Where we work · Comoros
ISO and GRC certification consulting in Comoros
Achieve ISO and GRC certification in Comoros with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Johannesburg office team
- Effivity and Academy included
Sectors that ask for certification in Comoros
Clients include
ISO and GRC certification in Comoros at a glance
Export crops and an island economy set the tone for certification and compliance work in Comoros. The regional community SADC, which admitted Comoros in 2017, lists ylang-ylang, vanilla and cloves among its natural resources and names agriculture, tourism and the blue economy as potential still to be developed, and a UNDP programme on the export competitiveness of the same three crops ran to 2024. Banks and other financial institutions answer to the Banque Centrale des Comores, whose published regulations cover internal control and risk management, governance and electronic money. Telecommunications and digital operators answer to ANRTIC under Law No. 14-031/AU on electronic communications, as amended by Law No. 23-024/AU. SADCAS lists Comoros as a member state through a focal point at the Direction Générale de l'Industrie but shows no accredited organisations there, so certificates usually carry accreditation from another economy. Certificates come from accredited certification bodies, never from Sterling. Sterling serves Comoros from its Johannesburg office, drawing on 8,100+ client engagements in 60+ countries, with Effivity and Sterling Academy included with the engagement.
ISO and GRC standards Sterling delivers in Comoros
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Comoros (3)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Loi portant protection des données à caractère personnel — Law on the protection of personal data Commission nationale de l'informatique et des libertés (CNIL), the independent administrative body that Article 19 of the text sets up to oversee personal-data processing, with nine members and a three-member bureau | Applies to automated processing of personal data held in digital files, and to manual files, and brings identification schemes based on civil-status, biometric and national identification numbers within its rules. The text sets principles for processing, rights for the people concerned, formalities with the Commission before certain files are created and sanctions, and leaves application detail to a decree. | |
| Banque Centrale des Comores (BCC) Banks, financial institutions and intermediaries supervised by the central bank | The BCC's page of regulatory texts lists, among others, Règlement n°011 on the internal control and risk-management arrangements of credit institutions, Règlement n°002/2018 on governance, Règlement n°01_2017_BCC_DSBR on electronic money, Règlement 015 on applying the Decree on payment systems, means and incidents, and Règlements 016 to 018 on approvals under Law No. 13-003/AU. The page lists titles; it does not show the texts, and no ISO standard is named in the titles. | |
| Autorité Nationale de Régulation des Technologies de l'Information et de la Communication (ANRTIC) Telecommunications, internet and digital network operators | Law No. 14-031/AU of 17 March 2014 on electronic communications, amended by Law No. 23-024/AU, promulgated by Decree No. 24-003/PR. ANRTIC is an administrative public body attached to the ministry in charge of electronic communications. The amended text sets licence conditions that include confidentiality and neutrality of transmitted messages, requires operators connecting to public networks to preserve their integrity and security, gives ANRTIC audit, inspection and investigation powers, and requires approval of terminal and radio equipment. It does not cite an ISO standard. |
Accreditation and recognition
- Southern African Development Community Accreditation Service (SADCAS): Regional accreditation body whose member-state pages include Comoros; the Comoros page names a focal point at the Direction Générale de l'Industrie and currently shows no accredited organisations.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Loi n°11-027/AU du 29 décembre 2011 portant passation des marchés publics et délégation des services publics (Public Procurement Code), and online tender system Comores Marché Public (Direction nationale de contrôle des marchés publics and the Autorité de régulation des marchés publics, the control and regulatory bodies the law provides for; procuring authorities run each tender): The Ministry of Justice's legislation site lists the Public Procurement Code as Law No. 11-027/AU of 29 December 2011 (the PDF cover prints 11-022AU). The law sets the principles of free access, equal treatment of candidates and transparency, creates the national procurement control directorate and island directorates, and provides for a regulatory authority. The same site lists Decree No. 23-080/PR of 15 August 2023 on the online tender management system named Comores Marché Public. Qualification criteria and the evidence required are set in each tender document; the Code does not make an ISO certificate a general requirement, so read the qualification clause of the tender you are bidding on.
Sterling in Comoros
Sterling delivers in Comoros from its Johannesburg office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Comoros clients ask
Does Comoros have its own accreditation body for ISO certification?
Accreditation is regional: the service SADCAS counts Comoros among its member states, naming a focal point in the Direction Générale de l'Industrie, yet its Comoros page records no accredited bodies. Certificates for Comoros sites usually carry accreditation from a body in another economy. Compare each body's accreditation scope with what your buyer accepts.
Which regulator supervises banks in Comoros?
The Banque Centrale des Comores supervises credit institutions and financial intermediaries. Its regulatory page lists texts on internal control and risk management, governance, electronic money and payment systems, plus approval rules under Law No. 13-003/AU. Those titles do not name an ISO standard, so ask the BCC how it expects an institution to evidence a given control.
Who regulates telecoms and digital operators in Comoros?
ANRTIC regulates the sector under Law No. 14-031/AU on electronic communications, as amended by Law No. 23-024/AU. Licence conditions include confidentiality and neutrality of transmitted messages, operators must preserve the integrity and security of the public networks they connect to, and ANRTIC can audit and inspect. Confirm your own licence conditions with ANRTIC.
Which products shape export-quality demand in Comoros?
Ylang-ylang, vanilla and cloves. SADC lists them among Comoros' natural resources, and a UNDP programme on the export competitiveness of those three crops ended in 2024. Buyers of such crops often ask for food-safety or quality-system evidence from processors and exporters, but the buyer sets the exact requirement, so ask each customer what it accepts.
Which language are certification audits conducted in for Comoros sites?
Usually French. SADC lists French and Arabic as official languages, and legislation published by the Ministry of Justice is in French. Audit interviews can use other languages where staff prefer if the certification body can staff them. Agree the audit language, any interpreter and the language of controlled documents when you apply.
Is Comoros part of a regional economic community?
Yes. The SADC country page says Comoros was admitted at the 37th SADC Summit in August 2017 and became a full member at the 38th Summit in August 2018. SADCAS, the regional accreditation service, also lists Comoros as a member state. Membership does not itself create a certification requirement, so check each buyer's terms.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Loi portant protection des données à caractère personnel — Law on the protection of personal data — justice.gouv.km (accessed 23 Oct 2026)
- The BCC's page of regulatory texts lists, among others, Règlement n°011 on the internal control and risk-management arrangements of credit institutions, Règlement n°002/2018 on governance, Règlement n°01_2017_BCC_DSBR on electronic money, Règlement 015 on applying the Decree on payment systems, means and incidents, and Règlements 016 to 018 on approvals under Law No. 13-003/AU. The page lists titles; it does not show the texts, and no ISO standard is named in the titles. — banque-comores.km (accessed 18 Oct 2026)
- Law No. 14-031/AU of 17 March 2014 on electronic communications, amended by Law No. 23-024/AU, promulgated by Decree No. 24-003/PR. ANRTIC is an administrative public body attached to the ministry in charge of electronic communications. The amended text sets licence conditions that include confidentiality and neutrality of transmitted messages, requires operators connecting to public networks to preserve their integrity and security, gives ANRTIC audit, inspection and investigation powers, and requires approval of terminal and radio equipment. It does not cite an ISO standard. — justice.gouv.km; anrtic.km (accessed 18 Oct 2026)
- Southern African Development Community Accreditation Service (SADCAS) — sadcas.org (accessed 18 Oct 2026)
- Loi n°11-027/AU du 29 décembre 2011 portant passation des marchés publics et délégation des services publics (Public Procurement Code), and online tender system Comores Marché Public — justice.gouv.km (accessed 23 Oct 2026)
Talk to a consultant
Plan your certification with the Johannesburg team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
southafrica@sterling-grc.com+1 201 263 4443 (global headquarters) · the Johannesburg office replies by e-mail within one working day
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice