hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← All videos

Two-minute brief

ISO 26000 guidance explained: video brief

A two-minute brief on what ISO 26000 recommends and how its clauses fit together.

  • Two-minute brief
  • 2 min

Key takeaways

  • ISO 26000 recommends rather than requires.
  • Seven principles include accountability, transparency and respect for human rights.
  • Two fundamental practices: recognising responsibility and engaging stakeholders.
  • Seven core subjects run from governance to community involvement.
  • ISO 26000 cannot be certified.

Principles and fundamental practices

ISO 26000 recommends; it does not require. Clause 3 explains social responsibility, clause 4 its seven principles, clause 5 the two fundamental practices, clause 6 the seven core subjects and their issues, and clause 7 how to put them into practice. This short film walks through that structure.

Clause 3 sets out the background, recent trends and characteristics of social responsibility and the role of the state. Clause 4 sets seven principles: accountability, transparency, ethical behaviour, and respect for stakeholder interests, for the rule of law, for international norms of behaviour and for human rights. In practice these become a policy that guides decisions. Clause 5 describes the two fundamental practices: recognising social responsibility within the organisation's sphere of influence, and identifying and engaging stakeholders.

The seven core subjects and integration

Clause 6 groups the issues into seven core subjects: organisational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. Each core subject contains issues an organisation considers for relevance and significance, and leadership decides which to prioritise. Clause 7 explains how to integrate social responsibility throughout the organisation, from understanding its characteristics and practices to communication, credibility and reviewing and improving actions.

ISO 26000:2010 is the first and only edition, last reviewed and confirmed by ISO in March 2025. It applies to every type of organisation, private, public or non-profit, of any size and in any country. It is not intended or appropriate for certification, and ISO states that a claim to be certified to it misuses the standard.

ISO's communication protocol suggests public wordings such as "based on ISO 26000", "inspired by ISO 26000" and "follows the guidance provided by ISO 26000", and lists wordings to avoid, among them "certified according to" and "in accordance with". ISO 26000 guides what to do, while GRI and the ESRS set out what to disclose, so the guidance often organises activities that are then reported under those frameworks. Certifiable standards cover several of its issues: SA8000 for decent work, ISO 45001 for health and safety at work, ISO 14001 for the environment and ISO 37001 for anti-bribery.

ISO 26000 at a glance

Purpose
Social responsibility: understanding and managing the impacts of your decisions and activities on society and the environment, and contributing to sustainable development
Relevant to
Every type of organisation, private, public or non-profit, of any size and in any country
Edition
ISO 26000:2010, the first and only edition; last reviewed and confirmed by ISO in March 2025, so it remains current
Certification
None. ISO 26000 contains guidance, not requirements; ISO states that it is not intended or appropriate for certification and that any claim to be certified to it misuses the standard
Sterling's role
Stakeholder mapping, priorities agreed with leadership, integration into operations, Effivity, training and the first report, then Sustain™
Cost and timing
Total investment for an ISO 26000-based social responsibility programme depends on the current maturity of your processes, the scope, locations and number of employees. The process typically takes 4 to 8 months

ISO 26000: the complete guide →

ISO 26000: questions people ask

Can an organisation be certified to ISO 26000?

No. ISO states that ISO 26000 is not a management system standard, is not intended or appropriate for certification, and that any offer to certify, or claim to be certified, to it would misrepresent and misuse it; with no requirements, such a certificate would not demonstrate conformity. What you can show is evidence that you use the guidance.

What can we say publicly about our use of ISO 26000?

ISO's communication protocol for ISO 26000 suggests wordings such as "based on ISO 26000", "inspired by ISO 26000" and "follow the guidance provided by ISO 26000", and lists wordings to avoid, including "certified according to", "in accordance with", "compliance with", "assessed against" and "meets the requirements of" ISO 26000. Sterling drafts your public language to that protocol.

What is an ISO 26000 self-declaration?

Your own public statement, backed by evidence, of how you apply ISO 26000; not a third-party certificate. In the Netherlands, for example, the standards body NEN publishes the guideline NPR 9026 (now NPR 9026+C1:2012) and a platform for self-declarations; NEN checks that a declaration and its evidence are complete, not whether the answers are right, and states that it does not certify. Elsewhere it is simply your statement, in the wording ISO recommends.

How does ISO 26000 relate to GRI and ESRS reporting?

ISO 26000 guides what to do; GRI and the ESRS set out what to disclose. A joint GRI and ISO guide from 2014 presents ISO 26000 as the structure for organising activities that are then reported with GRI, and notes that applying GRI in full does not equal applying ISO 26000. For companies in the CSRD's scope, narrowed in 2026 to more than 1,000 employees and over EUR 450 million net turnover, ESRS S1 to S4 (own workforce, workers in the value chain, affected communities, consumers and end-users) and G1 (business conduct) parallel ISO 26000's labour, human rights, community, consumer and fair operating practices subjects.

How does ISO 26000 relate to SA8000, ISO 45001, ISO 14001 and ISO 37001?

They are certifiable standards for issues ISO 26000 covers: SA8000:2026 for decent work, through SAAS-accredited bodies; ISO 45001 for health and safety at work, under labour practices; ISO 14001 for the environment; and ISO 37001 for anti-bribery, under fair operating practices. Each certificate is legitimate evidence for part of your programme; none is, or implies, an ISO 26000 certificate.

More ISO 26000 questions and answers →

Talk to a consultant

Plan your ISO 26000 implementation with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice