Two-minute brief
ISO 26000 guidance explained: video brief
A two-minute brief on what ISO 26000 recommends and how its clauses fit together.
Key takeaways
- ISO 26000 recommends rather than requires.
- Seven principles include accountability, transparency and respect for human rights.
- Two fundamental practices: recognising responsibility and engaging stakeholders.
- Seven core subjects run from governance to community involvement.
- ISO 26000 cannot be certified.
Principles and fundamental practices
ISO 26000 recommends; it does not require. Clause 3 explains social responsibility, clause 4 its seven principles, clause 5 the two fundamental practices, clause 6 the seven core subjects and their issues, and clause 7 how to put them into practice. This short film walks through that structure.
Clause 3 sets out the background, recent trends and characteristics of social responsibility and the role of the state. Clause 4 sets seven principles: accountability, transparency, ethical behaviour, and respect for stakeholder interests, for the rule of law, for international norms of behaviour and for human rights. In practice these become a policy that guides decisions. Clause 5 describes the two fundamental practices: recognising social responsibility within the organisation's sphere of influence, and identifying and engaging stakeholders.
The seven core subjects and integration
Clause 6 groups the issues into seven core subjects: organisational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. Each core subject contains issues an organisation considers for relevance and significance, and leadership decides which to prioritise. Clause 7 explains how to integrate social responsibility throughout the organisation, from understanding its characteristics and practices to communication, credibility and reviewing and improving actions.
ISO 26000:2010 is the first and only edition, last reviewed and confirmed by ISO in March 2025. It applies to every type of organisation, private, public or non-profit, of any size and in any country. It is not intended or appropriate for certification, and ISO states that a claim to be certified to it misuses the standard.
ISO's communication protocol suggests public wordings such as "based on ISO 26000", "inspired by ISO 26000" and "follows the guidance provided by ISO 26000", and lists wordings to avoid, among them "certified according to" and "in accordance with". ISO 26000 guides what to do, while GRI and the ESRS set out what to disclose, so the guidance often organises activities that are then reported under those frameworks. Certifiable standards cover several of its issues: SA8000 for decent work, ISO 45001 for health and safety at work, ISO 14001 for the environment and ISO 37001 for anti-bribery.
ISO 26000 at a glance
- Purpose
- Social responsibility: understanding and managing the impacts of your decisions and activities on society and the environment, and contributing to sustainable development
- Relevant to
- Every type of organisation, private, public or non-profit, of any size and in any country
- Edition
- ISO 26000:2010, the first and only edition; last reviewed and confirmed by ISO in March 2025, so it remains current
- Certification
- None. ISO 26000 contains guidance, not requirements; ISO states that it is not intended or appropriate for certification and that any claim to be certified to it misuses the standard
- Sterling's role
- Stakeholder mapping, priorities agreed with leadership, integration into operations, Effivity, training and the first report, then Sustain™
- Cost and timing
- Total investment for an ISO 26000-based social responsibility programme depends on the current maturity of your processes, the scope, locations and number of employees. The process typically takes 4 to 8 months
ISO 26000: questions people ask
Can an organisation be certified to ISO 26000?
No. ISO states that ISO 26000 is not a management system standard, is not intended or appropriate for certification, and that any offer to certify, or claim to be certified, to it would misrepresent and misuse it; with no requirements, such a certificate would not demonstrate conformity. What you can show is evidence that you use the guidance.
What can we say publicly about our use of ISO 26000?
ISO's communication protocol for ISO 26000 suggests wordings such as "based on ISO 26000", "inspired by ISO 26000" and "follow the guidance provided by ISO 26000", and lists wordings to avoid, including "certified according to", "in accordance with", "compliance with", "assessed against" and "meets the requirements of" ISO 26000. Sterling drafts your public language to that protocol.
What is an ISO 26000 self-declaration?
Your own public statement, backed by evidence, of how you apply ISO 26000; not a third-party certificate. In the Netherlands, for example, the standards body NEN publishes the guideline NPR 9026 (now NPR 9026+C1:2012) and a platform for self-declarations; NEN checks that a declaration and its evidence are complete, not whether the answers are right, and states that it does not certify. Elsewhere it is simply your statement, in the wording ISO recommends.
How does ISO 26000 relate to GRI and ESRS reporting?
ISO 26000 guides what to do; GRI and the ESRS set out what to disclose. A joint GRI and ISO guide from 2014 presents ISO 26000 as the structure for organising activities that are then reported with GRI, and notes that applying GRI in full does not equal applying ISO 26000. For companies in the CSRD's scope, narrowed in 2026 to more than 1,000 employees and over EUR 450 million net turnover, ESRS S1 to S4 (own workforce, workers in the value chain, affected communities, consumers and end-users) and G1 (business conduct) parallel ISO 26000's labour, human rights, community, consumer and fair operating practices subjects.
How does ISO 26000 relate to SA8000, ISO 45001, ISO 14001 and ISO 37001?
They are certifiable standards for issues ISO 26000 covers: SA8000:2026 for decent work, through SAAS-accredited bodies; ISO 45001 for health and safety at work, under labour practices; ISO 14001 for the environment; and ISO 37001 for anti-bribery, under fair operating practices. Each certificate is legitimate evidence for part of your programme; none is, or implies, an ISO 26000 certificate.
Keep exploring
Related to this video
The complete guide
Everything on ISO 26000
Start with the ISO 26000 page, or go straight to the guide you need.
On the ISO 26000 page
Often combined with ISO 26000
More videos: ESG and sustainability reporting
- How to report under the ISSB Standards (IFRS S1 and S2)Implementation walkthrough · 3 min 15 s
- ISSB Standards (IFRS S1 and S2) requirements explainedTwo-minute brief · 2 min
- How to disclose through CDPImplementation walkthrough · 3 min 15 s
- The CDP questionnaire and scoring explainedTwo-minute brief · 2 min
- How to comply with the CSRD and the ESRSCompliance walkthrough · 3 min 15 s
- CSRD and ESRS requirements explainedTwo-minute brief · 2 min
- How to get an EcoVadis ratingImplementation walkthrough · 3 min 15 s
- EcoVadis rating criteria explainedTwo-minute brief · 2 min
- How to report with the GRI StandardsImplementation walkthrough · 3 min 15 s
Talk to a consultant
Plan your ISO 26000 implementation with confidence.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice