Industry film
ISO and GRC standards for manufacturing: where to start: video
A short film on the standards manufacturers are asked for, and how to build one system for quality, safety and the plant floor.
Key takeaways
- ISO 9001, ISO 14001 and ISO 45001 are often implemented as one plant system.
- Sector standards come first where a customer or regulator names them.
- A lapsed certificate can put approved-supplier status at risk.
- ISO 9001:2026 and ISO 14001:2026 bring transitions for existing certificates.
- Build around the routings, control plans and shifts the plant already runs.
The standards manufacturers are asked for
Customers send supplier questionnaires, approved-vendor status depends on a valid certificate and auditors want to see production running. The standards manufacturers are asked for depend on what they make and who they supply: ISO 9001, ISO 14001 and ISO 45001, often as one integrated system; IATF 16949 for automotive parts; ISO 50001 for energy; ISO 13485 for medical devices; ISO 22000 for food; and ISO/IEC 27001 where customer data or designs need protecting.
The film runs through when each of these applies and where a plant should start, with a system built around the routings, control plans, shifts and suppliers it already runs.
Why manufacturers certify now, and the first step
The reasons are rarely abstract: a customer asks, a tender closes, an edition changes or something goes wrong on the line. Supplier onboarding packs and annual vendor reviews ask for a valid certificate, and a lapse can put a supplier on conditional status. Industrial and export tenders often screen out bidders without a certified quality system before price is compared. ISO 9001:2026 and ISO 14001:2026 have been published, each with a transition for existing certificates. Sector schemes add their own expectations: automotive parts under the IATF scheme, devices for the United States under the FDA's QMSR and food brands asking for FSSC 22000.
For most plants the starting point is ISO 9001, with ISO 14001 and ISO 45001 joining it in one integrated system with one internal audit and one management review for the plant. Sector standards such as IATF 16949, ISO 13485 or ISO 22000 come first where a customer or regulator names them. The aim is a valid certificate on the scope customers check, fewer repeat defects and safer shifts. Select the Standard™ helps a plant check which of these its customers are likely to expect.
On the plant side, Sterling's consultants work with your production, quality and maintenance people, and Effivity is included with the engagement at no additional cost. The accredited certification body decides.
Keep exploring
Related to this video
More videos: Industries
- ISO and GRC standards for oil, gas and energy: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for pharmaceuticals and medical devices: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for technology, SaaS and BPO: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for telecommunications: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for aerospace and defence: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for automotive and mobility: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for construction and engineering: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for education: where to startIndustry film · 2 min 15 s
- ISO and GRC standards for financial services and fintech: where to startIndustry film · 2 min 15 s
Talk to a consultant
Plan certification for your manufacturing operation with confidence.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice