hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

ISO 19650 · Information management using BIM

ISO 19650 certification consulting for information every party can find, trust and use.

Get your information management process certified to ISO 19650-2 by an independent certification body, first time, with a process your teams follow on every appointment: requirements understood, delivery plans that hold, and a common data environment in which the information in use is the information approved. Sterling's expert and experienced consultants build the process, templates and CDE workflow with your BIM and project teams, prove them on live appointments and stay with you through the certification assessment and after it, in 60+ countries. We ensure successful certification for our clients.

  • Consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, under one all-inclusive proposal for an agreed scope
  • A team of expert and experienced BIM information management consultants, advising on management systems across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an independent certification body assesses and decides

8,100+ client engagements in 60+ countries.

ISO 19650 client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is ISO 19650 and what is it used for?

ISO 19650 is the international series for the organisation and digitisation of information about buildings and civil engineering works, including building information modelling (BIM). It sets out how information about a built asset is specified, produced, checked, shared, accepted and kept, so that everyone who designs, builds, operates or maintains the asset works from information that is current, approved and fit for purpose. It applies to every type of asset and to organisations of every type and size, whatever the procurement route.

The series comes in parts. ISO 19650-1 sets out the concepts and principles: the information requirements, the information models that answer them and the common data environment through which information moves. ISO 19650-2 specifies the requirements for the delivery phase, written as a management process of eight activities from assessment and need to project close-out. ISO 19650-3 applies the same logic to the operational phase, ISO 19650-4 sets the process and criteria for deciding on an information exchange, ISO 19650-5 adds a security-minded approach and ISO 19650-6 covers health and safety information.

ISO 19650 is a process standard, not a management system standard like ISO 9001, and certification tests the requirements of ISO 19650-2, sometimes with ISO 19650-5. In the United Kingdom, where the series grew out of BS 1192 and PAS 1192-2, UKAS accredits ISO 19650-2 certification by bodies including BSI, BRE and LRQA as process certification under ISO/IEC 17065, not management-system certification under ISO/IEC 17021-1; elsewhere, ask whether the scheme you are offered is accredited.

Current editions. ISO 19650-1:2018 and ISO 19650-2:2018 (published December 2018), ISO 19650-3:2020, ISO 19650-4:2022, ISO 19650-5:2020 (reviewed and confirmed in 2025) and ISO 19650-6:2025 (published January 2025). Revisions of Parts 1, 2 and 3 are in development: in the drafts, a single information management process in Part 2 replaces both ISO 19650-2:2018 and ISO 19650-3:2020, and Part 3 becomes guidance on implementing it. In August and September 2026 ISO decided to put all three drafts to a further draft (DIS) ballot, so no publication date is set, and certification continues against the current editions. Where the ISO 19650 revision stands

Who it is for

Who needs ISO 19650 certification?

ISO 19650 is written for both sides of an appointment. The appointing party is the client, or whoever manages information on the client's behalf; each lead appointed party, such as a lead designer or a main contractor, is appointed by the client and leads a delivery team of appointed parties, down to specialist subcontractors, who produce much of the information. Organisations bring ISO 19650 to Sterling from one of four starting points:

  • A client, framework or tender asks for ISO 19650. The information requirements cite the standard, or a prequalification asks for evidence of capability. Confirm which part, which scheme and whether an accredited certificate is expected before you commit a budget.
  • Your public-sector clients have written BIM into policy. In the UK, the Construction Playbook, which central government follows on a comply-or-explain basis, says contracting authorities and suppliers should apply the UK BIM Framework, built on ISO 19650. Since 1 January 2024 Dubai Municipality has required BIM on government projects and defined categories of new building, and the Municipality of Abu Dhabi City's BIM code of practice lists ISO 19650-1 and ISO 19650-2 among the standards it applies.
  • Nobody has asked, and information keeps costing you. Superseded drawings reach site, coordination runs on e-mail and handover information arrives late and incomplete. The ISO 19650-2 process is the discipline that stops it.
  • You already work in BIM, but cannot prove the process. The models are good, yet the BIM execution plan is copied from the last job or the whole process depends on one coordinator. It has to become the organisation's process, not one person's habit.

The intended benefit is information that arrives right first time, and evidence that it did. Results come from using the process on every appointment, not from the certificate.

Business benefits

How ISO 19650 cuts rework and builds client confidence

Information management earns its keep where a wrong revision, a late handover or an unanswered requirement costs money. We start with the appointments where that hurts most and build outwards.

  • The right information, in the right stateWork in progress, shared, published and archive states kept apart in the common data environment, so nobody builds from a drawing that was never approved.
  • Tenders answered with evidenceA pre-appointment BIM execution plan and a capability assessment ready to adapt, not promises written the night before submission.
  • Responsibilities nobody can disputeA detailed responsibility matrix and task information delivery plans that say who produces what, by when and to what level of information need.
  • Problems found in the office, not on siteQuality assurance checks and reviews before information is shared, and model reviews at planned milestones, so coordination issues surface early.
  • Handover information the client can useAsset information delivered against the client's asset information requirements and accepted through a defined process, ready for operation.
  • Lessons that reach the next jobClose-out records what worked and what did not, so templates, standards and plans improve with every appointment.

Pick a few measures that matter: information rejected at review, requests for information per package, or handover information accepted first time. Track whether they move. More templates are not a result.

Requirements

What are the main ISO 19650 requirements?

ISO 19650-2 sets out its requirements as eight activities in clause 5, each broken into tasks for the appointing party, the lead appointed party or the task teams, and uses "shall consider" widely so the process can be proportionate to the appointment. Its concepts come from ISO 19650-1: organisational, asset, project and exchange information requirements (OIR, AIR, PIR and EIR), the project and asset information models (PIM and AIM) that answer them, and the common data environment. Read the table as a plain-language guide; during the programme your process is tested against the standard's own text, task by task.

ClauseWhat it requires of youWhat it looks like in practice
5.1 Assessment and needThe appointing party appoints people to the information management function and establishes the project's information requirements, information delivery milestones, information standard, production methods and procedures, reference information and shared resources, common data environment and information protocolAn information manager role, OIR, AIR and PIR in writing, milestone dates, a naming and classification convention, a CDE configured with its states and a protocol ready for every appointment
5.2 Invitation to tenderThe appointing party sets its exchange information requirements, assembles the reference information and shared resources, defines the tender response requirements and evaluation criteria, and compiles the tender informationTender documents whose information requirements are as specific as the drawings, and bidders scored on how they will meet them
5.3 Tender responseEach prospective lead appointed party nominates its information management people, writes a pre-appointment BIM execution plan, assesses the capability and capacity of its task teams and of the delivery team, and sets out a mobilisation plan and a risk registerA BEP that answers the client's EIR point by point, a capability assessment for each subconsultant and subcontractor, and the risks to information delivery priced and owned
5.4 AppointmentConfirm the BIM execution plan, set the detailed responsibility matrix and the lead appointed party's own exchange information requirements, compile the task information delivery plans into the master information delivery plan and complete the appointment documentsAppointments that carry the information protocol, the EIR and the delivery plans, so every task team has signed up to what it must deliver and when
5.5 MobilisationMobilise the people and the information technology, and test the project's information production methods and procedures before production startsTraining and access in place on day one, CDE permissions set, and a test exchange proving naming, formats and workflows
5.6 Collaborative production of informationCheck that reference information and shared resources are available, generate information, carry out a quality assurance check, review and approve information for sharing, and review the information modelInformation containers named and coded to the information standard, QA checks recorded, information approved before it moves from work in progress to shared, and model reviews held as planned
5.7 Information model deliverySubmit the information model to the lead appointed party for authorisation, then to the appointing party for acceptance, with a review at each stepMilestone submissions checked against the MIDP and the EIR, authorised by the delivery team, then accepted or rejected by the client with reasons
5.8 Project close-outArchive the project information model and capture lessons learned for future projectsA complete, retrievable archive of the project information model, and lessons that change the next project's templates, standards and plans

What does useful ISO 19650 evidence look like?

Information requirements and your responses to them, BIM execution plans before and after appointment, capability assessments, mobilisation plans and risk registers, responsibility matrices, TIDPs and the MIDP, and the CDE audit trail showing who checked, approved, authorised and accepted each information container, plus lessons learned at close-out. We help you keep the records the process needs, and no more; they live in Effivity from the first workshop, beside the containers in your CDE, so the assessor sees a process that runs.

ISO 19650-2 requirements explained, activity by activity

Certification process

How do you get ISO 19650 certified?

First make the process real on your appointments. Then an independent certification body assesses it against ISO 19650-2 under its scheme; where the scheme is accredited (in the UK, by UKAS under ISO/IEC 17065), the body itself has been checked for competence and impartiality. Sterling consults and prepares; the certification body alone decides, and that division of roles is what gives the certificate its credibility.

  1. 01
    Decide what the certificate must cover.Confirm your role or roles, the offices and disciplines in scope, the appointments that will provide evidence, the part of ISO 19650, and the scheme and accreditation your clients expect.
  2. 02
    Gap analysis: compare how information moves today with ISO 19650-2.The gap analysis follows a recent appointment from tender to close-out, records what already works, and agrees actions, owners, dates and resources for the rest.
  3. 03
    Build the process, the templates and the CDE workflow.Procedures for each activity, a BEP and EIR response kit, responsibility matrix and delivery plan templates, an information standard, and CDE states and approvals configured to match.
  4. 04
    Run the process on live appointments.Mobilise, test and produce information the new way, train the people involved and keep the records that show each activity happening, milestone by milestone.
  5. 05
    Audit, review and close the findings.An internal audit samples procedures and appointment records against the standard; we raise findings before any assessor can, and close them with evidence.
  6. 06
    Complete the certification body's assessment, then keep going.The body reviews your documented process, assesses how it runs on your appointments and decides; audits continue to keep the certificate, on the cycle its scheme sets.

Judge the route on its credibility, not on the price alone. Ask which scheme the certificate is issued under, which part and edition of ISO 19650 it names and whether the body is accredited for that scheme, then confirm it with the accreditation body: each accreditation body in the Global ACI arrangement (which replaced the IAF MLA and ILAC MRA) keeps a public list of the bodies it accredits, scope by scope. Be wary of offers that skip project evidence: a certificate that fails a client's check leaves the problems in place and the fee spent. How to choose a credible ISO 19650 provider · The certification buyer's checklist

Cost

How much does ISO 19650 certification cost?

An ISO 19650 fee quoted before anyone has looked at your roles, offices and appointments is a guess. A twenty-person architectural practice with a working CDE needs a different scope from a contractor running projects in several countries on several platforms. Our side of the bargain is a proposal that lists every component in one all-inclusive proposal.

Cost componentWhat affects it
Consulting and implementationCurrent maturity, the roles, offices and disciplines in scope, the procedures and templates to write, and whether your team leads the work (Design™) or Sterling carries it (Drive™)
Common data environment and toolsWhether a CDE is in place and how far its states, metadata, permissions and approvals need configuring; platform licences sit with your chosen provider
Independent certificationThe certification body's scheme fees, assessment days, the offices and appointments it samples, travel and the audits that keep the certificate
Internal resourcesTime from BIM, design and project leads, task team coordinators and management, training, and the effort of applying the process on live appointments
Software and learningComes with the Sterling engagement: Effivity holds the process records and Sterling Academy trains your people, with users, courses and access period set out in the proposal
Continued supportInternal audits, template upkeep, refresher learning and the move to the revised parts of ISO 19650 once they are published, under Sustain™

What moves the price

  • The roles in scope: client, lead appointed party, appointed party, or several
  • Offices, countries and disciplines, and whether one certificate covers them all
  • The live appointments available to evidence the process, and the stages they have reached
  • The state of your CDE, templates and information standard today
  • The deadline, the framework or tender behind it, and how much your team can carry

What a Sterling proposal always shows

  • What we deliver, who does what, and what is assumed or excluded, in writing
  • The certification body's fees listed apart from ours, so the whole cost is clear
  • Effivity, internal auditor training and Academy access as separate lines, each at no additional cost
  • Payments tied to deliverables you can see, not to dates on a calendar
  • A single all-inclusive proposal. No surprises, ever

Timeline

How long does ISO 19650 certification take?

The realistic timeline depends on how much of the process already exists, the appointments available to evidence it, your people's availability and the certification body's calendar. It is measured in months, not days, typically four to nine: the procedures and templates have to be used on real appointments long enough for information to be produced, checked, shared and delivered through them, because that record is what an assessor samples. The plan works back from that evidence, milestone by milestone, in Effivity.

PhaseWhat determines the pace
Scope and gap analysisAccess to BIM and project leads, recent appointment records, the CDE and existing templates
Process, templates and CDE workflowDecisions on the information standard, approval of procedures, CDE configuration time and the number of disciplines to align
Use on appointments and internal reviewHow quickly live appointments reach milestones that exercise the process, followed by internal audit
Certification assessmentThe certification body's availability, its document review and appointment sampling, and the time needed to close any findings

If a framework deadline or a tender date is fixed, tell us at the start. We will say what is achievable, which decisions must be taken early and where a faster route would leave too little appointment evidence to pass. Be wary of anyone who names a certificate date before seeing how your projects run: that is a sales tactic, not a plan.

Challenges

Common ISO 19650 implementation challenges

Five problems slow most ISO 19650 programmes down, and each of them can be solved.

To your team, BIM means modelling, not information management.

Start with the process, not the software: who asks for information, who produces it, who checks and approves it, and how it moves. The modellers stay central, but the certificate is about the process around their models, and everyone from bid manager to document controller has a part in it.

The common data environment is a shared drive.

Folders called "final" are not states. Configure the CDE, on your current platform where possible, so information containers carry status, revision and classification metadata and move from work in progress to shared, published and archive only through the check, review, approval and authorisation steps ISO 19650-1 describes.

Every client's information requirements are different.

Build a response kit once: a BEP template mapped to the requirements clients commonly set, an adaptable information standard and delivery plan templates. Each new EIR then becomes a comparison and a set of decisions, not a document written from nothing.

Subconsultants and subcontractors cannot keep up.

Assess each task team's capability and capacity at tender, as ISO 19650-2 expects, write the gaps into the mobilisation plan and risk register, and test the production methods with those teams before production starts. Training and templates travel with the appointment.

Your live projects started before the process existed.

Apply the process from the next milestone on current appointments, record where earlier stages differ and why, and let new appointments carry the full cycle. Plan the assessment around the appointments that show the most of the process.

Your engagement

What your ISO 19650 engagement includes

The agreed scope includes everything the process and your team need to be ready. Templates sold alone leave you to make them work; Sterling takes you the whole way to certification, with one team and one all-inclusive proposal.

  • Scope, gap analysis and implementation plan

    Before work begins: the roles and appointments in scope, who does what, the dates and who decides.

  • Procedures, templates and CDE workflow

    Procedures for each ISO 19650-2 activity, BEP, EIR and delivery plan templates, an information standard and CDE states, built with your BIM leads on Sterling's own template sets.

  • Effivity ISO & GRC software

    The management records of your information management process run in Effivity from day one, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training, as applicable to your standard, for the people who will audit the process; preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audit and appointment reviews

    Run by us or with you, as agreed, across your procedures and live appointment records, with every finding closed with evidence before the certification body's visit.

  • Certification readiness and support

    Preparation for the certification body's document review and appointment assessment, and support until the certificate is issued.

Certification decisions remain with the independent certification body.

How we deliver

How Sterling supports your ISO 19650 implementation

Behind every ISO 19650 engagement sits Sterling OS™, our delivery operating system: five phases with defined deliverables, decision owners and evidence. Sterling carries as much of the work as your capacity requires, and the method, the Effivity workspace and our accountability are the same whichever you choose.

  1. 01
    Design™Guided implementation: your BIM and project leads do the work; Sterling supplies the structure, templates, workshops and coaching.
  2. 02
    Drive™Fully managed consulting: Sterling consultants carry the agreed work with your information managers, design leads and task teams.
  3. 03
    Sustain™After certification: audit readiness, internal audits, template reviews, refreshers and training for new starters, year after year.
  4. 04
    Automate™The process running in Effivity: requirements, plans, matrices, capability assessments, approvals, risks, audits, actions and lessons learned in one workspace.
  5. 05
    Revise™Revised editions of the series, such as the Parts 1 to 3 now in draft, and changes in roles, clients, platforms or regions.

Week one settles who leads for Sterling, when the weekly session runs, what gets delivered and who signs it off. Progress is then reviewed against those decisions every week, so a gap shows up in week three, not at the assessment.

How Sterling OS™ works

ISO 19650 implementation

ISO 19650 requirements

Effivity · ISO 19650 process software, included in every engagement

How Effivity helps you fulfil, automate and simplify the requirements of ISO 19650-2:2018.

Each Sterling ISO 19650 engagement brings with it Effivity, the Sterling group's own ISO and GRC automation platform, in use in 50+ countries. Your consultant configures the workspace within the agreed scope, so information requirements, BEPs, responsibility matrices, delivery plans, capability assessments, QA and approval records, risks, audits and lessons learned live in one place. Your CDE keeps the information containers; Effivity keeps the records showing the process around them working, so the assessor reviews a live process, not a binder. Effivity is included with the engagement, at no additional cost, for every Sterling consulting client.

Effivity: Context of the Organisation dashboard with issues, interested parties and scope
Effivity · Context of the Organisation dashboard
Assessment and need

Information requirements, standard and protocol

OIR, AIR and PIR, delivery milestones, the information standard, production methods and procedures and the information protocol, held as controlled documents with owners and versions, ready to issue with every appointment.

Invitation to tender

Exchange information requirements and tender packs

EIR templates, reference information and shared resources, and tender response requirements with evaluation criteria, assembled from controlled sources so each invitation starts from the current version.

Tender response

BIM execution plan, capability and capacity

Pre-appointment BEPs from a controlled template, capability and capacity assessments for each task team completed as scored forms, and the mobilisation plan and risk register with owners and dates.

Appointment

Responsibility matrix and delivery plans

The detailed responsibility matrix, the TIDPs and the MIDP held as registers with deliverables, owners, dates and status, and a checklist confirming what each appointment document must carry.

Mobilisation

People, technology and tested methods

Mobilisation checklists for resources and IT, a record that the production methods were tested before production began, and competence records for everyone involved, linked to Sterling Academy.

Collaborative production of information

Quality checks, reviews and approvals

QA check results, review comments and approvals logged against each milestone, with issues tracked to closure. The models and drawings stay in your CDE; the record of how they were checked lives here.

Information model delivery

Authorisation and acceptance

Submissions tracked against the MIDP, lead appointed party authorisation and appointing party acceptance recorded with dates, and rejections logged with reasons.

Project close-out

Archive, lessons learned and internal audit

A close-out checklist confirming the project information model is archived, a lessons-learned register that feeds the next BEP, and the internal audit programme sampling appointments across the organisation.

What this means at the audit

The assessor asks to follow an appointment: the client's requirements, your BEP, the responsibility matrix, the delivery plans, the capability assessments, the checks and approvals, the acceptance decisions and the lessons captured at close-out. Effivity shows each of them on screen with dates, owners and evidence attached, instead of a folder rebuilt from e-mail the week before the assessment. After certification, Sustain™ runs in the same workspace, so every later audit finds the process still working.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Set up for your agreed scope by your Sterling consultant
  • Existing templates, registers and records migrated, not retyped
  • Admin and user training for your BIM and project teams
  • Further modules, from QMS and ISMS to OHSMS and EMS, when you add standards

ISO 19650 client experience

Client letters on file, available on request.

Client feedback wall: letters on file

Signed client letters for ISO 19650 are available on request. The client feedback wall lists every letter by standard.

Integrated programmes with ISO 19650 in scope

How ISO 19650 joins an integrated system.

All case studies
  1. 01

    Design and engineering consultancies: quality, information security and BIM information management as one system

    How an ISO 9001, ISO/IEC 27001 and ISO 19650-2 programme typically runs for an architectural or engineering practice: one document and record control scheme, using the information standard's naming, status and revision rules for project information; ISO 9001 design review and the CDE's check, review and approve steps written as one step, not two; ISO/IEC 27001 access control and supplier security applied to the CDE and the task teams, with ISO 19650-5 where a client's asset is sensitive; one internal audit programme sampling appointments for all three standards; and one management review reading information rejections, complaints and security incidents together. ISO 9001 and ISO/IEC 27001 are certified as management systems, ISO 19650-2 under a process certification scheme.

    Integrated management systems

Sterling Academy · ISO 19650 e-learning

Train everyone who touches project information, not just the BIM team.

Sterling Academy teaches through short video lessons with practice checkpoints and a final exam, and every learner who passes receives a numbered Certificate of Completion that can be verified online, whether they run the process or simply work within it. Through their consultant, Sterling consulting clients receive preferential Sterling Academy course access and special pricing, including complimentary awareness training for their people as part of the engagement.

  • ISO 19650 awareness for everyone who creates, checks or uses project information
  • Practitioner courses for information managers, BIM coordinators, design leads and document controllers
  • Internal auditor training, as applicable to your standard, for the people who will audit your process, within the engagement
  • Progress by office, team and appointment, and a training status report for the assessor
  • New starters and task teams trained as they join, so evidence stays current between audits
  • A Sterling consultant to turn to when a learner is stuck

Why Sterling

Want successful ISO 19650 certification? Come to Sterling.

Whether you are one design office or a contractor with teams in several countries, Sterling helps you run one information management process with clear local ownership. We work through differences in client requirements, CDE platforms, national annexes and local practice, so the process holds together without pretending every project is the same.

60+ countries, one method, since 2003

Management systems implemented for designers, engineers, contractors, operators and public bodies, with one engagement team accountable wherever your appointments are.

Everything in one all-inclusive proposal

One proposal prices consulting, Effivity, training and Academy access together and lists the certification body's fees on their own line. No surprises, ever.

A process your teams will actually use

Fewer documents, more effect: procedures, templates, CDE workflow, training and software fitted to how your offices bid, design and deliver, so people adopt the process rather than work around it.

Expert and experienced consultants

People who have put management systems to work across sectors and countries since 2003, and who set up your information management process correctly from the start, so the assessment finds a process that already runs.

The Sterling Promise

What our ISO 19650 certification success guarantee means

100%on-time completion · success · 8,100+ client engagements

We stay with you until the ISO 19650 certification outcome set out in your engagement is achieved: through implementation, preparation for the certification body's assessment and the closure of any findings it raises. Practical delivery, plain explanations, included software and learning for your people leave you with a working capability, not a certificate in a frame.

Your engagement names the ISO 19650 part, the certification scheme, the scope, the outcome and each party's responsibilities. You supply accurate information and run the agreed process on your appointments. Only the independent certification body judges conformity and decides on certification. The guarantee is about the agreed certification support; it does not promise future tender wins, framework places or error-free projects.

After certification

What happens after ISO 19650 certification?

The process has to keep working as clients, platforms, task teams and people change. New appointments are mobilised and tested, templates are updated from lessons learned, internal audits keep sampling projects, and the certification body returns for the audits its scheme requires; BRE's accredited scheme, for example, requires annual audits to keep the certificate.

As your markets grow, the process should grow with them. Under Sterling OS™ Sustain™ we review rejected submissions, capability gaps, CDE practice and client feedback with you, alongside the internal audits and preparation for each certification body visit, so the process stays in use between audits instead of being refreshed just before one.

FAQs

Frequently asked questions about ISO 19650

Is ISO 19650 the same as BIM Level 2?

Not quite. ISO 19650-1 and ISO 19650-2 evolved from the UK's BS 1192 and PAS 1192-2, part of the approach the UK called BIM Level 2 and required on government-funded projects from April 2016. The ISO series does not use the term. If a client still asks for BIM Level 2, confirm whether ISO 19650 working meets the requirement.

Can a small practice or subcontractor get ISO 19650 certified?

Yes. ISO 19650-2 can be applied by organisations of all types and sizes, whatever the asset or procurement route, and "shall consider" lets the process be scaled. A small task team needs clear responsibilities, a working information standard and a disciplined CDE, not a thick manual.

Is ISO 19650 certification mandatory?

No law makes certification compulsory in general, but clients and policies can make the process a condition of work, as the UK Construction Playbook and Dubai Municipality's BIM requirement show. A certificate is one way to show that your process meets ISO 19650-2; check whether your client wants a certificate or evidence of the process.

Is ISO 19650 a management system standard?

No. ISO 19650-2 specifies requirements for information management in the form of a management process, but not on the harmonised structure of ISO 9001 or ISO/IEC 27001. Where its certification is accredited, as in the UKAS-accredited schemes of BSI, BRE and LRQA, it is process certification under ISO/IEC 17065. Some bodies also offer verification or certification under their own schemes, with or without accreditation; ask which you are offered.

Which part of ISO 19650 should we be certified to?

For designers, engineers and contractors, ISO 19650-2, the delivery phase; some certificates cite ISO 19650-1 alongside it, but Part 1 on its own gives concepts and recommendations rather than requirements. Organisations handling sensitive assets can add ISO 19650-5, for which BSI, for example, runs a security Kitemark; asset owners and operators should ask their certification body about ISO 19650-3.

Do we need particular CDE software?

The standard names no product. ISO 19650-1 describes the common data environment as a solution and a workflow: information containers move through work in progress, shared, published and archive states, with checks and approvals at the transitions. Whatever your platform, the assessor looks for that workflow in use and its audit trail.

Will Sterling issue our ISO 19650 certificate?

No. Sterling consults; it does not certify. An independent certification body assesses your process against ISO 19650-2 and makes the certification decision. A provider that sells you the consulting and the certificate together is selling a document, not an assessment.

What happens when the revised ISO 19650 is published?

In the drafts, Part 2 becomes a single information management process replacing both ISO 19650-2:2018 and ISO 19650-3:2020, and Part 3 becomes implementation guidance. ISO has decided to run a further draft ballot on Parts 1 to 3, so the text and the timing can still change; until publication, certificates are issued against the current editions. Sterling's Revise™ service tracks the drafts for you.

What information do you need to quote for ISO 19650?

The roles you want certified, the offices, disciplines and approximate headcount, the live appointments that could provide evidence, your CDE platform, any existing certificate, any client or framework requirement, and your deadline. From that we can scope the engagement and set an all-inclusive proposal; no manual needs writing first.

Before the first call

Prepare a useful ISO 19650 readiness brief

You can come to the first conversation without a manual. Bring a short account of how your projects are won, produced and handed over, and where the certificate should help. Seven questions cover it:

  1. Which client, framework or tender is asking for ISO 19650, and does it want a certificate, an accredited certificate or evidence of the process? Or, if nobody has asked, what do you want to stop going wrong?
  2. Which roles do you play: client or asset owner, lead appointed party, appointed party, or several?
  3. Which offices, disciplines and task teams would the certificate cover, and roughly how many people?
  4. Which live appointments could show the process working in the coming months, and at what stage are they?
  5. Which CDE platform, templates, naming conventions and BEPs do you use today, and which work?
  6. Who will decide, and who can spare time for implementation, internal review and training?
  7. Is there a framework renewal, a tender date or a client deadline to plan around?

Your answers shape the scope and keep the proposal realistic. Nobody scores them, and they decide nothing.

Don’t be fooled by certification scams

If it takes ten days, it is not ISO 19650 certification.

An ISO 19650 certificate is worth having when its scheme, part and scope answer your client's question and the process behind it can be followed through a real appointment. The market also sells paper: certificates from bodies that never look at a project, consultants who write everything while your teams carry on as before, and assessments that never open the CDE. They cost less, until a client or a framework panel asks to see an appointment.

How to choose a credible ISO 19650 provider

  1. Ask which body issues the certificate and under which scheme, and where you can check its status and scope in that body's own register.
  2. Check whether the scheme is accredited, and by whom, directly with the accreditation body; in the UK, UKAS lists ISO 19650-2 process certification in the schedule of each body it accredits for it.
  3. Read the part and edition on the certificate. ISO 19650-1 sets out concepts and recommendations; the requirements an assessment tests are those of ISO 19650-2, or of Part 5 where a scheme covers it.
  4. Ask how the assessment will look at real appointments, not only at procedures. A BEP with another company's name in it, or a CDE nobody uses, will not survive a client's review.
  5. Separate a person's training certificate from your organisation's certificate. A course certificate shows what one person learned, not whether your process runs on appointments.
  6. Leave when you hear "certified in 7 to 10 days" or "we write everything for you", or see consulting and certificate on one invoice. An information management process has to run on appointments before anyone can assess it.
All ten warning signs of shortcut certification

Keep exploring

More on ISO 19650 and related standards

Talk to a consultant

Plan your ISO 19650 certification with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice