighed together, including our own footprint.
• Impartiality and independence statementA consultancy, never a certification body: the boundary, disclosures and what we decline.
• Complaints and feedback policyHow to raise a complaint, the steps we work to, and how we correct.
• Editorial and verification policyPrimary sources, editions and dates, draft labelling, review and open corrections.

The Data privacy policy covers how Sterling handles personal data across its whole business. The Privacy notice explains what this website collects and how, and the Cookie policy and the Terms of use cover the rest of the website. Each consulting, training or software engagement also has its own agreement, which sets the specific commitments for that work, including confidentiality and information security. Where an engagement agreement sets a stricter commitment than a policy, the agreement applies to that engagement.

The policies apply to Sterling's employees and to the subcontracted consultants who work on Sterling engagements, in every country where we work.

If your procurement or vendor-risk team needs the full controlled version of a policy or a signed copy for its supplier file, write to hello@sterling-grc.com and name the policy and the questionnaire it is for.