ISO 30401 · Knowledge management systems
ISO 30401 certification and requirements: keep what your organisation knows working for it.
ISO 30401 sets requirements for a managed system that captures, shares and renews that knowledge where the work needs it. Sterling's expert and experienced consultants build it with your teams, prepare the evidence and support you through the independent audit. We ensure successful certification for our clients.
- Fixed scope, one proposal: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, in one proposal
- A team of expert and experienced management system consultants, with ISO management systems consulting delivered across sectors and countries since 2003
- The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides
8,100+ client engagements in 60+ countries.
ISO 30401 client experience
What it is
What is ISO 30401 and what is it used for?
ISO 30401 is the international requirements standard for knowledge management systems. It sets criteria for developing, deploying, sustaining, assessing and improving how an organisation handles its knowledge. It applies to organisations of every type and size, and ISO states that it can serve as a basis for management system certification.
The standard does not prescribe a particular technology or repository. It asks which knowledge matters, who holds it, how it stays current and whether the culture lets it flow. Typical aims: less expertise lost to turnover, faster onboarding and fewer problems solved twice.
Current edition. ISO 30401:2018, amended in 2022 and again in 2024 with the climate action changes common to ISO management system standards. ISO lists the standard as being revised, and a second edition has reached the draft international standard stage. Confirm the edition in your certification body's quotation.
Who it is for
Who needs ISO 30401 certification?
No law requires ISO 30401. It suits organisations whose results depend on a few experienced people, or whose clients pay for expertise. Enquiries usually arrive through one of four doors:
- A client asks how you protect and reuse expertise.
- A tender scores knowledge management. The wording decides whether a certificate or only evidence is needed.
- A regulator or oversight body expects continuity of competence. Critical know-how must survive staff turnover.
- A group or parent company sets a knowledge policy. Subsidiaries are asked to align local practice with one group-wide system.
Requirements
What are the main ISO 30401 requirements?
ISO 30401 follows the common clause structure of ISO management system standards, from context to improvement. Its knowledge-specific requirements sit mainly in clause 4, where the system itself and the culture around it are defined. The summary below stays at heading level; your system is audited against the standard itself.
- Clause 4 Context of the organisation: the issues, interested parties and scope of the system, including whether climate change is a relevant issue.
- Clause 4 Knowledge development: the systematic activities and behaviours through which knowledge is developed and kept current.
- Clause 4 Knowledge conveyance and transformation: how knowledge passes between people, is recorded, combined and absorbed into practice.
- Clause 4 Knowledge management enablers: the conditions, including human capital, that make knowledge work possible.
- Clause 4 Knowledge management culture: the behaviours and values that encourage sharing and learning.
- Clause 5 Leadership: commitment, a knowledge management policy, and roles with authority.
- Clause 6 Planning: risks, opportunities and knowledge management objectives with plans to reach them.
- Clause 7 Support: resources, competence, awareness, communication and documented information.
- Clause 8 Operation: planning and controlling the knowledge processes the system relies on.
- Clauses 9 and 10 Performance evaluation and Improvement: monitoring, internal audit, management review, corrective action and continual improvement.
What does useful ISO 30401 evidence look like?
A map of critical knowledge with named owners and risk ratings, hand-over and exit debriefs that happened, lessons-learned reviews that changed a procedure, and measures showing whether knowledge is found and used. Auditors interview people, so the culture must show.
Certification process
How do you get ISO 30401 certified?
The route is the familiar management system audit under ISO/IEC 17021-1. The auditor tests whether knowledge actually moves, so the system must run first.
- 01Decide the scope and the critical knowledge.Agree which functions, sites and knowledge domains the system covers, and which expertise the business most depends on.
- 02Gap analysis: compare current knowledge practice with ISO 30401.We review what already works and agree actions, owners and dates for the gaps.
- 03Build the system and let it run.Put the policy, objectives and knowledge processes into daily use and keep records of knowledge flowing.
- 04Audit internally and hold the management review.Internal audit tests the knowledge processes; management reviews results and closes gaps with evidence.
- 05Complete the certification body's audit.A Stage 1 readiness review, then the Stage 2 audit; the body decides, followed by surveillance audits at least once a calendar year and recertification on a three-year cycle.
Check the route before you sign. ISO 30401 does not appear by name in the scope of the Global ACI arrangement, which replaced the IAF MLA and ILAC MRA, and accredited certification for it is not offered everywhere. Ask the certification body whether its accreditation covers ISO 30401 itself, check that on the accreditation body's published schedule, and confirm that your client accepts the certificate. The certification buyer's checklist
Cost
How much does ISO 30401 certification cost?
Four parts make up the budget; the largest swing comes from how much knowledge practice already exists and how widely the system reaches.
| Cost component | What affects it |
|---|---|
| Consulting and implementation | Existing knowledge practice, the number of knowledge domains in scope, and whether you choose Design™ or Drive™ |
| Certification body's audits | Audit days, sites, travel and surveillance, quoted by the certification body |
| Your team's time | Knowledge mapping workshops, debriefs, community sessions and internal audit |
| Software and learning | Effivity and Sterling Academy access, itemised at no additional cost |
What moves the price
- How many functions, sites and countries sit in scope
- Whether knowledge practices exist informally or must be created
- Integration with an existing ISO system, which shortens the work
What a Sterling proposal always shows
- Deliverables, assumptions and exclusions in writing
- Milestones linked to deliverables
- One all-inclusive proposal for our work
Timeline
How long does ISO 30401 certification take?
Behaviour is the slow part: a policy takes weeks, but debriefing and reuse must become habits before the audit. An existing ISO system shortens the build. As an estimate, most programmes take six to nine months.
| Phase | What sets the pace |
|---|---|
| Scope and gap analysis | Access to leaders and experts, and agreement on critical knowledge |
| System build | Policy, knowledge processes, enablers and training |
| Operating period | Enough months of use to show knowledge flowing and measures moving |
| Certification audit | The certification body's calendar and time to close any findings |
Your engagement
What your ISO 30401 engagement includes
Sterling OS™ runs every engagement, and each phase has a knowledge management meaning. Sterling does not certify: an independent certification body audits your system and makes the certification decision.
Design™: guided support
Your people map critical knowledge and build the processes; a Sterling consultant sets the method, reviews every output and coaches the owners.
Drive™: managed support
The alternative to Design™ for teams short of time: Sterling drafts the policy, knowledge maps and procedures with your experts and runs the programme to the audit.
Sustain™: after certification
Internal audits, refreshed knowledge maps as people move, and preparation for each surveillance audit.
Automate™: Effivity
Your knowledge management system runs in Effivity, included with the engagement at no additional cost.
Training for your people
Internal auditor training, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.
Certification decisions remain with the independent certification body.
Often combined with
Standards organisations pair with ISO 30401
- API Spec Q1API Spec Q1 certification consulting for oil and gas suppliers: contract review, design, purchasing and release controlled, prepared for the APIQR audit.
- AS9100AS9100 certification consulting for aerospace and defence suppliers: ISO 9001 plus product safety, configuration and FAI, ready for an IAQG scheme audit.
- IATF 16949IATF 16949 certification consulting for automotive part makers: defect prevention, less variation and waste, prepared for an IATF-recognised body's audit.
- ISO 10001–10004ISO 10001–10004 requirements and guidelines: codes of conduct, complaints handling, disputes and satisfaction measurement, aligned with ISO 9001 by Sterling.
- ISO 10012ISO 10012 Measurement Management certification consulting: measurement processes and equipment controlled for valid results, ready for a certification audit.
- ISO 21001ISO 21001 certification consulting for schools, colleges and training providers: programmes designed, delivered and assessed to meet learners' needs.
Effivity · management system software, included in every engagement
How Effivity helps you fulfil, automate and simplify the requirements of ISO 30401:2018.
Effivity is the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. For an ISO 30401 client, your consultant configures the workspace within the agreed scope: the knowledge policy and objectives, risk registers for critical expertise, controlled procedures, training and competence records, internal audits, corrective actions and management review, all linked. Sterling consulting clients get their Effivity subscription included with the engagement, at no additional cost.
Scope, issues and interested parties
The boundaries of the system and the parties whose expectations shape it, recorded once and reviewed as the organisation changes.
Knowledge policy, roles and objectives
A policy leaders sign and use, knowledge owners with clear authority, and objectives with targets and dates.
Knowledge risks and opportunities
Single points of expertise, retirements and key-person dependencies logged with treatments followed to closure.
Competence and documented information
Training and competence records linked to Sterling Academy; procedures and guides kept under version control.
Knowledge processes in daily use
Debriefs, hand-overs and lessons-learned reviews scheduled, recorded and traced to the changes they caused.
Measures, internal audit and management review
Dashboards for knowledge objectives, an audit programme and a review record showing what leaders decided.
Nonconformity and corrective action
Knowledge failures, such as a repeated mistake or a lost method, investigated to root cause and closed with evidence.
Forms and workflows that match how you work
Fields, approvals and reports configured without code, so the system follows your practice rather than forcing a new one.
What this means at the audit
An auditor sampling ISO 30401 may pick one critical knowledge area and ask how it is protected, who owns it and what changed after the last lessons-learned review. With Effivity, the risk entry, the actions and the review decision behind that answer are already connected and dated.
In your engagement
- Subscription included with the engagement, at no additional cost
- Configured by your Sterling consultant within the agreed scope
- Your documents, records and registers migrated, not retyped
- Admin and user training for your team
- Modules for EMS, OHSMS, ISMS, FSMS and more when you integrate other standards
Sterling Academy · management system e-learning
Help every team understand why knowledge sharing is part of the job.
Sterling Academy offers video lessons with practice checkpoints, a final exam and a numbered Certificate of Completion that can be verified online. Sterling consulting clients benefit from preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.
- Awareness training that explains the knowledge policy and each person's part in it
- Internal auditor training, as applicable to your standard, as part of the engagement
- Progress reports by team, ready for the certification auditor
- New joiners trained as they arrive, so knowledge habits start on day one
Keep exploring
Explore more about ISO 30401
ISO 30401 resources
Services for ISO 30401
Why Sterling
Want successful ISO 30401 certification? Come to Sterling.
Knowledge management fails when it becomes a portal nobody opens. Sterling builds it into the routines people already follow, with one engagement team accountable.
60+ countries since 2003
Management systems built for consultancies, engineering firms, public bodies and technology companies, with offices in 21 countries.
All-inclusive proposal
Consulting, Effivity, training and Academy access in one proposal; certification body charges shown separately.
Integration with your existing ISO system
Knowledge management added to the document control, internal audit and management review you already run.
Expert and experienced consultants
Management system specialists who start with how your experts really work, then map it to the standard.
The Sterling Promise
What our ISO 30401 certification success guarantee means
We stay with you until your agreed ISO 30401 certification outcome is achieved, through implementation, the operating period and the closure of any audit findings.
The engagement identifies the standard, scope, outcome and responsibilities. Your organisation supplies accurate information and puts the agreed controls into use. The independent certification body assesses conformity and retains its certification decision. Our commitment concerns the agreed certification support, not a promise of every future contract award or flawless performance.
FAQs
Frequently asked questions about ISO 30401
Is ISO 30401 certifiable?
Yes, it is a requirements standard and ISO states it can serve as a basis for certification. Whether a certificate is issued under accreditation depends on the certification body and the country, so check that before you commit.
Do we need new knowledge management software for ISO 30401?
No. The standard is technology-neutral. Existing tools usually stay; the governance and measures are added around them.
How is ISO 30401 different from organisational knowledge in ISO 9001?
ISO 9001 requires you to determine and maintain the knowledge needed for your processes. ISO 30401 goes further and treats knowledge management as a complete system of its own, with policy, culture, enablers, objectives and audit.
Will the new edition of ISO 30401 affect our project?
Only in timing. Build to the 2018 edition today; once the second edition is published, your certification body will set out how and when certified organisations move across. Sustain™ clients hear from us when that happens.
Can a small consultancy or a single department be certified?
Yes. The scope can be one business unit or one site, provided its boundaries are clear. A small first scope can be extended later.
Talk to a consultant
Plan an ISO 30401 system that keeps your expertise in the business.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice