Where we work · Botswana
ISO and GRC certification consulting in Botswana
Achieve ISO and GRC certification in Botswana with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Johannesburg office team
- Effivity and Academy included
Sectors that ask for certification in Botswana
Clients include
ISO and GRC certification in Botswana at a glance
Botswana's appetite for ISO and governance work is being set by new statutes rather than by one long-standing rule. The Cybersecurity Act, 2025 creates a National Cybersecurity Authority with powers over critical information infrastructure, the Digital Services Act, 2025 sets security duties for public and private bodies, and the Medicines and Related Substances Act, 2025 continues the Botswana Medicines Regulatory Authority with powers over medical devices. Each Act says it comes into operation on a date the Minister appoints by Order in the Gazette. Banks answer to the Bank of Botswana, insurers, lenders and pension funds to NBFIRA, and food processors to the Ministry of Health and Wellness. Special economic zones run by SEZA target agro-processing, meat and leather, financial services, energy, chemicals and diamond beneficiation. Botswana has no national accreditation body; SADCAS, headquartered in Gaborone, serves it, and certificates come from accredited certification bodies, never from Sterling. Sterling's Johannesburg office serves clients across Botswana, on site where the work needs it and remotely otherwise, with 8,100+ client engagements in 60+ countries and Effivity and Sterling Academy included.
ISO and GRC standards Sterling delivers in Botswana
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Botswana (9)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| National Cybersecurity Authority, established by the Cybersecurity Act, 2025 Owners of critical information infrastructure and providers of cybersecurity services | Cybersecurity Act, 2025 (No. 21 of 2025), assented on 5 November 2025 — the Authority sets codes of practice and standards, licenses cybersecurity service providers, designates and registers critical information infrastructure, audits it periodically (an independent auditor may be appointed) and receives incident reports through the Botswana Computer Security Incident Response Team; the Act comes into operation on a date the Minister appoints by Order in the Gazette. | ISO/IEC 27001, ISO 22301, ISO/IEC 20000-1 |
| Digital Services Authority, established by the Digital Services Act, 2025 Public and private bodies delivering digital services | Digital Services Act, 2025 (No. 22 of 2025), assented on 17 October 2025 — the Authority formulates digital services standards; public and private bodies embed security safeguards, carry out annual security reviews and report incidents as the Cybersecurity Act provides, and the Authority may audit them; the Act comes into operation on a date the Minister appoints by Order in the Gazette. | ISO/IEC 27001, ISO/IEC 42001 |
| Botswana Communications Regulatory Authority (BOCRA) and its national computer security incident response team Telecommunications, broadcasting and other BOCRA-licensed service providers | Baseline Security Requirements for Services Providers, revision 1.0 dated 4 November 2025 — lists ISO/IEC 27001:2013 among its bases and asks for an information security management system that complies with recognised standards such as ISO 27001 or the NIST Cybersecurity Framework, plus annually reviewed business continuity and disaster recovery plans; the document footer marks the revision as a draft. | ISO/IEC 27001, ISO 22301 |
| Bank of Botswana Banks and payment systems | Banking Act, 1995 (Cap 46:04), which gives the central bank power to license, supervise and regulate banks, and the National Clearance and Settlement Systems Act, 2003 (Cap 46:06), under which the Bank oversees payment and settlement systems, licenses new entrants and monitors systemically important payment systems. | PCI DSS, ISO/IEC 27001, ISO 22301, SOC 2 |
| Non-Bank Financial Institutions Regulatory Authority (NBFIRA) Pension funds, insurers, securities firms and lenders outside the banking sector | NBFIRA Act, 2023 — NBFIRA says section 5 mandates it to regulate and supervise non-bank financial institutions across pensions, securities, insurance and lending, with licensing, conduct of business and financial crime deterrence among its objectives. | ISO/IEC 27001, ISO 22301, SOC 2 |
| Botswana Medicines Regulatory Authority (BoMRA) Manufacturers, importers and distributors of medicines, medical devices and cosmetics | Medicines and Related Substances Act, 2025 (No. 29 of 2025), assented on 24 December 2025 — continues BoMRA, whose functions include registering regulated products, inspecting manufacturing premises and foreign manufacturers for good manufacturing practice, licensing operators and quality control laboratories and post-market surveillance; medical devices fall in four risk classes, and the Act comes into operation on a date the Minister appoints by Order in the Gazette. | ISO 13485, ISO/IEC 17025 |
| Ministry of Health and Wellness Food processors, manufacturers and food businesses | Public Health Act — the Ministry states that the health sector is regulated by that Act and that it sets standards for food processing, manufacturing and promotion, inspects food made available to the public and monitors compliance. | ISO 22000, HACCP, FSSC 22000 |
| Botswana Bureau of Standards (BOBS) National standards: all sectors | BOBS says it was formed to formulate national standards; the Special Economic Zones Authority describes it as Botswana's official standardisation body and a full member of ISO. Its role here is standards development only. | |
| Botswana Investment and Trade Centre (BITC) Investors and exporters | BITC promotes foreign and domestic investment and exports, runs the Botswana Exporter Promotion Programme and hosts the Botswana One Stop Service Centre, which houses government agencies that issue investor authorisations; its incentive pages do not ask for ISO certificates. | ISO 9001 |
Accreditation and recognition
- Southern African Development Community Accreditation Services (SADCAS): Multi-economy accreditation body, registered in 2005 under the Botswana Companies Act, 2003 and approved by the SADC Council of Ministers in August 2007, with its headquarters in Gaborone; SADCAS names Botswana among the SADC economies without a national accreditation body that it serves.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Economic zones
- Sir Seretse Khama International Airport Special Economic Zone (Gaborone): diamond beneficiation, engineering and electronic equipment, airport-linked business
- Fairgrounds Special Economic Zone (Gaborone): business process outsourcing, investment fund management, international banking and insurance, fintech
- Lobatse Special Economic Zone: meat processing, leather
- Tuli Block and Pandamatenga agropolis zones: horticulture, cereals and legumes, agro-processing
- Greater Palapye Special Economic Zone: renewable energy, coal beneficiation, manufacturing
- Sowa Town Special Economic Zone: salt and soda ash beneficiation, chemicals
- Francistown and Selebi Phikwe mixed-use zones: mixed use
Sterling in Botswana
Sterling delivers in Botswana from its Johannesburg office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Botswana clients ask
Does Botswana have a national accreditation body?
No. SADCAS, the multi-economy body set up under the SADC trade protocol and headquartered in Gaborone, names Botswana among the economies without a national accreditation body that it serves. Its management system scheme is internationally recognised for quality, environmental, occupational health and safety and food safety standards, and its Botswana page lists accredited laboratories. Read the accreditation mark on each certificate.
Which law governs cyber security duties for critical systems in Botswana?
The Cybersecurity Act, 2025 (No. 21 of 2025). It establishes the National Cybersecurity Authority, which designates critical information infrastructure, audits its owners, licenses cybersecurity service providers and receives incident reports through the national response team. The Act says it comes into operation on a date the Minister appoints by Order in the Gazette, so check the commencement notice with your counsel.
Who regulates medicines and medical devices in Botswana?
The Botswana Medicines Regulatory Authority, continued by the Medicines and Related Substances Act, 2025 (No. 29 of 2025). Its functions include registering regulated products, inspecting manufacturers for good practice and licensing operators, and the Act places medical devices in four risk classes. Commencement is by Ministerial Order in the Gazette, so confirm the date with BoMRA before planning registrations.
What do Botswana's special economic zones focus on?
Botswana's zones are run by the Special Economic Zones Authority. The airport zone targets diamond beneficiation and engineering, Fairgrounds targets financial services and outsourcing, Lobatse meat and leather, Tuli Block and Pandamatenga agro-processing, Greater Palapye energy and Sowa Town salt and soda ash chemicals. Permitted activities are agribusiness, manufacturing, logistics and internationally traded services.
Who regulates banks and non-bank financial firms in Botswana?
The Bank of Botswana licenses, supervises and regulates banks under the Banking Act, 1995 and oversees payment and settlement systems under the National Clearance and Settlement Systems Act, 2003. NBFIRA regulates pensions, securities, insurance and lending under its Act, 2023. Neither regulator's page names an ISO standard, so ask your supervisor what evidence it expects.
In which language are audits carried out in Botswana?
English, in practice: recent Acts, BOCRA publications and the investment agencies publish in it, so audit documents are usually English. Interviews on a shop floor, farm or mine site may suit a local language better. Settle the audit language, any interpreter and the language of controlled documents with the certification body at application, and write procedures in the language your teams actually use.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Cybersecurity Act, 2025 (No. 21 of 2025), assented on 5 November 2025 — bocra.org.bw (accessed 18 Oct 2026)
- Digital Services Act, 2025 (No. 22 of 2025), assented on 17 October 2025 — bocra.org.bw (accessed 18 Oct 2026)
- Baseline Security Requirements for Services Providers, revision 1.0 dated 4 November 2025 — bocra.org.bw (accessed 18 Oct 2026)
- Banking Act, 1995 (Cap 46:04), which gives the central bank power to license, supervise and regulate banks, and the National Clearance and Settlement Systems Act, 2003 (Cap 46:06), under which the Bank oversees payment and settlement systems, licenses new entrants and monitors systemically important payment systems — bankofbotswana.bw (accessed 18 Oct 2026)
- NBFIRA Act, 2023 — nbfira.org.bw (accessed 18 Oct 2026)
- Medicines and Related Substances Act, 2025 (No. 29 of 2025), assented on 24 December 2025 — bomra.co.bw (accessed 18 Oct 2026)
- Public Health Act — moh.gov.bw (accessed 18 Oct 2026)
- BOBS says it was formed to formulate national standards; the Special Economic Zones Authority describes it as Botswana's official standardisation body and a full member of ISO. Its role here is standards development only — bobstandards.bw; seza.co.bw (accessed 18 Oct 2026)
- BITC promotes foreign and domestic investment and exports, runs the Botswana Exporter Promotion Programme and hosts the Botswana One Stop Service Centre, which houses government agencies that issue investor authorisations; its incentive pages do not ask for ISO certificates — bitc.co.bw (accessed 18 Oct 2026)
- Southern African Development Community Accreditation Services (SADCAS) — sadcas.org (accessed 18 Oct 2026)
- Sir Seretse Khama International Airport Special Economic Zone (Gaborone) — seza.co.bw (accessed 18 Oct 2026)
- Fairgrounds Special Economic Zone (Gaborone) — seza.co.bw (accessed 18 Oct 2026)
- Lobatse Special Economic Zone — seza.co.bw (accessed 18 Oct 2026)
- Tuli Block and Pandamatenga agropolis zones — seza.co.bw (accessed 18 Oct 2026)
- Greater Palapye Special Economic Zone — seza.co.bw (accessed 18 Oct 2026)
- Sowa Town Special Economic Zone — seza.co.bw (accessed 18 Oct 2026)
- Francistown and Selebi Phikwe mixed-use zones — seza.co.bw (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Johannesburg team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
southafrica@sterling-grc.com+1 201 263 4443 (global headquarters) · the Johannesburg office replies by e-mail within one working day
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice