Where we work · Afghanistan
ISO and GRC certification consulting in Afghanistan
Achieve ISO and GRC certification in Afghanistan with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Dubai office team
- Effivity and Academy included
Sectors that ask for certification in Afghanistan
Clients include
ISO and GRC certification in Afghanistan at a glance
Afghan organisations meet ISO and GRC standards mainly through three channels: sector rules, overseas buyers and public or internationally funded tenders. Da Afghanistan Bank licenses and supervises banks, payment system operators and money service providers and publishes regulations on know your customer, electronic fund transfers and payment oversight. The Ministry of Public Health lists a Medicines Law and a regulation on producing and importing medicines and medical supplies. The Ministry of Communications and Information Technology lists a Law on Electronic Transactions and Signatures, and the National Environmental Protection Agency refers to an Environment Law. Afghanistan has been a World Trade Organization member since 29 July 2016, which keeps exporters in front of buyers who ask for accredited certificates. Certificates come from accredited certification bodies, never from Sterling, and for Afghan organisations they usually carry accreditation from another economy. Sterling, with 8,100+ client engagements in 60+ countries, serves Afghan clients from its Dubai office; audits and consulting are delivered remotely, or on site where it is practical and safe to do so, and Effivity and Sterling Academy are included with the engagement.
ISO and GRC standards Sterling delivers in Afghanistan
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Afghanistan (5)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Da Afghanistan Bank (DAB) Banking, payments and money services | The bank's own site lists among its main tasks the issuing of licences and the regulation and supervision of banks, foreign exchange dealers, money service providers, payment system operators, securities service providers and securities transfer system operators. Its laws page lists the Da Afghanistan Bank Law, the Afghanistan Banking Law, anti-money laundering and counter financing of terrorism laws, the Negotiable Instrument Law, the Secured Transaction of Movable Property Law, the Law of Mortgage on Immovable Property and a Financial Leasing Law. Its regulations page lists, among others, the Bank Licensing and Permitting Regulation, the Corporate Governance Regulation, the Know Your Customer Regulations, the Branchless Banking Regulation, the Regulation on Electronic Fund Transfers, the Licensing and Oversight of Payment regulation, the External Audit Regulation and the AML/CFT Responsibilities and Preventative Measures Regulation. | |
| Ministry of Public Health Medicines, medical supplies and health facilities | The ministry's legal page lists a Public Health Law, a Medicines Law, a Pharmacy regulation, a regulation on the production and importation of medicines and medical supplies, a regulation on private health centres, a regulation on private medical laboratories, a regulation on private X-ray clinics and a regulation on medical waste. | |
| Ministry of Communications and Information Technology (MCIT) Telecommunications, electronic transactions and information technology | The ministry's legal page lists a Law on Electronic Transactions and Signatures and a Telecommunications Services Regulation Law, together with a regulation on the use of radio frequencies and wireless equipment. Separate pages list the mobile, internet and postal service companies the ministry works with. | |
| National Environmental Protection Agency (NEPA) Environment | NEPA's site refers to the Environment Law and describes a directorate for environmental monitoring and inspection that oversees the application of environmental policies and strategies, a climate change directorate and an online environmental complaint form. | |
| Ministry of Agriculture, Irrigation and Livestock Agriculture, irrigation and livestock | The ministry's English page presents agriculture, irrigation, livestock and natural resources as its sectors. |
Accreditation and recognition
- No national accreditation body for management system certification identified: Not listed among the members of the international accreditation arrangement committee in its list dated 31 December 2025.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Procurement Law and procurement procedures (as listed on the Ministry of Communications and Information Technology legal page) (Public bodies, each under its own tender documents): The ministry's legal page lists a new Procurement Law and a procurement procedure. Individual tenders set their own criteria, and an ISO certificate is a requirement only where a tender document says so.
Sterling in Afghanistan
Sterling delivers in Afghanistan from its Dubai office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Afghanistan clients ask
Who licenses and supervises banks and payment providers in Afghanistan?
Da Afghanistan Bank. Its own site lists issuing licences, regulating and supervising banks, foreign exchange dealers, money service providers and payment system operators among its main tasks, and it publishes regulations on know your customer, electronic fund transfers and payment oversight. Check which of those regulations applies to your licence category with the bank before planning an ISO 27001 or PCI DSS programme.
Which instruments govern medicines and medical supplies in Afghanistan?
The Ministry of Public Health lists a Medicines Law, a Pharmacy regulation and a regulation on the production and importation of medicines and medical supplies, alongside rules for private health centres, laboratories and medical waste. None of the listed titles names an ISO standard, so quality system certification is usually a buyer or tender request. Confirm current status and duties with the ministry.
Are certification audits in Afghanistan conducted in English?
They can be, but expect Dari and Pashto in daily records. Official sites publish in those languages, with English pages on some. Agree the audit language, interpreters and the language of controlled documents with the certification body when you apply, and tell it early which interviews will run in Dari or Pashto so that audit planning allows for translation.
Is there a national accreditation body behind certificates for Afghan organisations?
None is listed among the members of the international accreditation arrangement committee in its list dated 31 December 2025. Certificates for Afghan organisations therefore usually carry accreditation from another economy within the international arrangements. Ask any certification body for its accreditation certificate and check that the scope covers your standard and sector.
How does Sterling serve organisations in Afghanistan?
Through its Dubai office, working directly with each team. Delivery is remote first, with visits to site when that is practical and safe. Sterling's consultants establish the management system and its evidence; Effivity and Sterling Academy come with the engagement; any certificate is issued by an accredited certification body.
Which electronic transactions law applies to Afghan technology providers?
The Ministry of Communications and Information Technology lists a Law on Electronic Transactions and Signatures and a Telecommunications Services Regulation Law on its legal page. Those titles frame electronic records and telecom services, and information security certification sits beside them as a customer expectation. Ask your counsel or the ministry which provisions bind your service before drafting policies.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- The bank's own site lists among its main tasks the issuing of licences and the regulation and supervision of banks, foreign exchange dealers, money service providers, payment system operators, securities service providers and securities transfer system operators. Its laws page lists the Da Afghanistan Bank Law, the Afghanistan Banking Law, anti-money laundering and counter financing of terrorism laws, the Negotiable Instrument Law, the Secured Transaction of Movable Property Law, the Law of Mortgage on Immovable Property and a Financial Leasing Law. Its regulations page lists, among others, the Bank Licensing and Permitting Regulation, the Corporate Governance Regulation, the Know Your Customer Regulations, the Branchless Banking Regulation, the Regulation on Electronic Fund Transfers, the Licensing and Oversight of Payment regulation, the External Audit Regulation and the AML/CFT Responsibilities and Preventative Measures Regulation. — dab.gov.af (accessed 18 Oct 2026)
- The ministry's legal page lists a Public Health Law, a Medicines Law, a Pharmacy regulation, a regulation on the production and importation of medicines and medical supplies, a regulation on private health centres, a regulation on private medical laboratories, a regulation on private X-ray clinics and a regulation on medical waste. — moph.gov.af (accessed 18 Oct 2026)
- The ministry's legal page lists a Law on Electronic Transactions and Signatures and a Telecommunications Services Regulation Law, together with a regulation on the use of radio frequencies and wireless equipment. Separate pages list the mobile, internet and postal service companies the ministry works with. — mcit.gov.af (accessed 18 Oct 2026)
- NEPA's site refers to the Environment Law and describes a directorate for environmental monitoring and inspection that oversees the application of environmental policies and strategies, a climate change directorate and an online environmental complaint form. — nepa.gov.af (accessed 18 Oct 2026)
- The ministry's English page presents agriculture, irrigation, livestock and natural resources as its sectors. — mail.gov.af (accessed 18 Oct 2026)
- No national accreditation body for management system certification identified — iaf.nu (accessed 18 Oct 2026)
- Procurement Law and procurement procedures (as listed on the Ministry of Communications and Information Technology legal page) — mcit.gov.af (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Dubai team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
uae@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice